Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
File: hGhM2vJd5AvvwejkIoWo1ew4kEc.mft (raw, json)
Hash identifier: KzY1EUP5nTFEF5Fac7gYqvNycZF2dL81jIrinCY4pRw=
Subject key identifier: A5:8C:CF:3E:6F:3C:28:55:93:F1:3A:6F:4C:9E:FC:87:38:9F:FF:83
Authority key identifier: 84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
Certificate issuer: /CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Certificate serial: 0197B74556D41236878F069DA1404816E81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
Manifest number: 03D3
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: hGhM2vJd5AvvwejkIoWo1ew4kEc.crl (hash: dnrDH8bfIWr6toTFaD0dxUTHZV+4RD1o4z9g06dD4Gc=)
2: oidwYZW8G2o74OS_a_nCcJCpjCg.roa (hash: ogxgsB9YER6I/w+iNtW/Wqu1gf3XIhY2x4sxgGoaIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:56:d4:12:36:87:8f:06:9d:a1:40:48:16:e8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=a58ccf3e6f3c285593f13a6f4c9efc87389fff83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:7a:06:d8:12:94:27:3e:5a:ce:8d:e5:88:
d9:18:97:b7:d4:4d:16:11:18:4b:a9:ee:ad:e3:0b:
3c:ce:fa:f9:20:b2:25:d7:81:f9:2a:8c:1e:d9:aa:
d6:44:1a:67:3e:e5:8e:62:bd:ac:71:2d:d4:09:aa:
87:9b:11:4b:e4:f9:24:43:07:92:77:72:e6:e6:12:
10:1d:0b:67:4b:6d:c7:cf:23:ce:7b:a7:b6:17:6a:
8b:74:4d:55:fc:13:e6:40:b3:ea:bf:42:5b:71:47:
fe:4f:f5:37:be:e1:18:7a:15:29:29:ec:bf:56:6d:
1d:b6:99:21:74:e3:f5:f6:2f:e0:e1:b4:e7:b0:d1:
e5:60:d1:6f:9e:b8:47:36:3b:11:02:f4:50:60:5a:
4a:e2:27:38:1f:f4:99:e3:dc:8a:38:bf:43:b3:05:
1c:2b:9b:fb:35:65:b2:4e:56:aa:63:31:22:d7:61:
9e:56:7b:97:e9:ec:da:8d:73:c7:e0:9a:23:83:0a:
7b:63:98:ce:15:87:af:46:1b:ff:17:42:a6:8e:1b:
f0:86:b3:fc:45:71:c7:4d:46:33:05:ea:6b:6c:c5:
54:fc:6b:b0:2a:81:66:fd:69:84:47:ff:36:d3:76:
70:59:f3:aa:2b:bf:71:d3:b8:a0:6a:86:30:05:61:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8C:CF:3E:6F:3C:28:55:93:F1:3A:6F:4C:9E:FC:87:38:9F:FF:83
X509v3 Authority Key Identifier:
keyid:84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:30:ab:48:40:6e:0e:40:83:7f:fa:86:71:9a:0d:c2:63:6e:
af:f4:46:0f:6c:07:fb:9c:31:1a:d1:80:23:0a:d3:4e:72:1b:
72:08:a7:58:2e:9f:75:3b:01:79:d6:8e:48:6c:f2:a6:e3:84:
5b:ba:e2:d9:11:44:d2:4d:5a:36:cb:3c:59:22:4e:ee:47:38:
5e:75:c8:f7:91:13:c8:cb:db:f0:77:00:9e:6d:70:14:ec:36:
98:c5:fc:6c:1a:00:09:d4:6e:09:a4:81:27:25:2b:07:21:3e:
cc:d8:b7:1c:7c:6c:79:c9:e0:71:99:b2:25:2e:7d:74:5a:0b:
ea:a7:b2:d6:ae:1b:c0:41:37:c7:73:32:96:c5:79:cf:1e:1a:
9d:d2:76:85:d0:bb:b5:c2:7c:2d:39:6a:4d:16:52:b8:48:70:
57:75:0e:1b:ad:b4:9c:95:37:2b:00:35:1c:39:7a:5f:b5:04:
07:8a:9a:67:f2:1d:1d:50:7c:7f:42:79:9e:0a:ad:d5:04:9f:
13:46:97:e0:f8:71:d5:02:3c:43:cb:15:e0:67:b7:a4:26:88:
a8:de:a2:45:8b:80:98:60:0c:ef:60:5b:0e:37:01:16:cf:21:
58:c7:f1:b7:8a:89:10:05:a2:ce:17:3e:57:b3:57:f7:a7:66:
8d:b4:1b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:28 2025 by rpki-client