Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: ctYh/zBGmwDa7ZeB6ClalLVtx7X+IhffFNLI77AhNh8=
Subject key identifier: EF:7B:7E:2B:4C:CC:8E:39:C0:EE:6A:DC:03:E7:29:F9:04:0D:67:F8
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 0197B6A250D70F3A64FE0F0FA1F2824C9B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0BBD
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: 36Q9C7vEPNeMmHUCitckaLlQkx+a+2+kbzaXsyrQkec=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:50:d7:0f:3a:64:fe:0f:0f:a1:f2:82:4c:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=ef7b7e2b4ccc8e39c0ee6adc03e729f9040d67f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:08:5a:56:d6:2a:8f:68:84:64:91:97:42:
99:0d:b0:2e:bb:f0:97:c6:90:2d:04:28:78:b0:55:
ad:4e:b3:ca:d6:a8:27:52:44:4a:02:5a:23:fa:c4:
2e:14:00:42:e7:0d:be:bb:ea:10:51:f4:46:96:b1:
33:60:00:18:13:95:67:1e:cf:57:1e:ca:5f:e2:64:
14:0f:d9:33:33:93:ee:39:4b:33:3c:b4:1f:a4:12:
5a:6f:f6:f6:06:a0:f8:76:c1:88:16:de:0e:fb:b6:
b2:a6:dd:62:33:45:2d:9c:09:a4:1f:06:3a:79:b4:
04:19:39:32:76:33:9a:ee:6d:65:36:73:f1:82:42:
de:d3:d7:59:61:4a:7a:f1:20:04:07:11:cc:aa:73:
f9:ac:d9:bf:22:6d:9a:ef:2b:76:5c:12:00:d2:5d:
6e:9a:e0:34:cb:8d:72:ce:ea:f2:42:b4:14:74:7a:
11:56:ba:35:a9:20:76:f1:52:ac:34:9d:01:0c:26:
37:50:3e:4f:50:3a:79:53:be:9d:84:7c:87:14:1e:
00:f4:bc:f7:6f:19:93:1f:55:d5:99:c5:cd:9f:07:
e5:f8:1c:13:c7:49:48:88:5e:bc:c8:ab:a5:bd:6f:
4a:86:47:64:40:34:90:fc:3e:cc:3e:e0:76:08:41:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:7E:2B:4C:CC:8E:39:C0:EE:6A:DC:03:E7:29:F9:04:0D:67:F8
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4d:4c:66:54:13:b0:71:59:4b:67:c2:55:39:da:2a:56:77:
4b:22:cf:84:04:41:75:b7:7b:3a:e4:1f:2b:e9:01:5b:d9:3f:
b1:a5:a5:ec:1b:42:48:e4:4d:23:d8:db:f5:18:cb:ab:96:06:
86:24:ca:f4:32:27:76:ed:1a:c3:71:f7:00:ca:be:c3:93:c4:
cd:6c:e3:66:10:9b:fe:de:77:f8:8b:7b:fa:ef:9d:2e:11:9a:
9a:b3:24:3e:45:73:8b:9c:e1:6c:a2:59:5a:39:22:44:f5:d1:
0c:4e:cd:8e:25:bc:fa:7c:83:89:18:93:24:bf:e2:31:f7:30:
73:7a:ec:59:73:3b:cb:a4:1f:8e:0d:c7:c7:28:df:d9:0f:8f:
e9:29:8f:bb:9b:e6:8b:7f:c5:c9:8d:1d:62:15:7d:00:ba:e7:
23:42:dc:9c:09:64:38:8a:82:68:34:28:14:b1:1e:34:2e:5d:
11:df:ab:0b:e0:8b:57:e7:ce:6a:e1:95:8d:32:4e:01:ce:b1:
41:1d:33:96:d9:8b:ad:69:84:58:25:64:43:6c:51:8e:77:d8:
fc:d5:14:d0:e6:e4:f5:13:2f:98:0a:92:4d:2f:e3:0a:eb:61:
90:26:14:6e:49:0b:7f:8d:0c:12:32:76:c7:ca:83:19:f2:0e:
e6:69:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:58 2025 by rpki-client