Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: piXPCbpM322dn0Q/jw4kvRv/Ec7Lcgl3dYiT1W0lQHU=
Subject key identifier: 9E:F5:88:0C:05:AB:D0:15:2E:74:F3:BF:1B:BA:5B:85:C9:DE:6D:5D
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 0197B8214EE1893B8C23659019078A5DA85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 20:01:20 +0000
Manifest this update: Sat 28 Jun 2025 20:01:20 +0000
Manifest next update: Sun 29 Jun 2025 20:01:20 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: qjZADY+4iKT0/G2vQCuwRdSnZY3bNw5i2EFfp29FQaI=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4e:e1:89:3b:8c:23:65:90:19:07:8a:5d:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Jun 28 20:01:20 2025 GMT
Not After : Jun 29 20:01:20 2025 GMT
Subject: CN=9ef5880c05abd0152e74f3bf1bba5b85c9de6d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:5d:3a:c7:fb:e4:f8:82:91:2f:47:39:2c:
7e:b3:49:4c:c2:42:3c:fb:58:a8:4c:1a:fa:77:91:
55:8a:6d:65:9f:a2:80:c8:c2:d2:20:fc:63:e9:7c:
81:41:0b:45:c3:69:c3:39:a8:9b:87:66:70:7f:87:
c4:bd:d2:b4:d3:aa:6d:90:3b:96:35:4a:18:29:20:
56:91:e8:41:db:51:38:69:d2:5e:01:dd:2a:70:2c:
d8:1e:da:13:f9:b4:da:1c:cb:16:b8:5b:1b:5c:b3:
66:b9:38:2a:a7:3d:ca:42:99:8f:e7:23:27:90:b5:
86:03:ea:e9:5b:35:5d:98:8d:f2:92:c7:24:01:c2:
3b:49:e9:80:5f:51:51:e9:49:2b:7c:3a:7d:75:8c:
d0:0e:47:94:61:6f:22:92:48:9e:49:aa:d9:89:ee:
45:a9:01:51:99:81:75:d9:aa:c3:eb:d6:8d:37:6b:
34:94:05:70:42:d9:2d:f5:b7:b0:30:ff:50:be:2f:
f9:78:54:32:eb:4e:3e:3d:a6:2a:2a:b2:47:8c:ea:
88:e7:2a:25:32:5d:9e:4d:e4:99:8b:09:01:03:0d:
c3:3f:14:19:c9:aa:94:ad:7b:2b:61:f0:41:ff:41:
57:5e:8e:2c:44:ca:b9:32:b8:e3:61:2d:ee:e0:b0:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F5:88:0C:05:AB:D0:15:2E:74:F3:BF:1B:BA:5B:85:C9:DE:6D:5D
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:28:76:8f:b9:19:0e:57:a1:cb:dc:4d:b8:06:6b:38:0b:ae:
24:ac:40:f7:36:b6:e5:7b:1e:b2:00:9f:19:1d:2f:ec:e3:55:
0f:13:5a:35:5d:5b:fd:0d:62:0a:4b:3b:c7:c2:be:62:99:5b:
cb:d1:00:eb:17:e4:c3:00:3b:9e:9f:52:56:27:30:7f:3f:c0:
8b:d1:94:eb:03:ef:4e:b9:d0:47:a3:73:0b:83:85:d3:02:f2:
7d:9e:18:93:fd:56:2f:43:07:6d:77:da:a5:be:b4:f2:e4:19:
28:46:30:8d:c9:35:96:d2:0c:85:7b:be:4e:2c:dd:de:3f:a8:
fb:84:23:2c:84:cd:10:b0:9e:7b:e3:d3:ec:a8:e9:52:f9:78:
97:60:16:c9:3d:a6:63:be:3e:c0:c0:1c:71:29:50:55:10:ec:
46:bc:19:42:30:28:2e:0d:54:c8:3e:8d:ce:4e:a9:eb:e7:9d:
af:29:31:74:b3:0d:ae:12:4b:44:f3:64:4e:75:40:ab:17:a8:
22:df:54:22:ed:6a:df:5c:1c:6f:ae:fa:a3:db:c1:fc:e8:60:
5a:7e:6c:cc:55:a6:22:ee:85:9c:c1:fa:0e:d5:49:59:79:bf:
a3:d0:56:22:3f:10:10:24:eb:f2:e5:34:5f:f9:65:a2:bc:54:
38:f6:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:37 2025 by rpki-client