Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: aqbtc1a1UOBzkjfgUvXn0RMI6ACgg5KlhBjIOP8vQjE=
Subject key identifier: 3F:C2:27:C1:36:B8:E3:CA:15:21:9A:F9:33:E9:6B:DC:6B:68:BA:9C
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 0197B70F248105A16A3F3797C3A743163A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: uyh9l7ARiucM3u1QXflVr+eY6Iw5YIlLrRjQ1vbONog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:24:81:05:a1:6a:3f:37:97:c3:a7:43:16:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=3fc227c136b8e3ca15219af933e96bdc6b68ba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:2c:4a:ae:24:d5:48:4e:2c:08:1e:7a:9c:
e4:b0:7a:69:1f:62:92:23:76:a8:e8:14:81:77:de:
63:db:0e:5f:46:74:aa:33:42:7c:25:0e:dc:cb:28:
ce:25:75:f0:3c:7f:ff:aa:78:47:8f:30:31:82:07:
84:2b:78:23:e7:76:94:7a:4a:86:6f:9d:cd:d1:8b:
bd:47:3f:7b:f0:f9:86:d1:0e:e0:61:9a:34:e4:30:
68:37:42:09:b2:3c:25:3e:20:f4:62:07:eb:0b:25:
da:8f:e5:65:43:00:94:87:a5:c8:6c:a7:2c:6b:9c:
9f:82:07:8e:9e:c3:37:8f:7b:cf:e6:bf:b4:56:18:
bc:4e:52:98:3d:57:c9:e0:68:70:be:55:6e:ec:c6:
30:e8:00:0d:ee:91:34:92:79:db:81:40:57:f5:0b:
d9:b6:37:7b:f1:02:32:a9:83:d6:9e:fb:fc:39:29:
71:68:6e:e0:14:54:d4:fd:18:d6:2e:20:1f:91:08:
5f:e7:af:a2:ca:2e:72:18:0e:11:f6:76:52:88:70:
df:c0:e4:fb:62:5d:23:e1:87:10:10:d5:43:ee:a9:
da:9f:af:9e:a4:4d:92:99:2d:c2:47:3a:77:88:de:
46:de:84:ff:3c:d8:61:5b:c9:76:a2:9f:f2:f9:a6:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:27:C1:36:B8:E3:CA:15:21:9A:F9:33:E9:6B:DC:6B:68:BA:9C
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:26:49:56:41:32:49:1b:36:8d:9d:80:62:90:81:aa:6b:20:
af:80:c5:ec:8f:8a:de:f7:85:7b:b6:9d:bc:26:81:48:21:82:
78:02:e4:4e:ad:d9:2f:20:9f:0e:3a:29:9c:1c:3d:7b:da:ab:
a8:be:59:f0:1d:77:2e:65:4f:4f:8d:80:a4:07:06:38:cd:7a:
8f:bd:5e:f9:62:20:62:fc:ca:bd:72:c6:ce:99:42:28:ac:3e:
af:02:02:3b:6a:33:22:d7:3f:8c:72:17:7f:08:86:74:ca:d9:
fa:54:16:12:7a:a4:01:6a:57:b5:ed:e7:d7:63:63:a5:25:5b:
69:cc:9e:b7:bd:e6:27:8e:03:03:09:a3:dd:aa:ad:80:9c:c9:
61:94:8a:24:82:83:f6:b7:62:67:e3:52:29:c3:ee:eb:2d:85:
b3:b9:41:b4:32:19:e0:47:38:4c:53:96:4b:d6:9c:69:ff:ba:
f2:9e:3d:69:02:71:4d:a7:5a:c7:ac:97:92:79:57:9b:73:75:
81:d9:0c:ac:ff:17:f0:47:40:fb:74:aa:a2:52:98:be:32:b2:
c8:66:ab:0e:34:82:39:35:11:b3:9a:6b:78:cf:1b:29:d6:ea:
7d:2c:4c:ef:0b:10:f9:f5:64:fe:15:9f:e7:e7:bd:0b:fb:ac:
e7:73:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:08 2025 by rpki-client