Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier: dkpFau6xrCIK/on1BOOqIjAJiciCgz2nSzcVj+FWkZY=
Subject key identifier: 7A:3A:3C:17:1A:07:26:22:4C:C7:45:5D:23:2B:C8:AA:CE:CC:D7:EF
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 0197B77CDE8667E78A95D15E8CD59DA1D327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:43 +0000
Manifest this update: Sat 28 Jun 2025 17:01:43 +0000
Manifest next update: Sun 29 Jun 2025 17:01:43 +0000
Files and hashes: 1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=)
2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=)
3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=)
4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: iLQG9v63jdQWOPfHkEMfQFphVveZHwz+VGL+QDW/fVQ=)
5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:de:86:67:e7:8a:95:d1:5e:8c:d5:9d:a1:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jun 28 17:01:43 2025 GMT
Not After : Jun 29 17:01:43 2025 GMT
Subject: CN=7a3a3c171a0726224cc7455d232bc8aaceccd7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:f3:3f:3a:b0:84:f3:05:3a:1d:b4:f5:60:
f0:a6:f5:31:5e:cb:8d:b0:47:ef:57:b1:73:6d:bd:
43:77:42:0a:b3:b0:52:b5:f3:5b:28:14:71:f1:04:
78:3d:ca:7f:7e:b8:1a:2c:f8:83:98:7c:51:f7:bf:
00:41:8e:8c:f6:bd:ba:9f:3f:9c:71:9c:ec:45:43:
39:e7:4a:27:3f:dc:50:78:05:93:83:2a:61:e6:74:
e0:5f:4b:2f:1b:2a:c7:72:1d:51:0b:f2:ee:41:55:
1b:20:4f:da:bc:c0:20:d6:f9:1e:02:c6:22:88:ed:
50:3b:20:46:87:c9:c0:eb:d3:c1:74:76:6e:46:97:
19:a0:1c:51:98:dd:7a:10:dc:c1:89:0c:3d:4e:03:
0e:4a:55:26:ef:bf:e3:20:fc:bb:f4:8a:41:60:d5:
86:2f:b2:fa:3e:37:81:56:d7:17:1a:3d:e0:ec:3c:
b0:69:04:22:b1:54:2f:47:77:98:68:32:92:d5:4a:
47:08:cc:4d:a2:fa:d2:d1:be:a5:c4:09:48:e1:a8:
2b:f1:07:ea:e5:1e:7e:c9:00:9a:a1:a9:51:d0:0b:
e9:13:31:54:c6:a3:d6:ff:d6:be:f8:59:95:2b:86:
d1:a8:70:f3:76:c2:29:cd:20:62:e0:a4:04:27:77:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:3C:17:1A:07:26:22:4C:C7:45:5D:23:2B:C8:AA:CE:CC:D7:EF
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:90:2c:54:82:49:9b:2f:14:35:6f:bb:23:66:9f:f4:6c:40:
e7:a4:ba:bb:cc:60:5e:d9:55:24:45:24:7e:26:7f:d4:83:85:
e6:c6:8b:a3:0b:bd:4a:aa:dd:80:c3:36:45:d7:28:e4:18:d7:
06:51:01:ff:a1:8d:6e:9b:31:ea:63:94:03:cb:7a:98:59:6a:
0b:5a:0d:29:14:cd:c5:29:fc:9e:ae:bd:7a:d4:62:8b:57:a3:
47:c5:ca:a9:d6:c0:76:06:f7:ad:d8:be:db:3c:52:5a:72:1e:
f3:47:fe:78:5b:34:cb:0e:bd:3a:7f:3f:74:91:b3:f4:6e:c2:
47:3e:78:fa:34:d0:21:b6:59:0a:a5:9c:62:d9:c2:89:ec:df:
28:f0:22:0f:b2:a3:65:26:25:87:6e:aa:4b:a5:17:3f:eb:f6:
81:9f:77:a6:76:26:27:aa:1f:0c:ba:56:e9:2e:dc:c9:4a:6c:
2b:c8:b8:57:d4:89:a6:68:42:3a:9b:c1:b5:38:79:65:6e:5e:
37:27:f3:ae:c6:22:46:1c:9f:0d:dc:5b:60:ec:a1:5e:55:83:
da:6c:ea:e4:f5:81:f2:ae:65:2a:98:5e:b6:24:9b:9c:d8:c5:
75:3f:be:a1:28:90:02:7b:7a:30:57:d0:64:12:c5:7c:10:da:
d7:0c:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:22 2025 by rpki-client