Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: UmKp+0F4cMOH+5aHisPS9H3aI9vAEPDSANqp7P2pwa0=
Subject key identifier: 0C:1B:2D:50:CB:B2:C3:F7:7B:52:51:AB:5E:FE:57:5D:F2:48:C9:5F
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 0197B7B307642DA38B3DB1A316412D258AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: XWgQl2gNZbgufp9NzVImsDp4sF7uw4zTcb5X042io7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:07:64:2d:a3:8b:3d:b1:a3:16:41:2d:25:8a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=0c1b2d50cbb2c3f77b5251ab5efe575df248c95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:4f:ca:54:4a:d4:d9:9d:b7:dc:e3:7d:c2:
4b:ff:ae:c5:7d:59:13:c3:ba:4b:a6:3a:90:2d:63:
94:1e:95:26:2d:ea:2d:65:18:4f:b1:5d:08:1d:2f:
56:5b:c1:0e:22:df:bf:c8:7b:7c:88:5b:f9:da:82:
a6:ad:28:d1:88:45:9a:d1:31:04:67:fe:4d:69:1a:
08:5f:68:ef:1e:ac:11:5f:b6:ba:d0:a0:4d:1e:bc:
de:fd:be:5a:51:3d:b5:e1:3c:df:39:8a:f0:20:c5:
0b:c5:ff:8a:97:2f:4e:1f:8c:e8:3e:d2:b4:1f:17:
9c:2f:2e:e2:05:7d:e2:77:f2:53:73:8a:56:d8:b7:
9a:69:18:77:f8:90:64:1b:d7:8d:b0:39:e9:c3:61:
94:ba:da:28:a9:0e:78:2e:8e:2b:15:ca:2e:f2:17:
55:ff:80:2a:ce:e9:de:1c:2e:a9:f7:18:6f:7b:4b:
55:24:8a:b4:64:31:63:7d:14:0f:01:71:7e:84:02:
05:10:51:ff:67:bc:93:bd:12:15:9e:0c:63:da:a1:
59:3b:30:57:fd:cd:97:25:55:13:ac:19:7e:36:db:
5b:fa:8d:1c:45:92:e4:e4:11:56:9e:85:ea:ca:ff:
2f:e5:00:75:be:86:1c:90:10:c2:ff:68:e1:a7:fd:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1B:2D:50:CB:B2:C3:F7:7B:52:51:AB:5E:FE:57:5D:F2:48:C9:5F
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6b:0f:02:79:5f:f9:74:72:1f:ef:5f:c9:39:a1:bb:d8:ec:
71:7c:41:5a:7f:42:ed:74:9c:dc:3f:c7:4e:5b:de:f8:12:d7:
df:cf:24:1e:88:db:08:02:6b:f6:c9:d1:7b:97:ac:9d:fe:64:
2a:87:6a:59:2e:85:ea:1a:66:32:c9:39:3e:13:02:53:a2:37:
43:c3:7d:78:7c:14:61:e2:87:a3:0e:d8:8f:28:2d:0a:97:ba:
c5:aa:f0:0b:68:22:a0:55:45:86:97:08:e2:a3:69:3c:d1:52:
48:15:d8:5f:79:6e:d0:8b:a9:f7:e7:f4:c5:a9:13:88:9a:10:
2f:66:64:e6:69:2f:17:e3:fe:62:65:22:b7:34:60:32:f6:8a:
d2:b2:ae:26:e2:42:c0:7a:26:61:66:aa:2c:d6:ed:f5:f5:af:
1d:16:83:cc:d6:a3:f1:1b:59:1e:48:9b:ce:f4:0d:8c:d5:ef:
88:74:5e:55:44:47:36:32:07:08:75:1e:b4:c2:fa:8c:00:bc:
cb:e6:70:a8:2b:8b:a9:58:72:e6:e9:03:32:ff:4b:20:5c:44:
bc:bf:20:06:2a:9a:b0:69:73:ef:2e:ba:fd:2e:34:3e:e2:e7:
d0:8f:f1:42:d3:91:ea:76:04:67:de:da:90:7f:93:cd:6b:75:
9d:30:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:28 2025 by rpki-client