Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: Nq7dTgVkeVjpSkyFOlV4DRJ0sk5dbVxkG8AXL8rvJHI=
Subject key identifier: 2D:8A:72:CB:00:46:F0:77:73:71:C0:6F:1E:45:27:40:71:57:E2:C8
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 0197B8FD487BBD1AC134DC05EBE9EA6EA97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0BBF
Signing time: Sun 29 Jun 2025 00:01:36 +0000
Manifest this update: Sun 29 Jun 2025 00:01:36 +0000
Manifest next update: Mon 30 Jun 2025 00:01:36 +0000
Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: yJb4XbZU8Xc+lSwEyx0Y/sFWofbxDYFv6pOrbEOGRPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:48:7b:bd:1a:c1:34:dc:05:eb:e9:ea:6e:a9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Jun 29 00:01:36 2025 GMT
Not After : Jun 30 00:01:36 2025 GMT
Subject: CN=2d8a72cb0046f0777371c06f1e4527407157e2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:f9:a7:55:3d:8d:ef:37:53:ef:6c:ca:7d:
11:2a:74:7f:14:36:7c:aa:0e:4d:5c:b1:8c:e9:5c:
b9:bb:28:81:20:01:d5:f8:f7:c1:0c:4c:24:93:15:
5b:a5:f4:d5:2f:c7:22:70:ca:f4:72:f5:e6:39:6d:
98:63:9c:4b:06:59:af:4d:15:8f:07:03:71:ad:ba:
b2:4a:e9:cf:e1:d5:2e:7a:67:80:27:55:3a:bf:34:
51:07:d5:f6:20:50:03:bb:13:65:76:dc:78:37:66:
25:fe:3d:cb:91:62:2a:84:a9:89:a3:3b:a1:22:ef:
9b:0e:6d:ab:eb:bc:b0:b1:9d:fb:61:d6:93:c0:20:
28:66:09:9a:ec:f4:a2:ac:c0:87:5a:9d:86:24:11:
a5:c6:67:ca:8d:38:a5:b9:12:ba:5a:db:bc:2a:60:
3a:02:2f:40:5a:a5:d8:47:d9:87:d8:13:ff:2f:3e:
ea:6d:b3:8f:d1:d9:31:d0:26:fc:8c:bf:b1:42:25:
f6:73:9e:cc:4f:5f:4d:c2:dc:f1:4a:ba:ad:27:75:
98:a7:9f:3a:1b:c9:6a:50:92:7e:ca:86:c7:77:6e:
f2:6d:3a:35:8d:05:ca:73:06:d3:40:0c:9c:59:26:
da:94:95:4f:1b:1f:77:5c:37:8a:3d:a9:48:f1:d4:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:72:CB:00:46:F0:77:73:71:C0:6F:1E:45:27:40:71:57:E2:C8
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fe:1d:cb:94:8a:e9:0d:1d:45:68:90:81:cc:64:85:26:a8:
2f:00:34:74:35:17:0b:af:20:38:6b:2b:5d:bd:ef:58:bb:28:
b0:e1:4b:28:d7:28:87:75:88:50:a3:0a:79:67:00:4a:0e:e2:
99:76:51:2f:71:94:db:ad:9e:72:18:cb:32:ef:be:63:be:2d:
20:89:53:9f:a0:60:ca:b6:d7:e9:25:9a:77:85:da:68:37:49:
62:82:44:00:4b:5f:bc:af:28:73:ff:30:0d:b2:b3:43:43:5d:
25:fa:00:23:4d:ac:41:d1:9b:b0:05:6b:e5:0b:13:a4:a1:b9:
ce:15:2e:c2:89:99:ec:32:e5:df:30:59:5f:45:58:9d:44:6e:
22:39:2d:70:d0:53:70:ec:9f:59:19:a7:e7:29:12:29:1f:0f:
8c:34:e1:7c:c4:05:78:57:35:62:b5:e8:61:a4:35:af:27:2d:
fb:a8:e3:c8:f8:4a:bd:86:7e:84:3b:47:53:0f:66:e0:57:8d:
66:23:38:02:98:bb:5b:0a:6c:2a:8f:df:dc:d5:49:31:0a:1a:
7a:08:30:78:ac:92:ef:5f:ff:2d:ee:97:34:74:ea:27:07:33:
a7:0f:f3:32:0c:47:08:f0:3d:85:3f:36:c9:49:87:b4:90:4a:
11:bb:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:24:57 2025 by rpki-client