Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: BBn0B9iztoZ8SmIVlxzqMEzy26fpjumj1tc7MMCQTo4=
Subject key identifier: D3:0C:4A:FE:45:15:AE:18:67:BD:50:FF:08:0A:AC:78:BF:0A:5B:33
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 0197B6A1F4F105CDFB9F1DFDB3946B0BDCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 093D
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (hash: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=)
2: go-J-JwBrpAVGCsK-19AMahhYuM.roa (hash: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: DTbVTUtfH7tia+MpfUVAGMPipIiZBBCHPYdz5DLUQQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f4:f1:05:cd:fb:9f:1d:fd:b3:94:6b:0b:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=d30c4afe4515ae1867bd50ff080aac78bf0a5b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:cd:b7:bb:da:b8:e0:ff:2d:b8:1f:e0:25:
ac:50:d3:a2:7f:12:36:ae:b5:9a:70:f8:38:4b:c4:
f5:1a:13:0c:20:50:43:b7:73:2c:6e:33:13:76:12:
7e:55:7c:ac:ae:bf:97:bb:d9:86:45:7a:da:e5:a3:
20:80:67:6e:0e:39:19:dc:ce:74:a4:75:fb:1d:59:
55:30:59:28:f2:e6:46:80:4c:27:02:21:7c:50:5c:
9d:c0:92:6f:d4:cd:a5:62:73:d5:81:71:4f:a2:8c:
91:53:6e:d8:f8:b2:cf:96:96:b4:a3:41:02:e5:91:
af:a4:99:f6:72:68:b6:f9:62:a6:46:a9:ae:6b:7b:
d8:70:6e:e5:0d:fa:39:71:25:8b:03:eb:68:aa:d2:
af:08:df:6c:03:50:05:62:6b:26:5a:ef:e9:cf:89:
f2:2b:13:6b:f7:a2:3c:e2:0f:15:b0:02:1c:4e:dd:
12:0b:72:04:6a:d7:1c:21:fc:0c:11:08:dc:37:30:
6e:ad:46:bf:e6:67:ba:ce:9c:9a:88:0b:2b:ec:78:
21:5f:af:5c:5f:b8:d4:a3:59:99:88:49:a1:28:58:
e2:b6:61:54:6d:f7:b0:31:a4:d5:26:16:58:00:d8:
d7:4e:51:a7:47:ce:49:d3:e6:71:2c:33:0e:de:c8:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0C:4A:FE:45:15:AE:18:67:BD:50:FF:08:0A:AC:78:BF:0A:5B:33
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:06:c4:5f:59:2c:c6:c9:6c:53:09:5a:75:5b:45:c0:90:
4e:5a:41:0a:f7:69:31:54:c3:b1:8b:44:2e:e2:14:33:ad:02:
04:28:f6:e5:fa:61:ae:84:1f:2e:0e:d0:d2:ac:14:e4:a7:c2:
b9:a6:91:f8:4c:62:0e:e7:7e:a4:65:61:c9:3e:b4:52:a2:29:
4c:75:9f:bc:4e:a3:66:7c:47:b5:41:07:b4:00:09:a8:b6:6c:
4b:fd:88:cd:26:0d:da:2b:11:3b:d6:f6:cb:17:8e:d9:63:83:
15:1e:1a:2e:4e:db:01:cb:31:f7:14:34:46:8d:6c:ed:e3:53:
43:8f:8d:b5:d9:ff:2a:05:b4:13:4e:4e:96:b2:d1:1f:55:ce:
78:ee:b6:e6:bf:44:18:70:fa:9d:da:98:ae:44:b9:3d:ec:8e:
65:cd:25:91:75:27:25:8b:66:67:07:98:e9:1f:4b:0d:3f:4a:
3b:d0:34:d4:ce:e0:37:34:c3:4f:26:51:da:3e:11:93:1f:63:
07:0d:33:e1:01:48:76:5e:6d:e1:dd:bd:33:0f:59:f8:80:a4:
57:6c:d3:1e:ed:59:4c:f1:a9:e1:b6:2c:72:2e:c0:d9:5e:7a:
2f:00:2c:80:61:16:d1:ca:cd:0c:45:6d:d6:c2:1a:94:ed:38:
7a:93:ad:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:13 2025 by rpki-client