Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: j4mWGfSYdkTvcexpsGwO5cTI6FpjKCwV81y58Gvpzg0=
Subject key identifier: 69:E5:7B:30:4C:9C:83:F0:14:E4:AC:87:7A:48:A7:E3:5C:F0:22:39
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 0197B70F3106996F50F3EB37E4D4CFD6F382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 02E4
Signing time: Sat 28 Jun 2025 15:01:55 +0000
Manifest this update: Sat 28 Jun 2025 15:01:55 +0000
Manifest next update: Sun 29 Jun 2025 15:01:55 +0000
Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=)
2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: YYq3zxWj3xhaDMB4GYzfJtrZkmezBKXCwexfEYt1cGw=)
3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:31:06:99:6f:50:f3:eb:37:e4:d4:cf:d6:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Jun 28 15:01:55 2025 GMT
Not After : Jun 29 15:01:55 2025 GMT
Subject: CN=69e57b304c9c83f014e4ac877a48a7e35cf02239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:cf:3c:bf:3d:a2:81:84:ba:36:7d:a4:79:
17:4c:dd:a1:49:8e:e4:64:af:39:4f:c2:96:d3:a5:
4f:1b:6c:81:28:7e:c8:9e:d8:9f:e9:16:86:cc:52:
37:45:47:a4:54:1a:c9:9a:fb:e0:ce:6d:44:32:aa:
24:e4:bb:7e:a3:5e:bd:19:0c:f8:5f:03:60:42:70:
26:a7:7d:65:0b:ea:d0:94:97:4e:41:4f:d7:51:33:
e2:13:5b:52:57:3f:76:79:93:36:20:58:e7:1d:b9:
24:52:3f:85:9d:63:2a:05:36:2a:82:d8:e8:4e:2f:
30:7b:a4:37:e5:1b:ac:07:ea:ee:57:7e:0d:98:f3:
99:4e:38:5a:fb:e6:89:79:00:c2:60:ce:d5:4f:3d:
23:61:23:f1:5e:22:02:33:5f:4a:2e:a9:81:e7:4d:
f5:e9:4c:8b:44:aa:5a:d6:24:ea:05:96:a6:86:bc:
83:f2:21:52:46:52:f0:c5:ae:9e:8f:bd:0c:f9:8a:
95:18:80:1a:57:8f:eb:af:fa:ac:f0:4b:9f:20:f5:
ce:24:f5:b1:f8:07:b2:c8:d0:76:b6:8a:62:56:2e:
5b:01:c3:a0:99:34:d8:13:29:64:59:ea:79:dd:8d:
78:05:d4:ce:da:3e:a9:92:1a:fc:ae:67:62:58:fe:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E5:7B:30:4C:9C:83:F0:14:E4:AC:87:7A:48:A7:E3:5C:F0:22:39
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:db:79:97:40:91:9f:5d:40:3c:2e:aa:f1:8f:1c:fd:03:f3:
77:36:36:36:f8:a0:85:7f:16:29:a2:3f:fb:ed:cd:fa:1b:ca:
3a:55:e9:e4:b1:b8:7e:10:c1:5d:91:e0:58:6e:0b:fb:80:fc:
19:eb:eb:2d:98:c8:7b:50:51:05:8f:82:11:94:32:b2:1e:de:
33:db:6e:8d:13:aa:e6:74:79:03:d3:d2:b8:cb:32:01:8f:e2:
ac:d9:27:5b:bd:6c:fb:50:3d:f5:de:e0:fb:0e:d4:19:4d:27:
1c:19:18:48:d6:9d:52:81:8b:ca:3f:59:83:97:52:e5:f2:80:
8b:e8:1a:1d:b8:c5:20:9b:9a:85:e1:d3:20:96:a6:cb:8d:a7:
1d:b5:da:fb:35:4b:c3:5b:aa:75:7a:56:31:14:0d:a8:d9:3b:
78:80:a4:2c:a7:12:37:af:07:44:c0:1a:42:8c:28:44:1f:6f:
8c:1c:69:f6:d9:dc:1a:d5:d4:74:4f:22:37:b8:89:89:39:90:
c6:33:c9:43:51:13:88:1d:43:c8:58:52:64:9a:5e:58:2b:92:
3c:18:32:91:a6:eb:bd:4e:c5:3b:dd:67:86:1e:33:2e:c5:42:
b6:a6:60:33:97:25:f5:14:ff:6a:a4:2b:13:d4:d3:13:e3:06:
95:ac:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:10 2025 by rpki-client