Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier: IZr1vFhOkTxRm/oN0nGRgxezPAP2Z8LYOZYNYDjJAMg=
Subject key identifier: 47:7F:E6:59:14:F9:8B:09:8E:EC:69:E0:B1:BF:78:EC:B7:96:D5:BA
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 0197B7B30C9018A9A687AAB31BA860B5BEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number: 0CAB
Signing time: Sat 28 Jun 2025 18:00:53 +0000
Manifest this update: Sat 28 Jun 2025 18:00:53 +0000
Manifest next update: Sun 29 Jun 2025 18:00:53 +0000
Files and hashes: 1: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (hash: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=)
2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: YM/yiXkTlj8V7B58WKyT+5Z+44KuvrHBD2uO5ci+IpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0c:90:18:a9:a6:87:aa:b3:1b:a8:60:b5:be:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: Jun 28 18:00:53 2025 GMT
Not After : Jun 29 18:00:53 2025 GMT
Subject: CN=477fe65914f98b098eec69e0b1bf78ecb796d5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:3f:a4:55:07:53:5a:95:61:f1:db:98:51:
16:40:b8:62:55:18:c7:78:3d:e0:73:7c:c3:83:62:
2c:be:f1:60:f4:7f:4f:be:cd:59:4a:21:f6:0a:1f:
3a:bb:03:2a:10:83:0f:b6:a3:70:79:a5:8a:53:0d:
79:d4:5b:fd:5d:3a:07:4a:5b:7d:df:3b:3f:73:2d:
8b:e1:1f:76:6b:e6:f4:10:f5:eb:fe:6d:10:b3:84:
f0:e8:eb:e6:59:1b:8c:e8:46:1a:9f:98:18:68:8a:
76:4a:1b:7d:e9:7a:63:43:f8:fd:a0:43:c4:01:83:
b3:d3:50:6d:87:fb:4b:e9:07:34:c5:ad:64:5a:07:
a8:d3:2b:05:0a:a0:36:e5:b2:6e:02:8d:0f:8a:df:
57:f8:c9:93:f2:c9:b4:00:f2:c2:1f:8e:c2:7a:67:
23:25:32:41:84:b4:6e:17:55:51:3f:70:14:0c:5d:
13:b0:53:c3:bc:a9:ab:35:d5:ae:69:36:4e:5c:76:
e9:e0:e2:8e:c4:75:57:aa:29:8b:be:9e:44:cb:c1:
37:39:2e:67:6f:ed:b2:bd:6c:a3:95:d0:9e:38:35:
3c:e0:5e:2d:9c:3f:d2:99:ef:9b:d9:68:31:dc:c7:
e6:b0:d1:ac:0e:e1:92:d1:3b:44:13:80:74:fa:77:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:E6:59:14:F9:8B:09:8E:EC:69:E0:B1:BF:78:EC:B7:96:D5:BA
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e8:8e:ba:bd:e9:2c:7c:36:8f:50:c4:75:18:69:3a:eb:a7:
74:53:10:ea:a8:b1:59:bf:9b:e8:a1:62:25:9e:0d:e6:08:ab:
3f:70:e1:0a:bc:77:99:86:8a:91:70:9f:22:9c:1e:63:b4:3f:
ae:dc:0a:e3:91:70:80:34:36:ca:e2:b5:7e:6c:08:7d:23:67:
79:86:5a:ed:54:65:eb:03:65:80:c0:48:17:9c:08:a4:07:bb:
45:c4:31:ca:0d:83:2c:06:35:dd:a0:37:ae:6c:01:02:92:77:
65:af:94:8d:75:1a:91:16:c3:27:25:f6:51:99:e6:7e:a0:3e:
7d:e5:de:93:45:ac:92:a8:99:f2:01:3f:f1:e6:b3:f9:86:e9:
a8:00:17:ba:b6:3d:0b:36:7a:e1:c0:be:f5:ec:d9:65:c1:75:
5f:53:67:a7:83:e2:84:11:71:5a:4e:0a:e5:fb:02:d1:fb:ca:
54:64:aa:16:22:6e:75:cd:8b:7a:a7:bb:bd:43:9d:64:ad:58:
74:1c:bc:e6:6f:78:ed:f0:f3:3b:32:9c:e6:39:75:f6:85:ff:
da:e4:b3:1a:ac:a3:43:bb:c1:d3:ea:91:95:86:01:31:18:ff:
cb:96:c9:7f:bf:41:3e:0f:d6:12:a3:3c:ca:3d:ce:1d:4a:e2:
54:2e:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:47 2025 by rpki-client