Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: QnQzXxP/I8WwkoYZZ6grtiVUljVn+E2cUDDbT62b7bg=
Subject key identifier: 60:81:99:29:AA:0F:D9:A3:AF:E4:54:E7:29:FB:DE:E9:C9:DF:AA:47
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 0197C86FC372A8ED820FD48ABDDBE507147D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 1455
Signing time: Wed 02 Jul 2025 00:00:56 +0000
Manifest this update: Wed 02 Jul 2025 00:00:56 +0000
Manifest next update: Thu 03 Jul 2025 00:00:56 +0000
Files and hashes: 1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=)
2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: 8aG8Q/I5QGIOLN/tXUCuTf2hs/FHMOLD9GvkEp+1lM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:6f:c3:72:a8:ed:82:0f:d4:8a:bd:db:e5:07:14:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Jul 2 00:00:56 2025 GMT
Not After : Jul 3 00:00:56 2025 GMT
Subject: CN=60819929aa0fd9a3afe454e729fbdee9c9dfaa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:04:b7:b2:9f:fd:5b:a5:b1:08:67:09:06:
a1:53:a5:8d:6f:ad:20:04:86:02:b9:b1:78:05:2e:
71:4c:d1:60:71:cb:72:51:b4:8f:06:c2:26:14:c0:
f9:44:db:b1:81:3a:bf:6a:d1:4a:aa:cf:6d:cb:8c:
b3:87:4e:36:75:58:c5:9e:6c:4b:67:9a:4e:b7:5a:
94:d2:aa:f7:bc:45:32:85:2c:99:ba:c8:f9:e0:b0:
e9:14:d6:6c:62:fa:9c:cf:d1:a2:f6:17:0f:b3:07:
85:bd:22:a3:cc:7b:ca:75:12:fd:1d:66:ef:50:a5:
71:7d:a0:d8:98:d8:6e:40:28:ed:8f:cc:ec:12:6f:
82:a1:81:14:53:14:f2:66:ad:d4:94:e3:6f:69:0c:
5a:16:33:bb:a0:42:fc:03:0d:cf:1e:f1:1b:c6:1c:
38:64:46:db:80:4d:5a:82:de:c0:4c:d9:fb:51:49:
0c:d9:5f:49:71:11:78:a3:1c:67:03:5e:88:0f:1a:
54:6b:3f:a7:95:b6:34:79:b7:89:c9:1f:0e:a6:85:
c9:57:32:1e:f5:e2:f0:3e:e3:40:d7:ea:13:fb:eb:
bb:51:e5:ce:64:9a:8d:82:1c:ca:be:91:d7:1b:2c:
3c:ef:64:0a:ef:26:97:5b:10:59:3b:7c:5a:9c:d1:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:81:99:29:AA:0F:D9:A3:AF:E4:54:E7:29:FB:DE:E9:C9:DF:AA:47
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:96:39:5d:aa:47:4f:5a:a3:dd:62:d8:c1:b6:84:62:e0:c2:
1b:c4:b7:48:75:30:56:7b:04:e7:44:ef:6c:a5:12:0a:f8:9b:
6c:85:96:bf:a4:07:37:e5:0d:04:84:be:60:e1:c3:76:72:f2:
7f:75:42:b4:9b:8b:de:c4:e6:60:1c:18:ec:14:a1:e8:c2:99:
41:50:56:5c:d1:b6:e7:db:9b:1f:55:60:c0:11:5a:79:73:4e:
6f:94:5e:c3:12:ac:69:97:d4:01:97:7c:8a:60:f3:26:e2:6d:
3a:8e:29:0f:34:4a:15:13:27:77:61:56:9f:3e:9c:d3:e3:e5:
ce:2e:db:07:7c:c8:38:50:ee:7d:fe:cd:35:56:41:8e:bc:7d:
f6:db:85:1d:fa:2c:e5:8d:43:e9:ff:99:a1:2c:1a:ba:33:be:
08:7f:77:4b:1b:d2:7b:78:6b:bc:5a:7c:41:37:f2:45:d8:4a:
19:ae:d9:60:f0:da:81:93:e5:61:61:b1:a3:d5:da:7b:06:e6:
ab:a5:d8:07:79:44:c7:52:a6:36:6a:06:c9:54:3c:57:a4:f6:
96:02:2f:2a:71:3b:8d:68:03:3b:24:0e:f3:a1:4d:bf:d2:31:
80:6e:aa:f6:67:a5:e4:36:50:e1:9c:bf:c0:8f:85:8f:30:67:
f5:0d:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:47:00 2025 by rpki-client