Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: r8dImFlRguNh1MMXKsKKliD1A9aA+QNGEU1EM1BwGtU=
Subject key identifier: 97:04:46:A3:0B:74:3A:C9:62:59:B2:1F:B9:1A:4E:95:0E:1F:47:26
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0197B77C1582732107D9300EE65965BAA3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 15C6
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: BpGdK4vNgugH_zIwdKpTLTonzFI.roa (hash: XCtnPAQsPAejFAsLvLkAMfASQaAA0TQU3hCkuPs7vLM=)
2: XOmOBh50cvCvJmnFjaJhaHYW2sE.roa (hash: 6F6wNjub6rC7wNAaFOeBE6JJ3w2cU7C6GJM4bNB9ZQQ=)
3: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: cBG0HQYPblQQ0eRRsXVammT/DxypS8hH9NsICEX92hM=)
4: viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa (hash: VBEvk2C209Y5tb0FL9tK/NrEWGQ6MCpm2RIBK/aQkDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:15:82:73:21:07:d9:30:0e:e6:59:65:ba:a3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=970446a30b743ac96259b21fb91a4e950e1f4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:71:3b:de:9e:9c:61:ba:69:ee:50:7e:08:b9:
4b:79:97:29:a7:18:ad:b9:a2:89:c2:3e:c7:84:4a:
3f:16:81:31:67:09:93:d1:89:a6:48:81:27:0c:c2:
86:d5:b8:2a:5b:1e:1e:b2:c9:84:a8:93:fc:2a:2a:
16:a1:df:de:b3:57:ca:3e:24:ce:10:a0:81:00:0d:
8a:19:a3:af:a4:45:25:48:6c:26:7d:77:cc:e7:da:
29:e6:08:62:b7:01:2b:d6:05:ab:c3:d1:9c:f3:db:
a9:ae:f5:1f:80:cd:f2:e2:16:b5:77:11:c5:fd:dc:
25:7f:f0:6e:25:92:73:a0:65:8f:9b:c3:33:a3:50:
b5:73:8a:fc:bf:82:6c:76:33:c9:3e:2a:ca:59:86:
b8:d7:1e:5c:48:40:2b:b2:e6:8b:e0:18:59:0f:16:
60:13:e6:f4:f0:19:31:a9:b6:3c:89:b7:13:fa:a5:
d7:40:36:20:94:6c:ac:b1:18:8e:66:e6:18:e1:c7:
29:d9:15:d0:75:e6:de:c8:8f:1f:61:87:44:dd:f5:
05:36:c0:4d:34:b2:a8:98:3d:06:17:3b:fb:88:77:
78:5a:e4:9f:23:dd:32:de:0e:4b:c9:3e:8b:65:d4:
d3:4e:d4:38:6d:ab:e8:e7:0e:f8:9a:cf:a3:dc:98:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:46:A3:0B:74:3A:C9:62:59:B2:1F:B9:1A:4E:95:0E:1F:47:26
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e8:0b:21:ed:c4:ba:f9:99:b3:15:e2:83:15:d6:df:43:86:
cb:bb:25:a6:12:9c:b1:ae:90:c0:74:7e:60:41:fe:f0:b5:77:
0c:4a:17:e9:d3:41:01:f4:69:d2:80:5b:e7:b9:c1:dc:9f:b6:
4e:d3:45:9e:6f:32:c5:41:f5:4e:0d:47:31:95:c5:c4:5d:bf:
64:b8:45:23:e2:24:1c:0a:fe:3c:d9:59:50:5b:38:8a:e4:e6:
a7:39:09:fd:29:e4:13:f3:f4:a8:87:65:e4:c0:96:88:94:6b:
3c:df:50:4b:ae:64:61:91:7c:26:a2:ec:b0:83:47:2b:95:78:
40:58:ec:52:1a:de:a9:9c:d6:33:67:55:7c:83:b0:9e:e7:50:
84:aa:68:c9:74:a5:3e:39:64:13:f7:ff:8f:45:b2:44:3a:ed:
fc:dd:bc:05:48:b7:a8:2b:55:c9:87:0e:40:b7:e9:17:2b:60:
f7:82:e6:ff:4c:23:8e:05:80:db:bc:6c:4a:f7:08:50:a9:d4:
f1:46:f3:dc:85:46:af:30:70:8d:e6:bb:1a:6e:9e:46:de:b1:
ca:23:4c:2f:b7:7a:d7:ff:2c:48:c8:4b:92:db:4c:ce:1a:96:
18:dd:a9:2c:0d:27:d8:29:74:84:56:57:fa:12:d7:4e:01:85:
3a:e6:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:26 2025 by rpki-client