Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: d3PyO+zVMYGCOV/l+R+6xiKlzLtJo6s0eQ3x9bysH50=
Subject key identifier: F3:8C:FC:5C:A7:1E:19:D8:7E:85:76:D2:6A:75:16:6B:C2:A1:87:78
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 0197C726A532A7EC99062528B7379532E959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 1444
Signing time: Tue 01 Jul 2025 18:01:27 +0000
Manifest this update: Tue 01 Jul 2025 18:01:27 +0000
Manifest next update: Wed 02 Jul 2025 18:01:27 +0000
Files and hashes: 1: XhZd4AXcprYaSWJWAkCvII9n7bo.roa (hash: +WoaFZAXvgLhbONkinxfr9JdPcFsQuGimoN13TlQ0XQ=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: Qfh+8ds6HwjO0AFgpMFd/9IL0uaDw0LKb6hSIHqwH8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:a5:32:a7:ec:99:06:25:28:b7:37:95:32:e9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Jul 1 18:01:27 2025 GMT
Not After : Jul 2 18:01:27 2025 GMT
Subject: CN=f38cfc5ca71e19d87e8576d26a75166bc2a18778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:2e:ab:47:08:76:bc:b2:23:05:69:a0:74:
8c:d7:a2:36:89:15:4a:05:92:ca:64:e8:8d:09:7f:
14:22:42:34:92:ac:07:13:c1:f2:d7:ba:b1:4e:db:
03:a6:1d:ca:20:ae:76:62:75:61:a5:ca:79:b0:9d:
87:98:0a:e8:96:41:d3:ef:49:fa:5c:7c:25:84:ad:
bc:85:a8:ca:d2:ae:b8:70:ec:d6:cc:ba:26:dd:77:
94:e8:49:9b:ae:3d:7a:80:14:78:27:fe:7a:58:db:
1f:95:fb:f0:93:aa:71:74:29:2c:a4:ec:ff:b5:4e:
84:a0:f5:4b:fe:57:61:4b:a0:c9:1e:ce:74:cc:b5:
ce:f8:39:13:e3:8a:81:bf:be:4a:f0:30:3f:34:d3:
36:98:a8:63:07:37:bf:86:56:89:b5:02:cf:ef:ca:
1c:d7:b8:17:57:e7:53:63:16:a3:ed:5c:7e:11:bf:
8e:26:7e:b9:38:6e:2e:6d:e9:e3:2b:59:a1:10:82:
82:2d:76:dc:6d:d3:ec:6c:be:bf:0c:8c:56:d0:b4:
15:c1:93:11:14:dc:d9:c2:21:fc:19:ec:87:88:0a:
bc:63:56:48:5b:99:01:67:35:2a:d8:bd:62:04:f9:
89:8c:3d:9d:b0:6f:3c:15:4a:75:df:8b:5a:72:60:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:FC:5C:A7:1E:19:D8:7E:85:76:D2:6A:75:16:6B:C2:A1:87:78
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8a:c3:a2:7c:34:8b:b9:a8:06:11:2c:fa:6e:ea:68:95:9f:
9c:6d:96:7e:04:d6:72:07:fe:c0:bf:3b:cc:be:01:8e:98:b4:
e3:1a:49:e8:2f:33:9b:b1:6e:5e:57:45:2f:06:98:ed:38:ef:
7b:cd:e1:e6:eb:fd:86:ee:a3:9d:55:77:f9:b7:a5:8d:82:c7:
e8:94:a8:58:59:66:bc:a6:c9:3d:56:ce:a6:1c:60:2b:27:ad:
e9:ad:8a:92:01:f2:23:37:e0:5c:06:2e:4b:3f:67:d4:40:af:
03:d4:2b:4f:6c:ca:9e:2b:27:65:2f:09:f4:f6:b0:52:e4:20:
6d:a1:a5:c6:d8:ba:78:27:b1:c4:d6:fa:5a:9a:42:e9:81:d0:
0c:af:00:55:de:95:4a:cd:c0:8f:fb:49:0f:6a:6d:f5:62:72:
8e:4b:2d:fc:1e:c0:76:9a:12:b8:b1:9b:c3:12:b7:5e:57:c2:
1f:b7:f7:95:5c:4b:53:34:05:de:65:a3:41:e0:d1:4c:93:9e:
18:45:58:2f:45:a2:0f:9d:26:e5:69:8d:01:4a:5f:6b:ac:ba:
4b:54:75:e5:8b:ee:9a:c3:5c:2c:58:f7:33:86:b2:5b:c4:8a:
26:72:9e:5b:87:bb:d6:55:f7:ab:c5:9a:07:37:38:4a:9b:d0:
38:4e:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:24:03 2025 by rpki-client