Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: AQ2ZMMRWL0vTXO8kAagicLiiXz7MSswZLIeQZrTvtWA=
Subject key identifier: 0F:7D:EF:E6:0E:F6:58:5D:7E:8C:E2:1E:91:0C:32:96:3E:D9:51:08
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 0197B70E4E9C8EDE1C4E511CFF46F8171401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 12BC
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: e2SQSmJ5Uij4VeGzNgyMcf8tHqM.roa (hash: /jn7jwBSYHJhjR+sZRgi9zex0zsrMd1Ejp9Gj9O6Ons=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: CL9ZpJAHHO0JRMiREsKTM6Yn5Z99Kkf9yTKBO3oE1Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4e:9c:8e:de:1c:4e:51:1c:ff:46:f8:17:14:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=0f7defe60ef6585d7e8ce21e910c32963ed95108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:a5:69:6c:f2:03:10:45:97:c8:ba:b6:5a:
11:2a:cf:c8:c5:05:c5:e8:33:c6:82:2b:2a:f0:ec:
73:73:49:ac:b7:a4:30:19:43:ec:12:40:16:90:76:
b4:f2:4b:84:c9:b8:10:67:5e:c1:34:4f:76:e1:68:
dd:89:2e:e7:2f:c2:d7:0a:7a:94:36:b0:61:de:1a:
93:a2:94:69:88:6e:d4:4d:dc:f4:8c:3f:fd:51:34:
db:bf:16:74:04:bf:23:d3:86:2b:5d:90:c4:3d:07:
0c:b3:b9:82:84:84:4a:e9:dd:25:29:b9:64:54:50:
90:af:9f:6b:86:5e:1f:75:6b:54:82:4e:3f:c5:73:
d1:6b:4b:29:65:a0:54:b7:77:d8:8f:0f:4d:3a:87:
ee:39:d9:37:44:b5:16:e8:ec:d3:bc:cb:e7:31:3a:
a9:44:a9:2a:e7:18:1d:05:df:4a:ad:d9:9a:58:d0:
49:77:63:63:f6:ef:5a:93:3f:66:c8:de:a6:bb:ab:
f5:04:08:bc:c8:3c:b2:d7:41:ed:c5:1e:2e:28:f4:
0e:55:99:bb:f8:13:2c:8a:fa:bc:71:70:f5:9a:01:
94:4c:be:f3:41:ba:02:24:08:33:43:8b:34:5d:13:
a1:b0:c5:4f:24:08:5c:95:19:fe:20:c4:2e:27:63:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:EF:E6:0E:F6:58:5D:7E:8C:E2:1E:91:0C:32:96:3E:D9:51:08
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:63:05:73:92:bc:b1:46:2c:c0:56:36:6c:11:31:62:a2:57:
ef:06:46:ad:64:e9:d1:f9:b6:dc:c3:e4:02:a8:4b:65:1d:f1:
de:22:ab:04:77:80:5b:2c:b5:c9:86:8c:ea:f1:8a:cc:84:94:
58:fa:3f:64:58:43:a8:4b:06:04:02:64:e9:23:73:ed:14:8d:
0f:52:1e:b1:df:bc:4e:af:92:27:57:ac:a7:63:3c:ec:06:52:
83:ac:64:57:f8:33:30:f3:8f:00:b1:78:af:f1:49:b1:63:d3:
11:ec:7c:db:13:d3:cd:5a:de:f6:40:c9:19:fd:1c:2c:73:d6:
3a:ac:ac:ec:27:ab:39:44:9a:c2:7c:d1:46:04:86:c1:e8:8f:
21:97:7c:a4:5c:88:2b:e2:77:fe:df:92:7c:f2:47:f9:66:d4:
e4:66:72:9a:b5:50:a3:c0:b0:3d:a2:b1:37:87:a1:c8:5e:59:
b7:3d:f7:0f:1b:6d:c6:5c:4b:ca:c9:ea:85:a8:f8:e6:8c:36:
38:cc:4f:08:56:bd:36:64:66:64:52:21:14:b1:79:61:17:2b:
41:b9:3e:00:43:31:8b:a9:8a:78:7d:87:41:8d:67:2a:8d:11:
a3:b9:b0:42:1f:3b:6d:97:f0:15:31:79:ae:d0:a6:ab:3a:cb:
ce:14:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:06 2025 by rpki-client