Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: b3q6kNsz+4NSSlBTWl8wWppwRhuo7+hCxb58y7P02eU=
Subject key identifier: 40:1E:33:B6:C4:98:C6:74:43:C8:B1:BD:B3:6F:55:BC:A3:D4:A7:C3
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 0197B8FDA0A6B5E4B49D37EAB8D260B23E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0295
Signing time: Sun 29 Jun 2025 00:01:58 +0000
Manifest this update: Sun 29 Jun 2025 00:01:58 +0000
Manifest next update: Mon 30 Jun 2025 00:01:58 +0000
Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: N3MddpXuevB4W3sTFI2Z5Sfp3r2jV4S5cOh8e2hnKSs=)
2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=)
3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:a0:a6:b5:e4:b4:9d:37:ea:b8:d2:60:b2:3e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Jun 29 00:01:58 2025 GMT
Not After : Jun 30 00:01:58 2025 GMT
Subject: CN=401e33b6c498c67443c8b1bdb36f55bca3d4a7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:08:c8:38:50:75:00:d0:6f:2a:73:00:0d:
39:cf:e7:86:2f:ed:1b:24:db:2c:2d:60:ab:15:40:
0e:3f:d4:9e:98:06:56:a8:ec:bd:d1:12:6e:94:d6:
78:3f:dd:df:af:aa:f6:06:9b:51:20:56:a9:e7:9a:
f0:bc:79:95:99:e6:2a:e8:12:55:12:68:2e:7b:cb:
40:75:2c:45:e6:6b:cd:2d:97:ea:60:4d:08:97:70:
68:17:53:92:75:56:72:c9:df:be:24:ad:af:02:0d:
0a:c2:e0:de:9b:f6:40:a9:03:76:dd:d0:f4:14:42:
60:4f:8d:1e:de:82:12:f8:f1:eb:3a:92:9e:eb:83:
5e:1a:34:26:82:a2:5f:23:c1:3e:e9:0d:ab:17:ca:
8f:4b:8c:c9:8e:c3:2a:8e:95:f9:7f:9b:63:3f:16:
cc:bc:e1:e7:cc:25:99:cf:39:4d:95:bd:cd:cc:ce:
ed:81:2d:87:37:54:cb:6a:4e:4d:4b:23:41:93:2a:
db:ed:17:d2:2f:ec:0c:f2:51:9b:aa:60:f2:1a:f6:
85:b9:37:68:4e:eb:45:f8:95:e9:50:75:5d:8f:56:
dd:41:8c:29:ab:5d:3d:bd:d7:9c:9e:0f:33:68:24:
88:bf:52:8a:15:36:38:81:3a:42:e3:0c:46:db:25:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:33:B6:C4:98:C6:74:43:C8:B1:BD:B3:6F:55:BC:A3:D4:A7:C3
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:db:eb:a8:e1:8f:db:a9:21:04:18:be:ff:a1:76:be:e7:b1:
36:f1:f4:32:b5:b0:55:dc:de:ca:32:48:75:6e:49:72:43:e2:
fa:9a:94:2c:b0:e4:27:ab:0b:81:55:2f:2a:e7:27:ab:ef:53:
7b:90:71:1f:6b:1a:23:fe:90:91:9a:69:2a:71:95:82:d1:b7:
05:a5:4d:7c:4e:b7:79:4e:87:67:6a:44:d2:1e:db:bc:14:a8:
00:5a:c8:94:84:2c:8f:64:43:83:81:c6:ed:ba:3f:d7:ea:85:
f0:60:d7:01:e8:c7:b2:b2:38:ef:7b:97:22:b5:20:13:18:dc:
68:9c:50:e2:47:3b:78:39:43:ff:c5:cb:ae:af:63:e5:17:d0:
f2:68:f0:53:61:4f:2a:f9:3e:ef:53:1f:9c:ee:f9:6f:8c:7f:
4f:76:7c:43:a5:19:0a:9b:bc:c4:d8:65:77:2d:82:1f:e3:42:
20:cb:bf:b5:4d:9c:4f:b3:cc:08:07:38:a2:57:66:00:e6:6d:
50:d7:2b:3c:ec:f9:ea:09:8f:98:4a:d3:18:0f:fd:61:82:ec:
82:45:b7:8e:37:75:ba:23:f2:ff:2a:ee:3e:22:3f:d6:bb:78:
5c:14:f7:af:3d:6a:80:36:70:fe:ba:3e:3c:00:51:a4:51:a1:
84:c4:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:03:22 2025 by rpki-client