Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: ZfNScUmexUhZWE+Q3U8aPbPRaBj5rn5y9EzRLk4KJw8=
Subject key identifier: 48:E1:E6:DA:EF:93:57:74:42:C1:3F:83:C7:33:2F:84:80:6E:50:96
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 0197B77CBEFCE5A01F5B1FC867E00C0C1AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 0431
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: vWNyhA/h0VcnGGA4D1UuDPqEaUjP/d1ggoSoM/Wo/CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:be:fc:e5:a0:1f:5b:1f:c8:67:e0:0c:0c:1a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=48e1e6daef93577442c13f83c7332f84806e5096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:1d:96:75:b0:35:d4:61:73:0d:f3:9d:08:
71:03:4f:fc:7a:96:a3:4f:71:60:44:ea:7d:1c:59:
91:e8:c4:31:b8:25:11:77:a5:9f:7a:79:17:c5:4c:
6b:ec:fe:53:ae:0c:cb:e7:cb:34:2d:26:d9:e8:35:
25:55:88:fd:9a:50:d6:d7:2f:8e:01:8a:99:66:23:
6e:fb:f0:1d:65:74:48:bd:62:73:5f:e7:51:6c:2a:
31:82:a8:dd:cf:d2:e4:12:31:3f:1b:a2:66:3a:40:
3c:3c:96:83:23:67:18:de:6c:b4:ba:4c:cc:64:bf:
17:58:e8:27:ef:ba:ae:8f:f3:64:1b:0f:0b:52:35:
13:a9:77:ab:d6:93:16:36:a0:37:5f:c2:6b:50:01:
12:b9:4a:69:7d:00:58:3e:c0:a3:69:af:4e:12:f4:
9e:e4:24:79:48:b3:2f:c0:89:84:57:62:66:bf:81:
92:dc:fa:6d:a4:7f:2f:86:78:92:40:1f:4f:bf:4f:
b6:f3:fb:12:a7:32:9c:3b:c8:10:6e:46:68:cd:76:
82:fb:c4:54:de:f9:1c:cd:03:40:b9:bf:16:5f:8f:
24:85:4c:d2:88:b0:27:86:23:46:36:75:17:21:9a:
af:b1:3a:26:59:af:c3:87:ac:1c:2a:0a:4d:12:bf:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:E6:DA:EF:93:57:74:42:C1:3F:83:C7:33:2F:84:80:6E:50:96
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f3:3c:22:d3:e8:81:54:63:68:29:d1:e7:3b:a0:88:62:5c:
76:ce:67:ee:5c:8e:72:9f:9e:96:21:fa:c3:67:b8:87:7e:87:
98:94:2d:46:47:2b:42:6f:2c:75:ab:6f:ed:fd:60:29:c6:25:
d6:9d:4f:0f:3d:0d:c5:2a:db:15:af:87:a1:14:4d:12:f0:89:
78:74:77:31:41:7e:64:9a:d3:9a:06:49:07:c9:73:5e:65:2a:
27:48:8f:ab:2f:84:6f:19:ce:ac:12:b5:71:c0:8f:a0:40:76:
1f:8f:a4:f0:ac:42:62:c2:32:3a:a8:5f:88:75:d1:07:2a:dc:
95:e8:08:2a:5f:ff:55:7b:4f:23:02:ec:a3:3a:b9:e4:2a:b2:
54:20:d9:f8:4f:0f:b6:b3:23:a2:b4:6e:f4:83:50:e2:01:3f:
a6:4a:a4:b4:b5:d0:7d:3c:be:40:a2:6a:67:60:e6:63:63:12:
38:66:42:9b:0d:62:4b:85:26:d4:1d:64:c8:05:58:ca:56:c3:
a2:86:eb:b5:9b:6a:7e:c4:fe:64:fe:23:e4:6a:36:32:bf:0e:
4c:ce:c9:58:a1:96:9d:06:9a:1e:e9:48:a1:89:f7:80:9a:2a:
10:00:2c:bd:d8:6e:5c:6c:62:7a:2c:53:67:78:31:03:cc:8a:
56:8d:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:03 2025 by rpki-client