Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
File: hIkfjbCMEQ2bW160xalXnkEzyBY.mft (raw, json)
Hash identifier: MlV+nW82crR3ETn3Nugc9pNUe6JX3R5bQwyTvBUFIAA=
Subject key identifier: 0A:F0:5B:32:72:21:45:BA:55:32:7E:A0:C1:25:1D:6E:E2:B5:85:96
Authority key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Certificate issuer: /CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Certificate serial: 0197B820F1DA163B8DD06A608B4655B2213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
Manifest number: 055F
Signing time: Sat 28 Jun 2025 20:00:55 +0000
Manifest this update: Sat 28 Jun 2025 20:00:55 +0000
Manifest next update: Sun 29 Jun 2025 20:00:55 +0000
Files and hashes: 1: VhR6-WTquHS_2jnfD6TSdxmLio8.roa (hash: W0QV+vJybHz/CWW9vsyk2vI5OGmRUVH5JOXqdf8uQIU=)
2: hIkfjbCMEQ2bW160xalXnkEzyBY.crl (hash: +KPj+j7EImhZ7pXnrtC68ZdvDE0W18G4/Z1ryjmlACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f1:da:16:3b:8d:d0:6a:60:8b:46:55:b2:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Validity
Not Before: Jun 28 20:00:55 2025 GMT
Not After : Jun 29 20:00:55 2025 GMT
Subject: CN=0af05b32722145ba55327ea0c1251d6ee2b58596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:6a:d4:1b:e6:78:69:59:3b:4f:82:8c:5e:
d0:d8:74:41:b2:f1:d4:99:e2:fe:a4:3d:85:fc:f2:
c5:60:b1:cf:8e:16:3e:ff:af:06:df:19:ce:bd:bc:
1c:62:e9:64:21:4c:7c:e0:2a:0f:e7:83:53:e9:32:
ea:23:5a:42:ac:36:d7:9e:2f:bd:27:cf:40:42:e5:
70:d8:0d:f7:03:f6:0a:d6:23:bf:26:58:4c:50:19:
0f:56:d3:18:6a:cf:84:f8:25:6b:ef:2e:16:65:cf:
09:85:ff:5e:13:c7:3d:9e:f8:79:9d:65:61:b3:62:
5b:95:09:3f:cc:18:73:f5:9d:6b:20:48:16:a3:66:
a8:b4:5a:01:df:d6:dd:f7:d6:58:09:46:b6:f6:99:
7e:48:96:1f:43:68:0e:79:89:ce:92:2e:f5:c8:96:
e1:40:97:ba:87:67:69:3c:9a:88:3e:7e:cd:98:86:
b5:07:e9:a9:a7:7c:8e:84:0f:d6:ae:be:4a:5a:d0:
bb:bb:a5:51:c6:aa:87:a9:15:ed:b3:7f:ca:42:ea:
28:03:d1:cb:fd:15:e3:82:58:24:4b:6e:3e:78:30:
3c:9d:96:db:60:de:83:7a:aa:df:fe:86:85:72:26:
55:a4:ba:1d:ca:55:20:84:a3:f4:f4:4e:dd:65:9f:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:5B:32:72:21:45:BA:55:32:7E:A0:C1:25:1D:6E:E2:B5:85:96
X509v3 Authority Key Identifier:
keyid:84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5f:b4:c5:74:25:f0:92:d1:01:b6:8f:7a:c1:92:29:76:42:
1a:e7:9c:96:9f:2b:86:7f:19:24:2c:60:96:66:ae:34:83:0c:
52:77:99:60:0a:34:a2:9a:54:c7:95:ec:b7:f0:d3:33:b7:be:
44:36:13:92:bd:67:e3:33:06:75:b1:98:15:30:f2:63:8c:23:
01:3e:97:04:5f:72:ae:3f:ca:78:00:a3:5a:43:c6:cd:16:6d:
6a:af:31:ac:41:ca:45:6d:6a:0f:bc:31:2e:7c:66:9a:93:04:
c4:92:58:af:58:73:8b:f9:05:bc:e6:52:6f:0e:5c:64:97:7d:
65:16:61:ea:23:e7:34:2f:11:60:24:05:50:82:2d:b6:04:f4:
75:01:40:3c:83:dc:4a:6a:6c:7a:4b:4c:c7:56:40:5d:81:6c:
0c:4b:01:1c:12:b4:07:0f:64:d8:78:5d:2f:09:8d:de:fb:1c:
99:33:50:90:82:57:8e:d5:10:11:b4:6d:93:b4:6c:17:f7:bf:
49:0f:e0:38:8a:0b:b9:aa:09:7c:68:7b:80:22:dc:3d:7a:3f:
56:c5:37:c2:9e:b8:47:55:62:35:9f:ca:da:b5:0b:91:7e:43:
48:f1:72:dc:4c:f8:1c:56:c9:8a:c0:a2:f1:c4:69:5f:0f:f4:
f8:73:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:28 2025 by rpki-client