Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: G1SpElI4Yl/9borm9XIZ8FG0DpzlXOKvG1EfcK9gD78=
Subject key identifier: 3F:4D:41:1B:C5:01:E3:F1:1B:9D:BF:8A:18:3E:FA:1D:80:1F:4D:A6
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 0197CCF1B6B0358CA01E97C2FD81507AF1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 10C1
Signing time: Wed 02 Jul 2025 21:01:22 +0000
Manifest this update: Wed 02 Jul 2025 21:01:22 +0000
Manifest next update: Thu 03 Jul 2025 21:01:22 +0000
Files and hashes: 1: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (hash: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=)
2: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (hash: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: gN3GXM2Vtll430qpbwVr9UhcSM08Kz80mfwPJmiRr/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:b6:b0:35:8c:a0:1e:97:c2:fd:81:50:7a:f1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jul 2 21:01:22 2025 GMT
Not After : Jul 3 21:01:22 2025 GMT
Subject: CN=3f4d411bc501e3f11b9dbf8a183efa1d801f4da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:63:08:ec:6c:c4:21:bf:0e:b7:6d:68:7d:
67:68:fd:72:21:6d:1d:0a:e4:42:e2:48:64:67:7b:
7c:f1:f1:dd:55:60:34:27:ca:06:32:99:3b:da:40:
a5:82:f4:6d:e8:94:cf:19:aa:4b:0b:10:47:80:3e:
e8:0f:f2:e3:19:24:09:49:7a:d2:9e:78:88:90:a8:
f5:48:d9:68:dd:31:49:69:d2:af:c2:bd:58:3a:26:
4e:b1:13:20:0e:25:ec:1a:de:6b:80:62:eb:1c:43:
a0:26:76:19:8f:16:92:14:29:09:19:2d:b7:40:46:
25:36:de:65:98:05:8b:e9:66:fd:52:3b:8f:05:eb:
8c:9c:6f:b3:c0:31:14:84:3a:6a:78:e1:f7:5f:3c:
9d:50:8a:6d:f5:2a:5b:9f:9c:47:6a:46:24:d9:77:
06:87:98:21:d1:2a:5a:19:10:6b:0c:f6:d2:92:d9:
1a:68:88:a0:ed:c5:82:d0:cd:48:62:d1:81:b4:2b:
2e:76:2c:21:84:31:68:e9:e8:96:b3:fc:d0:1b:77:
b7:54:90:1a:5f:1b:0e:89:84:c8:a5:12:7f:20:87:
7d:dc:00:7c:11:02:15:8d:f1:15:2a:f6:09:ac:4f:
3a:a7:83:21:7b:49:c3:5d:2f:62:22:04:de:73:08:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4D:41:1B:C5:01:E3:F1:1B:9D:BF:8A:18:3E:FA:1D:80:1F:4D:A6
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:c6:e1:7c:b6:9c:74:2d:4c:85:f3:8c:67:6c:11:82:74:
15:b4:81:9e:a2:81:33:5a:38:55:37:a9:04:e2:63:12:03:97:
1a:02:f5:f9:65:fe:e5:1b:43:0d:62:36:12:3a:ca:23:21:b8:
f1:9c:61:71:a9:12:25:24:89:7b:77:e3:5f:d6:05:2b:f7:74:
dc:30:49:a4:b5:a7:9f:ab:f1:96:5d:b9:d4:c9:74:b0:44:1a:
3e:dd:3a:b4:34:d1:de:70:3d:7c:40:05:ba:d7:bc:c9:25:c4:
ca:ed:d7:5c:ae:ba:59:23:77:e5:bb:b7:1f:92:da:9a:3c:e0:
f1:44:52:d2:e7:58:77:50:99:b9:c8:96:b7:f8:81:c7:46:b7:
34:5e:ab:30:c1:93:a7:c0:87:e2:59:f0:d2:89:87:0e:62:81:
c1:cd:e5:5f:49:96:e2:26:65:80:b2:55:85:55:12:4a:ce:88:
86:4d:ea:e9:4b:74:97:76:e6:38:66:cc:4a:c9:f6:62:81:95:
42:69:f2:c7:0e:68:c7:54:59:66:d0:2e:e9:84:72:79:f3:fe:
43:b1:5a:6a:8f:d3:24:34:5f:9b:6b:3a:07:1a:9f:07:fb:e2:
5a:14:4e:a8:b8:f9:61:fc:ef:94:43:fb:9f:38:2f:3c:64:90:
37:d7:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:12:03 2025 by rpki-client