Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: JAUaomKw/TOHkAh2dMYVStYt6FcwqTPSPsC4Hul2aRo=
Subject key identifier: BB:BF:0D:7F:63:B6:0D:3E:8C:64:7A:14:0C:69:4C:74:1C:18:50:DD
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 0197CA9566BBE7F819C5D0C58749F36E9480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 10:01:18 +0000
Manifest this update: Wed 02 Jul 2025 10:01:18 +0000
Manifest next update: Thu 03 Jul 2025 10:01:18 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: QcvLP0BQ/O3oisrGj2qZbVA4H+LwNLerozrcqDC+Tok=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:66:bb:e7:f8:19:c5:d0:c5:87:49:f3:6e:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Jul 2 10:01:18 2025 GMT
Not After : Jul 3 10:01:18 2025 GMT
Subject: CN=bbbf0d7f63b60d3e8c647a140c694c741c1850dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:bc:fd:52:49:63:1f:e5:2e:37:c1:e6:a3:
ee:08:a3:26:8e:85:95:4c:83:a9:bc:b5:6a:8d:03:
e7:ae:c3:f3:2c:5d:8e:8a:29:e7:03:b6:76:44:ff:
14:26:6f:93:85:5f:9d:77:e1:b4:de:8b:dc:09:87:
f8:a8:04:4e:c7:f7:db:eb:95:43:c4:24:34:36:6e:
f2:31:bc:14:6d:df:b8:33:db:b6:50:c8:fb:c9:55:
e5:c4:92:08:08:83:dd:33:1a:33:6e:fc:cb:52:9f:
53:c3:e8:00:23:2b:8b:26:34:6f:d6:b1:22:65:56:
66:cf:1c:b0:b1:74:44:9f:bd:0f:9a:84:c3:5a:a1:
e9:c7:db:71:69:dc:22:46:3d:d2:7b:50:ff:f0:7b:
9a:08:7f:a6:84:44:95:ee:0d:5f:fa:b1:93:5c:f1:
66:3b:98:8f:85:41:6c:e0:d3:ec:5c:59:12:c0:9e:
e6:03:0f:d4:33:df:da:26:f6:c0:97:de:89:0e:f8:
47:53:c8:62:1a:ec:88:27:c3:52:91:a1:fb:8e:40:
40:0e:ea:5e:ca:a5:f6:68:5d:18:3e:94:33:d7:6e:
bc:d9:0d:60:0e:b9:e1:70:db:eb:9b:e6:e7:bc:e2:
49:17:22:22:4d:c6:d9:76:e4:2c:d0:b4:ca:11:78:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:0D:7F:63:B6:0D:3E:8C:64:7A:14:0C:69:4C:74:1C:18:50:DD
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:92:ab:2c:a7:f5:21:c3:cd:c5:62:0e:9f:ac:17:c0:31:88:
8b:e4:d3:95:e1:b5:62:6a:b7:0a:83:8e:a4:3d:1b:0c:14:86:
59:36:3c:6a:96:a1:cc:6c:98:a7:d0:6a:ab:96:7f:d7:34:57:
cb:ff:07:fc:04:d3:52:f3:6e:d6:1a:4a:a3:3b:95:d4:1d:a4:
4f:b0:d4:4e:55:7f:c1:e8:06:1e:bf:a9:a5:1e:8a:66:41:54:
80:7e:e3:2a:6c:78:ac:ea:11:5b:7e:1f:53:c8:5d:a0:61:fa:
c0:3e:15:5e:24:ab:ce:4d:ff:c4:0c:5a:dd:de:52:7f:b6:b4:
d0:f6:52:2e:8e:da:1f:9a:9d:5f:c8:3a:75:50:e8:4e:4b:29:
ec:b7:86:0e:90:ef:3d:eb:88:9c:7c:dc:9d:d7:6e:07:1b:e4:
a0:0b:89:08:6b:a4:43:0b:fa:cf:45:9e:70:cc:de:a3:bd:d8:
f0:d2:61:6e:73:c7:32:9c:c0:77:92:9a:2c:e3:7f:3e:dd:2b:
46:64:7d:0a:ed:1d:5e:27:30:9a:96:97:8c:48:a9:35:0e:e9:
0d:5f:18:c8:a4:2a:90:e5:29:1c:bf:cb:3a:a1:19:b6:81:0a:
fc:7f:f5:b6:14:86:0c:ae:a7:f4:cb:b3:70:e3:3a:74:f5:ff:
79:d7:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:01:24 2025 by rpki-client