Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: Kic3pf13GiR3uS2tmj25hXxpaQ1AO5lO4nhIyhgveOo=
Subject key identifier: 21:46:58:A5:8D:C7:23:A3:43:D8:A4:A8:0B:43:AD:16:D2:10:F3:83
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 0197B7B2F8AB1A86CA12A53C4E215623A85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: DSw6DWPPBUt2G3eHQBweO24QJ3yD2J4l5ZV4nfVYVgA=)
2: iEKvPS8SPLhC7hkJanIn7-E66Ko.roa (hash: uTaTvTMzaWdAm9ayVhgfeDfN1emMfvXMmA8i6uXhGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f8:ab:1a:86:ca:12:a5:3c:4e:21:56:23:a8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=214658a58dc723a343d8a4a80b43ad16d210f383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:8d:02:3b:d7:e2:37:78:f9:ee:06:51:8b:
55:cd:3c:5c:82:0c:29:a1:10:59:99:8b:4b:04:2f:
96:2b:07:f0:e6:e3:e6:08:fe:b4:e8:31:32:d6:70:
1f:fb:03:69:01:d9:64:5e:23:b7:88:34:84:56:e2:
df:a8:a3:28:4e:e1:95:3b:87:c5:61:20:de:6b:cb:
1d:a8:26:8a:42:63:06:02:55:4f:f5:24:5b:aa:f5:
5d:00:61:a3:5e:5d:6f:ef:62:9e:a8:f1:a5:aa:fc:
0e:97:e5:ae:a0:4a:78:df:05:08:29:8f:34:23:b9:
dc:6a:56:36:ed:fd:08:42:f6:8c:8c:76:87:55:9a:
ac:4c:66:fc:54:33:4e:45:13:e6:f5:4c:aa:80:84:
b4:51:e9:01:d0:88:e5:0e:77:90:1a:15:aa:80:a0:
8e:d5:fd:2e:47:cf:c0:49:70:e9:2a:87:4d:aa:13:
95:9c:5d:e1:91:f2:a2:45:20:ed:46:f0:09:e7:64:
f2:de:64:8e:6c:33:ba:65:00:12:16:84:f5:ae:d4:
30:6b:77:78:3e:4c:6c:8c:6b:17:59:a8:40:72:a8:
39:87:f6:00:bf:90:2f:04:44:94:8f:ab:a1:74:61:
ca:7e:b0:18:93:44:4a:0d:71:15:b9:d2:27:0e:d8:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:58:A5:8D:C7:23:A3:43:D8:A4:A8:0B:43:AD:16:D2:10:F3:83
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b4:44:f7:8c:e5:29:19:a3:4a:fe:50:9b:6c:94:15:ba:1a:
90:c8:5f:7b:53:7e:89:42:14:3b:04:00:de:38:69:48:0e:f7:
ee:ed:5b:15:aa:5b:20:86:0a:fb:bd:9c:68:8c:0e:f7:58:c1:
82:ad:62:db:e8:9e:58:4e:1c:61:06:cf:d1:24:6c:94:68:f1:
06:34:d9:dc:71:76:06:71:59:0e:ce:82:dc:e6:c1:55:bd:28:
d9:bb:8c:b2:1f:79:c8:8b:7a:04:18:64:7b:2b:8a:30:b0:c8:
0f:23:89:a2:8d:2a:60:86:f4:ae:33:92:25:47:36:dd:63:1f:
53:7b:8a:00:8b:39:27:d6:9e:f5:bf:2c:70:45:f4:b8:46:33:
1e:fe:ed:d8:66:b0:da:84:d5:26:01:73:24:21:4d:99:9e:3d:
ce:28:23:a5:59:dd:7c:ba:b9:83:07:e0:7b:70:a5:9d:d6:39:
21:94:c6:f5:3f:fc:34:85:7a:ee:d2:2e:bd:b2:e2:83:24:86:
61:62:69:c0:05:c6:16:77:9c:9a:4a:fe:92:48:bc:6f:73:d1:
09:eb:c2:16:89:07:da:85:69:52:0d:e8:b1:52:c1:6e:da:f2:
b6:b1:12:8d:d3:73:9e:22:88:37:69:1d:29:d5:a9:c0:cd:30:
c6:67:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:07 2025 by rpki-client