Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
File: hDz1u4drdyt63kMpBctpbxNMqjk.mft (raw, json)
Hash identifier: NtNBwOayWEwhWG4UzB2ZBfF3+IGNzAeUtayjXiYhzkM=
Subject key identifier: 37:34:8E:08:4D:14:C1:1C:01:5F:6E:A1:36:3D:69:37:6D:F4:10:F7
Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
Certificate issuer: /CN=843cf5bb876b772b7ade432905cb696f134caa39
Certificate serial: 0197CE3B0629A60605BE14C3EA8FC8445DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
Manifest number: 15C5
Signing time: Thu 03 Jul 2025 03:01:03 +0000
Manifest this update: Thu 03 Jul 2025 03:01:03 +0000
Manifest next update: Fri 04 Jul 2025 03:01:03 +0000
Files and hashes: 1: 8SOVzbdZRi1TiXuPdQBPQag2b1I.roa (hash: 4UxgH1Bm5rLISlPUt1abtwizcDNcCBaAAK4mH1Wxzxk=)
2: hDz1u4drdyt63kMpBctpbxNMqjk.crl (hash: iXTepmUmWyplY1QN3s4Mfd8gUm7kSa+fAM4WFR5NYGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:06:29:a6:06:05:be:14:c3:ea:8f:c8:44:5d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39
Validity
Not Before: Jul 3 03:01:03 2025 GMT
Not After : Jul 4 03:01:03 2025 GMT
Subject: CN=37348e084d14c11c015f6ea1363d69376df410f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:bd:2b:8e:dc:b6:d7:cc:a8:1b:e9:fd:29:
3a:e6:10:02:c2:6c:33:9f:e6:83:f8:c4:b8:d1:0e:
4c:40:ec:51:d8:44:7d:15:cf:00:83:11:df:5d:2a:
0a:ba:00:12:a1:bf:97:47:e2:de:f3:d9:b2:32:7e:
d2:24:b7:30:ea:fa:4a:b7:25:dc:7e:b5:b7:33:05:
0d:b2:c4:4a:1e:12:bc:cb:d9:03:c2:ba:92:f8:be:
30:72:36:88:b8:30:be:5d:7b:75:88:7f:f8:cd:f0:
ac:0d:36:5a:22:2e:5e:d5:45:77:df:6e:dc:45:e0:
e8:69:5c:9c:0b:b4:d3:84:21:5d:df:c3:0a:fe:52:
71:fa:63:fb:ab:2f:9c:b3:45:2d:d3:47:b8:7e:e8:
e8:4d:79:89:ac:b2:36:12:cb:02:dc:1d:5d:50:fd:
f7:70:10:ab:77:40:9b:81:9a:b2:17:e4:36:ec:8d:
db:fa:a2:48:54:b0:12:46:6c:f8:3e:61:9a:68:74:
51:02:9f:fc:a2:aa:91:11:7a:ed:b4:65:22:64:0f:
51:62:01:dc:23:92:e7:c4:9b:4e:2c:e6:a4:1c:29:
66:81:d4:44:46:3e:ae:82:17:88:e4:48:9c:9a:35:
6a:07:76:8c:47:4e:8a:40:ab:3a:65:9b:c8:d9:ab:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:8E:08:4D:14:C1:1C:01:5F:6E:A1:36:3D:69:37:6D:F4:10:F7
X509v3 Authority Key Identifier:
keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:e4:d1:2b:12:2d:e7:35:80:fe:25:17:ae:47:c0:bd:8c:
7d:8e:e8:4f:9c:5c:43:13:07:68:6c:cc:07:62:a0:3b:d1:be:
e1:10:4f:8f:93:01:1d:fc:5f:ce:0e:69:fa:31:61:0f:b6:56:
9b:91:79:f7:9e:49:59:87:87:d1:08:07:25:50:94:72:74:c4:
de:12:c9:e5:33:c1:77:07:ce:57:18:f5:92:50:b4:62:af:f2:
7d:2d:ae:6d:f6:25:ee:82:a8:bd:0d:f9:ee:f4:5d:d2:84:99:
96:f1:0b:3d:de:2a:bb:29:ec:2f:51:27:8d:e6:9f:49:b9:97:
c9:82:28:59:24:f2:b2:c0:b2:b4:28:26:c9:5f:79:1b:ba:05:
3f:e6:40:ae:55:cd:8f:a1:1a:94:e4:4a:52:08:70:c9:ee:73:
ca:6c:63:16:e1:d2:f0:b1:c6:0f:ca:c4:b2:69:99:89:f1:67:
f5:e1:38:6a:ca:67:ec:69:62:f9:14:f7:60:fa:70:b9:f2:5d:
1b:18:e9:91:ce:77:61:e7:4d:1e:aa:f6:0a:57:2e:94:1a:f6:
93:e0:ef:b4:5e:14:36:57:f2:91:7f:01:f3:4d:bb:a5:d9:12:
76:55:4e:5b:0e:ed:19:57:f3:71:7a:77:45:72:79:27:7c:a4:
d7:14:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:26:37 2025 by rpki-client