Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: ej9UdDBWQxoG/lvGlErAoyl+geTjJGdWkS1QAAmIBjM=
Subject key identifier: 1C:AA:37:7A:C3:C0:EC:D7:97:A6:0B:56:58:F2:E3:01:8E:76:F6:5C
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 0197B7B34E99ADE63FE9398B3580043BA79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 01D8
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: FOe0srgxkF5Yr2whIH9mphsQLsAxxq9yPgZwYFewcTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4e:99:ad:e6:3f:e9:39:8b:35:80:04:3b:a7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=1caa377ac3c0ecd797a60b5658f2e3018e76f65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:c7:60:34:f8:c9:e9:c2:b6:98:5f:20:bc:
5e:cf:8e:5c:3a:fb:a4:db:c3:d3:18:29:1c:3e:c9:
57:40:1d:a8:69:a0:b8:98:55:4a:75:14:89:23:ac:
c1:c2:44:b5:3e:1a:b7:9e:a4:1f:99:20:0d:f7:45:
9a:11:92:aa:2d:95:d0:f1:3a:ea:16:e5:ab:a2:f4:
e7:1d:9e:08:b4:8c:e5:ec:e0:e0:14:69:fc:7d:cf:
4f:3d:15:f2:db:6d:f0:bb:3f:a8:2c:11:7f:d7:c1:
42:1b:d6:fe:c0:e4:ca:de:bc:a7:86:35:61:a2:db:
97:07:35:9d:ae:15:72:3a:cd:2b:cb:b3:4b:cb:a4:
1d:f4:c1:44:15:21:cd:c5:a4:b0:e4:64:50:67:db:
11:6b:65:13:93:f4:4c:96:1a:7c:09:a4:15:2d:7d:
8e:93:c0:0b:e5:a2:95:a5:8e:25:47:43:72:2e:e2:
63:c6:3e:6c:f6:20:24:b3:77:e3:69:72:c4:53:01:
0e:2f:f2:15:49:5c:4d:45:c2:06:01:9f:2d:95:0b:
be:f1:7d:74:fb:b9:68:eb:41:fd:86:63:f2:8a:36:
69:39:0f:4a:80:5b:a1:cf:ec:07:c3:50:38:1a:c5:
5e:5d:e7:08:f8:6e:53:d5:b5:a2:2e:e3:36:a0:5d:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:37:7A:C3:C0:EC:D7:97:A6:0B:56:58:F2:E3:01:8E:76:F6:5C
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c7:d7:a3:69:9c:09:07:21:c3:74:2f:bc:63:e4:01:fa:b8:
17:b4:ba:01:b0:bd:18:06:b9:7d:fc:3b:bf:51:df:73:f5:5b:
28:62:10:51:c7:7b:af:aa:2d:90:ee:24:1a:41:56:6a:0e:a9:
3f:f2:71:70:85:6b:25:4d:23:c5:9b:19:3f:72:a9:9e:78:7a:
1d:85:d0:07:e2:d3:c0:9d:09:45:67:24:4a:e4:b2:d6:b5:5f:
90:5c:79:b7:11:e9:1d:8e:99:79:7e:13:a9:49:07:fb:6e:93:
ad:59:47:66:b0:db:4d:97:ed:48:58:93:cf:36:2d:73:ac:62:
a3:62:a7:2e:14:88:b2:75:0d:73:80:15:b6:2d:fb:d2:ef:23:
36:47:47:1c:02:a1:08:b9:ae:ad:0a:92:4b:8a:68:eb:cc:f3:
68:2a:46:b3:8e:a9:13:a4:77:f7:e8:0a:f1:f8:fe:e1:91:48:
63:4c:f4:33:07:3e:27:f8:10:5a:6e:e5:dc:08:4c:74:bc:d8:
dd:91:8a:9f:b2:5b:4c:f8:f3:41:ad:35:74:8d:1d:2c:b5:d1:
5a:19:d1:3c:7e:bd:33:57:18:3c:0f:8c:ee:b6:82:95:38:38:
c5:d3:f7:52:2c:be:48:cf:66:87:9b:78:a0:6a:e2:ff:67:bf:
63:ef:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:33 2025 by rpki-client