Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: MqU4m0fzG/9P2/Z0UfqhZ8+ULwPsvBJmc+n5q4awzJM=
Subject key identifier: 51:C1:9B:61:27:BA:05:C9:67:85:13:FB:EF:BF:8B:7B:DB:48:D7:E6
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 0197B8C58F4A0B7002E9AD892334A634A66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0AA7
Signing time: Sat 28 Jun 2025 23:00:44 +0000
Manifest this update: Sat 28 Jun 2025 23:00:44 +0000
Manifest next update: Sun 29 Jun 2025 23:00:44 +0000
Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: gcvGFv4uB5S1GQpQrP03cV9pBQHBDgtDcKNzUNp2FBg=)
2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:8f:4a:0b:70:02:e9:ad:89:23:34:a6:34:a6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Jun 28 23:00:44 2025 GMT
Not After : Jun 29 23:00:44 2025 GMT
Subject: CN=51c19b6127ba05c9678513fbefbf8b7bdb48d7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:d6:cb:2e:ff:e7:25:93:b5:05:60:ea:31:
f8:e6:a1:da:6e:60:e9:d4:5d:e4:c9:7a:75:e3:6e:
8e:d8:e9:b9:b0:84:07:55:83:ff:cd:61:ea:96:cc:
a3:a4:59:35:38:a8:65:fe:67:84:a7:e9:97:3e:d4:
76:15:0f:02:64:f1:aa:19:43:3c:d3:70:13:0a:f0:
29:a4:6a:f8:1b:4f:5d:8a:98:f6:4e:c9:9b:b5:c0:
4c:2c:34:4e:77:6f:2d:4e:f7:3a:4c:42:99:d4:24:
61:11:23:8d:27:5e:7f:bf:d0:8e:ac:f9:1e:e6:cf:
19:a5:b4:60:5c:1d:c0:51:71:9d:5a:a3:c9:9c:75:
33:23:a1:a8:48:3f:f2:ae:4f:f6:dc:b2:bb:6c:42:
33:90:ad:49:d1:c2:b8:05:20:80:61:d7:e2:95:8a:
ed:3b:77:45:ad:e9:b3:89:a3:66:39:58:29:0a:cf:
08:8d:4e:d0:3a:22:d8:cc:da:aa:8f:e4:64:b5:48:
6b:af:be:e5:9d:02:ae:78:d2:53:16:b8:c4:d3:b1:
f9:82:23:94:c8:ea:12:3f:16:a2:21:0b:ce:11:80:
30:e2:53:85:6d:c8:40:e1:83:3f:6c:3c:25:6a:25:
6f:22:10:89:49:96:aa:4e:89:bf:25:69:08:c5:d3:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:9B:61:27:BA:05:C9:67:85:13:FB:EF:BF:8B:7B:DB:48:D7:E6
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:31:71:c8:91:bd:52:df:29:aa:72:9a:4a:5a:4e:bd:22:03:
f2:9b:91:f5:62:ff:4f:b7:33:9c:0a:9c:80:e6:b4:5c:b0:ec:
a4:19:ef:f4:99:38:18:45:2e:bf:39:38:f0:49:6b:92:cf:d5:
7b:18:2c:7b:2f:46:84:f3:ee:c1:aa:1d:1d:24:91:e0:bf:96:
76:e4:bc:e5:ad:59:d4:45:b6:0a:9a:89:7c:46:c0:d2:ec:08:
16:8a:e9:2a:d0:e3:4d:53:5b:3e:b3:ae:b4:53:36:20:72:17:
f3:28:73:db:fc:a8:6e:cb:b0:bb:48:a2:d0:7b:b2:0a:cc:9f:
4c:42:18:9f:d9:ce:b2:43:0f:ed:4f:30:06:ba:05:e6:0a:67:
6f:2c:45:19:50:73:76:e4:03:37:90:38:b6:8d:2f:95:2c:0f:
47:40:c2:cb:ec:28:13:d8:ef:b3:8b:2b:1d:02:1d:70:11:83:
4a:54:1b:8e:59:38:33:b1:67:c7:71:32:6d:c7:b3:46:bd:a8:
f8:14:8b:8f:9e:5f:22:58:66:30:c1:a4:dd:6d:42:4e:21:d4:
8a:00:c7:52:e7:26:e1:d5:00:7b:37:4f:f4:20:69:0d:39:4e:
3a:a9:4c:09:f4:bf:5e:88:3c:35:80:ac:2b:44:74:e5:1a:ba:
a8:9e:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:32 2025 by rpki-client