Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: gMiKmaq3VgiYgKH0hsELlk4Ga8oIHZVGsX4kzeci+gs=
Subject key identifier: 96:F1:52:5E:01:A0:DE:C2:9E:69:7D:0D:DD:56:2F:A2:77:5E:86:2C
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 0197B745563D2845308BF4BFEE589B2B6C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: 9jBF5jCXNU6Z/okk5FdAmeLZXcQ9aqiQjB+Do+onadA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:56:3d:28:45:30:8b:f4:bf:ee:58:9b:2b:6c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=96f1525e01a0dec29e697d0ddd562fa2775e862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:b7:72:ac:16:04:4a:1a:69:ff:3d:9e:45:
dc:e5:d5:43:35:00:ae:89:fc:40:f5:1c:70:78:59:
45:ea:bd:c8:0c:6f:37:44:76:a1:03:b8:8e:93:e1:
b7:46:5b:18:88:ab:87:f2:f1:8b:50:c5:d5:b2:4c:
81:63:ab:8d:f3:ff:0f:d1:79:94:af:08:04:dd:41:
88:2e:2b:49:e8:77:29:24:6d:43:af:a5:be:1a:23:
8f:02:22:d8:fb:c5:16:8d:99:20:72:b4:7d:b5:f8:
7b:33:eb:fc:f0:58:75:a4:4b:51:45:0c:70:f9:76:
ad:aa:28:57:cb:c4:3c:52:7f:36:71:5e:c1:28:86:
a9:51:6e:bb:df:30:67:c0:fd:3c:3f:09:b4:a1:c0:
22:b5:3c:c6:25:2e:d6:b5:0b:5e:b9:a4:0e:02:99:
34:83:8d:f5:3a:62:8c:2b:f5:a8:69:ce:44:c4:e5:
56:91:8d:6b:8d:12:d8:62:4d:e7:3f:2c:ba:96:75:
6d:a7:1f:55:a2:4e:fa:1b:fa:67:45:32:01:42:14:
4f:4d:d2:34:09:3d:dc:5e:84:7c:1b:db:ae:d2:61:
3c:fd:2f:34:8a:cd:53:f2:d8:c0:30:c1:6c:2c:23:
9a:45:15:4e:fc:9f:95:9f:0f:62:f5:19:bd:8f:b0:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F1:52:5E:01:A0:DE:C2:9E:69:7D:0D:DD:56:2F:A2:77:5E:86:2C
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:cc:f9:6e:36:ad:ae:c0:ca:0a:6d:6a:03:29:9e:90:e6:
e8:13:d1:f9:b1:cb:a7:93:e8:85:6e:45:e1:6d:57:55:03:39:
36:66:b4:cf:a3:3e:75:80:9f:01:b5:d2:13:cb:da:fc:a3:02:
dc:66:95:38:92:bd:6d:11:6b:72:ca:94:1a:94:be:b5:a7:e3:
86:cc:96:49:9c:4a:6f:1f:3d:2d:c7:eb:d9:c1:fe:2b:74:ef:
79:ac:aa:27:3c:bf:30:c4:4b:34:1b:3c:f8:2f:51:24:7f:b2:
b2:26:d7:69:34:48:6d:42:80:e2:e4:70:91:a7:a1:08:03:92:
64:99:d9:87:f1:44:2a:31:a8:46:e0:5d:6c:1d:e2:95:bf:8c:
ba:b9:7a:89:4a:4a:4e:65:c0:c4:f4:fd:6e:b8:a0:2d:55:b1:
90:66:f2:1d:24:22:c5:f7:dd:84:9f:ab:0c:2c:a7:79:e9:f6:
f6:68:6a:09:24:45:17:13:22:dc:50:c9:72:ea:1b:7d:e6:d9:
c3:56:e7:f8:e2:3d:ba:68:c3:90:4e:23:6a:c9:fa:a8:ed:ee:
03:4a:4f:02:05:92:03:ee:b9:67:19:c0:d9:1b:2f:cb:82:0a:
ca:93:b5:91:c3:d2:85:93:cd:83:7e:b7:c9:7b:af:12:13:47:
bb:cb:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:52 2025 by rpki-client