Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: eXre8DwRS/j8+sbRB3APcQAwpf6eIeJUoDiCha3j060=
Subject key identifier: 92:3E:F0:5E:7C:D6:8C:FD:36:05:ED:0D:1B:6B:A8:DF:02:48:92:14
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 0197B8212C8FF49A8BA2CEC806302AC7743D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=)
2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: ptUd+IXPZF2LC1u8jk4uFqIHxExkCNZMx6zlgjHJN7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2c:8f:f4:9a:8b:a2:ce:c8:06:30:2a:c7:74:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=923ef05e7cd68cfd3605ed0d1b6ba8df02489214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:6e:4f:96:78:45:31:e4:67:c3:c8:00:b8:
2e:0b:9c:9a:51:18:e5:ad:87:49:8b:90:02:b7:46:
f8:96:a4:99:6e:37:e4:41:27:cf:8e:86:11:a1:29:
5b:fe:e6:e4:b7:6c:a8:5b:88:8a:85:eb:09:0b:89:
8f:63:a9:3d:32:81:39:03:b9:14:75:ca:0f:b7:f9:
3c:9b:b6:0d:b0:f5:7f:3f:7a:ef:08:1b:09:44:e5:
b2:f2:82:a4:57:47:ab:2e:b5:67:5e:aa:c5:d6:64:
25:fd:1a:82:34:6c:9a:04:40:9a:01:86:ae:26:21:
04:73:c6:83:ae:3d:d2:e7:0e:82:9a:d4:eb:d8:a2:
30:17:a8:73:e4:eb:c6:fd:e8:ff:78:8f:98:ab:5c:
a9:7f:2e:e8:43:dc:d9:7a:db:d4:59:90:6f:be:6f:
b5:b2:e4:d3:75:c5:df:8f:78:b7:5e:c1:08:5f:f8:
8d:94:b3:5d:d9:a0:61:3e:61:d6:3d:65:9c:6c:77:
e1:0d:e5:51:cc:1d:9a:17:d6:5f:82:f9:a7:b5:cf:
1d:d6:2a:a7:25:49:e7:39:4e:3e:eb:be:93:aa:69:
97:3e:37:e5:1d:ad:29:98:f9:67:e3:0c:3a:42:3a:
0b:d4:32:2a:6b:53:ef:f9:9d:14:d6:21:65:f0:42:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:F0:5E:7C:D6:8C:FD:36:05:ED:0D:1B:6B:A8:DF:02:48:92:14
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:50:83:db:b2:c1:78:dd:ac:f6:68:c0:bc:39:44:83:9d:25:
b2:30:e0:db:b9:47:ab:58:92:aa:6e:19:5f:59:09:e0:4c:5b:
c5:d0:d3:ad:20:20:47:85:0f:5a:09:5d:72:40:88:24:77:6c:
75:e8:1a:0d:93:67:39:43:d4:2e:e5:fc:d4:0c:77:62:2c:60:
34:69:73:56:b3:9e:20:e3:f7:ec:4d:0c:9c:be:48:83:02:b8:
f0:1f:f1:c4:17:3f:44:cd:8f:91:3b:84:f6:05:89:3d:b9:4c:
47:74:1f:a1:01:a5:7f:a5:3b:89:e7:a5:ae:bc:6b:e2:70:76:
a1:f6:6c:a5:d7:7d:a6:ab:e9:34:a2:1a:94:00:d4:61:b8:04:
8b:14:28:f1:10:ee:31:01:be:d9:b9:ff:d0:2c:e9:fb:46:ce:
01:06:4e:40:00:ec:14:aa:a2:ca:21:a4:a9:1e:40:d9:29:51:
ae:26:6b:ee:ac:32:e9:3d:a0:83:78:16:46:4f:c7:5a:e2:da:
a1:5b:8b:da:7e:0c:8e:8b:ee:0e:14:42:be:6c:ee:cc:b0:25:
4b:7c:19:d4:e8:44:13:bf:4d:e5:2f:f4:f1:1d:3f:bb:41:74:
70:8f:80:bb:c4:fb:45:e9:c6:11:ae:37:d7:45:f7:9a:10:ad:
9a:74:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:51 2025 by rpki-client