Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: ozniBiAllaXCwiGYEBYQdE30COFR507c7k5ILsGUCfY=
Subject key identifier: 2E:9A:FC:43:85:2B:FC:05:61:19:8A:D4:0A:B0:35:19:09:E7:74:5C
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 0197B7B34EDEE489CCFD1061DC382761AE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: wlt2HQn95wajh2bwyDGL2uHxvbkiX/+Q8i9D5JgLSlM=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4e:de:e4:89:cc:fd:10:61:dc:38:27:61:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=2e9afc43852bfc0561198ad40ab0351909e7745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:1a:4f:03:3a:a2:e0:40:d2:6e:4f:aa:28:
54:59:c8:5c:de:13:c3:2c:6b:2e:8b:5c:b6:a0:d0:
e7:b0:41:d8:25:34:d6:12:68:88:6c:2f:79:ba:1d:
63:8b:87:c5:9d:ad:f7:76:22:79:85:4f:6e:ce:73:
84:54:f4:fb:8e:69:a0:05:9b:2c:ab:47:0f:a3:8c:
b4:62:31:90:d3:71:62:ab:f6:e2:cf:64:9e:5b:e3:
fb:8b:46:a4:d6:19:cc:76:00:1a:93:4a:6a:26:85:
5d:53:b5:26:1d:44:8a:0e:ba:3d:bb:a6:63:dc:34:
3b:6b:e0:be:ad:6a:ed:bb:91:27:4f:ee:ba:d4:27:
35:0b:60:50:2e:bf:e9:b5:38:97:fe:93:71:b3:d0:
64:97:bf:03:bd:84:82:5a:c7:08:8c:73:6f:40:35:
04:01:35:4c:cf:51:8a:64:1e:01:c7:b3:58:79:95:
be:ea:10:55:f7:7c:0b:1e:65:51:fb:84:9a:ea:58:
32:67:f6:06:03:94:71:21:ea:b9:c2:75:e0:b6:92:
14:47:11:83:d5:d6:e5:76:4a:39:c8:c1:0b:16:45:
24:95:55:31:3f:25:2a:e8:dd:2f:1b:9c:78:e7:d5:
3c:25:7f:0f:92:9f:9a:ad:2a:0e:e7:9f:dc:82:20:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:FC:43:85:2B:FC:05:61:19:8A:D4:0A:B0:35:19:09:E7:74:5C
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:db:a6:bc:3c:22:c1:86:3e:84:ae:c1:a8:f9:36:d7:82:9d:
4d:44:33:b1:f6:f7:bd:f2:16:d8:35:78:81:1c:57:02:56:72:
52:be:7b:3f:bf:a6:60:af:7a:c8:3d:a5:05:fd:d6:ed:de:b8:
6f:8f:35:2a:e5:18:a8:f7:04:35:1b:15:a9:30:9a:af:4f:7d:
08:ba:21:de:ec:4f:39:75:86:f1:f5:89:05:f7:90:82:b9:07:
e9:e1:3a:c6:66:04:21:9d:ab:63:52:2e:13:31:0f:49:12:8d:
7d:bf:8e:c5:10:df:30:6a:d6:79:ca:3e:a9:e8:b4:f9:92:14:
3f:ec:fc:80:b6:5b:3c:4b:75:68:04:94:b0:e6:2e:46:e9:ac:
1f:73:b1:a1:b3:e8:52:7d:f7:ef:8a:bd:de:d5:17:94:8c:c3:
1b:9f:9d:34:e5:1c:25:6b:d6:b4:ae:f1:3b:a2:92:ec:00:8c:
fd:de:2d:f9:4d:00:22:37:1e:78:28:42:16:a3:81:25:ff:c1:
4a:ef:bd:04:72:e8:00:b2:8b:f6:fa:1f:c9:02:df:44:eb:bc:
9f:33:48:0f:b1:e0:12:1d:b8:c0:01:50:b0:8f:d5:80:65:f2:
b6:28:96:83:b4:8a:f9:1e:6f:fa:b3:2b:05:ec:ea:20:da:65:
a7:1e:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:42 2025 by rpki-client