Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: fuGVR/XSB7gywxFLxJrSfz7ViKFD2bxw0gLkhXMXd5k=
Subject key identifier: 74:47:D6:17:CC:0B:A3:CA:45:A6:B5:B2:2A:C4:DA:EF:57:1D:BB:A2
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0197CCBAE684072B69E14DE12B00376C88CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 20:01:30 +0000
Manifest this update: Wed 02 Jul 2025 20:01:30 +0000
Manifest next update: Thu 03 Jul 2025 20:01:30 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: XWpXdVwDR/n9fRisYK8f8d45EkCTskeoJbMKyKzT3vs=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:e6:84:07:2b:69:e1:4d:e1:2b:00:37:6c:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Jul 2 20:01:30 2025 GMT
Not After : Jul 3 20:01:30 2025 GMT
Subject: CN=7447d617cc0ba3ca45a6b5b22ac4daef571dbba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:85:8b:f1:10:cd:9d:2e:93:5f:ad:ec:72:
9f:74:4f:79:9b:d7:bf:95:5e:cf:da:21:bd:f1:37:
82:f3:a3:e2:89:1d:e2:ce:29:74:b4:c4:2c:d3:3e:
ba:db:23:c4:37:68:2c:e0:e8:a3:cf:a0:ff:9f:13:
73:7a:02:76:3e:c9:9a:b7:03:f6:2e:7a:33:54:df:
f7:8b:d6:f2:ee:76:4b:cd:d4:a1:39:ca:32:27:7e:
69:2d:0a:dd:38:65:92:16:39:6a:e6:e0:51:b4:67:
47:fe:1d:75:63:c8:5b:61:9c:1e:81:64:1a:3b:1b:
84:69:4d:d2:5a:04:a0:ff:a6:89:3d:f2:54:c5:3a:
6c:d5:42:34:81:21:e1:f4:b5:43:92:e7:bf:46:de:
39:79:01:39:f7:ba:a7:6f:15:28:89:11:92:41:54:
18:b4:3f:c9:0d:69:ba:2c:1b:0c:c0:4c:dc:b4:6e:
92:5f:37:b0:54:ad:49:92:0a:a8:15:ce:67:43:fa:
71:43:82:db:ec:ad:82:26:c4:f8:4a:c4:5e:94:fe:
41:58:1a:10:d6:a3:66:4a:8f:fc:38:34:90:f7:77:
6f:ce:b0:71:fd:fe:a1:46:ac:ae:49:ad:cc:de:42:
88:a2:11:ee:79:b9:5c:fb:ad:72:f3:da:ac:67:36:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:47:D6:17:CC:0B:A3:CA:45:A6:B5:B2:2A:C4:DA:EF:57:1D:BB:A2
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:f5:14:25:f0:f1:f9:59:4a:41:dd:ea:a3:11:fa:3e:62:
f9:ff:31:bf:e5:83:76:a8:de:5c:bf:97:dd:40:d4:17:16:44:
d6:db:6b:6c:9e:42:68:de:4b:61:70:81:32:a3:3d:d4:8d:4b:
d3:79:bd:75:6d:04:c5:d8:77:6d:9e:c2:1c:07:71:f4:a4:95:
34:82:e9:99:eb:07:a9:9b:df:ec:76:b0:9c:bc:3a:1e:ac:f0:
e6:d1:ba:3c:5e:a6:10:ce:f6:e1:27:2a:13:4d:79:8a:3e:0d:
54:6d:4e:c1:1d:74:d6:09:fd:fd:32:e1:f5:df:de:b6:6e:da:
e0:99:0d:3b:ea:c8:a7:8d:4f:17:cb:26:4d:43:90:04:fc:79:
6f:2e:41:f5:74:07:87:e8:0c:dd:37:a0:4f:bc:df:91:c9:e1:
d4:06:87:5a:17:35:ea:27:42:0f:cd:e5:e1:8a:0b:79:ff:49:
17:6b:99:ca:22:24:38:31:50:34:6f:82:bc:ea:a0:cf:a5:7e:
93:47:80:e0:34:7a:28:db:ec:65:15:5e:73:86:12:8b:60:02:
01:04:73:b5:64:5c:85:0b:c6:79:42:47:63:ec:8b:a8:d8:c3:
d1:2e:0e:c5:0f:a5:6d:35:e8:63:c0:08:5c:ee:f0:00:63:4e:
f2:66:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:04:24 2025 by rpki-client