Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: amjr6EZXGwqKGm/x28lqESCU7sTVA38hVHdo0uZqRSI=
Subject key identifier: 86:AE:E9:32:3C:2A:9C:D6:CB:9A:3F:46:06:7D:9F:DA:16:CC:3D:7F
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 0197B7B37A30D37D7B92963738EC38BE0585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 0E37
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: WpVFoG8JvCUBmOz2MiFGfHOsXzJG8Kr9SMByhk/6BTg=)
2: pkoA1nbX0r8lwiVwxbfu80R8kOU.roa (hash: dAPrEkvaKQk5s5Z7WHpV1G3F1Sw4lOg/QTiasC7ZX1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7a:30:d3:7d:7b:92:96:37:38:ec:38:be:05:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=86aee9323c2a9cd6cb9a3f46067d9fda16cc3d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:83:15:f8:ea:0d:54:d2:41:c4:e7:d0:6d:
45:dd:ad:98:d7:8b:34:50:a6:e9:1c:df:7c:cd:fb:
8b:89:94:bc:e4:13:a0:6f:0d:6d:f6:5f:9b:8a:87:
44:82:30:52:a9:e0:a3:74:53:92:50:29:e2:55:bb:
85:d2:7e:37:42:e4:08:7f:f5:b6:1e:79:57:70:bf:
77:99:09:21:df:5a:3e:b4:90:57:2e:0e:66:49:5f:
5a:4e:ba:11:e9:e7:8a:4a:ec:e4:00:75:d7:25:13:
ac:76:b6:3c:54:2a:13:5a:11:3d:78:66:65:81:b5:
ed:61:f0:34:c8:88:eb:27:c2:d6:26:fd:b7:09:c2:
64:fb:e0:d3:55:1e:8c:55:ef:36:6c:a9:ef:58:f1:
85:73:71:46:43:05:6d:26:05:2d:d4:99:31:a9:7b:
69:a4:fc:d3:3a:48:cb:b3:98:56:09:52:f6:f6:54:
eb:e9:61:82:ca:43:30:51:3f:bb:d6:cd:11:04:3c:
3a:64:c8:89:f0:c3:1b:c5:ef:ae:25:6e:d3:7f:0e:
df:71:81:69:42:cd:b2:f4:e1:7e:a0:e3:b6:5a:5e:
48:d9:46:5d:06:c6:82:82:44:77:95:49:bf:2c:87:
b4:00:f2:91:62:cc:c5:98:e2:f8:bc:85:fe:cb:ba:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AE:E9:32:3C:2A:9C:D6:CB:9A:3F:46:06:7D:9F:DA:16:CC:3D:7F
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f6:b5:37:50:ff:16:df:fc:35:7e:a3:d0:ff:8b:25:00:dd:
75:9d:58:47:c2:3c:ec:7d:99:53:ae:fb:f1:91:f0:0d:19:3a:
2c:ec:af:fc:96:1a:39:9c:33:3b:ec:02:66:6b:10:b2:0b:43:
2f:9e:74:36:b6:f2:63:56:65:ff:98:3c:53:6b:be:3b:38:21:
c6:52:66:1b:81:47:9a:4d:3f:dc:f2:f1:83:f6:12:20:4c:03:
2f:59:eb:f5:b4:11:da:75:17:8d:3a:73:aa:8f:ce:c7:5d:31:
d5:f8:1e:3a:d4:d0:67:d4:7d:6b:c7:76:84:78:ba:bf:4d:f0:
d5:17:56:a3:cc:a0:d0:06:a6:d3:b9:ec:66:c8:d8:af:56:1e:
c1:47:8b:bb:3f:67:53:dc:fd:05:b2:4d:df:dc:a9:41:32:3f:
bf:03:dc:d7:45:11:57:9d:e3:22:15:ee:47:b0:55:71:e3:f1:
07:90:67:8b:5f:1e:cc:ce:16:42:fc:40:99:ba:be:15:c2:52:
3a:55:90:5f:8e:8f:50:61:86:51:fd:02:53:0b:ef:3a:55:e5:
9a:b1:76:19:1d:83:e3:ae:ba:19:3f:87:eb:64:6d:3f:05:83:
a4:87:1c:ae:fd:c9:23:d9:79:f3:f6:55:2e:31:d2:3b:40:99:
60:a1:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:28 2025 by rpki-client