Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: CUgoEXvcMuuMGMTh7FSoM5vfNRW5i2xtFbRmGwR3ZB0=
Subject key identifier: 7D:72:25:06:5A:35:A2:C9:CB:1F:4B:5A:80:D2:C7:B4:94:E3:36:04
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 0196BD49B3F8253A2D9C8334D035B5B4C817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0687
Signing time: Sun 11 May 2025 03:00:45 +0000
Manifest this update: Sun 11 May 2025 03:00:45 +0000
Manifest next update: Mon 12 May 2025 03:00:45 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: aQldqLH5cGV7K3z281AF7FOxI8ROxuSJQXjLWzcTWdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:b3:f8:25:3a:2d:9c:83:34:d0:35:b5:b4:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: May 11 03:00:45 2025 GMT
Not After : May 12 03:00:45 2025 GMT
Subject: CN=7d7225065a35a2c9cb1f4b5a80d2c7b494e33604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:da:32:c0:56:f9:a0:8a:10:de:65:22:21:
7f:13:2d:da:19:fb:12:ed:6f:aa:25:63:ac:87:ec:
fc:4b:15:9d:5b:9a:1b:ea:10:e4:1b:b7:d9:34:4f:
74:35:ce:36:f8:51:5a:bc:fb:16:62:2f:d0:d7:7f:
00:85:a1:4d:5a:8f:88:b0:19:92:4b:93:9c:63:22:
5b:b7:93:ef:26:a2:38:92:0b:94:af:30:7a:56:4d:
26:a5:85:b8:24:e9:e8:8d:13:12:6e:eb:2b:e5:b1:
18:3d:fb:e2:36:3c:d5:a6:72:ec:1e:e9:42:92:c8:
07:09:d8:e8:1e:87:24:28:9d:eb:fb:62:70:2e:26:
7e:51:dd:d7:25:0f:d8:39:32:5b:68:3c:d8:a3:33:
b3:87:74:ba:1b:e0:e7:bf:eb:1e:94:b4:40:7d:2c:
d0:fa:a0:af:51:e4:c0:4d:f9:2d:70:cf:91:7f:a9:
9a:63:61:b8:75:4c:28:17:24:eb:5f:67:a8:99:2a:
51:56:67:c0:eb:9f:fb:0c:e3:90:9a:5c:a3:08:af:
7e:92:4a:02:85:1c:cc:e4:7a:72:58:db:32:59:26:
2f:09:63:13:1b:a2:27:4c:ee:79:37:d8:2a:63:fa:
96:21:b9:d5:12:2a:ba:c1:bb:81:a5:be:d9:f9:c3:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:72:25:06:5A:35:A2:C9:CB:1F:4B:5A:80:D2:C7:B4:94:E3:36:04
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a1:11:6d:21:ec:d9:b3:e9:58:d9:b7:fc:49:35:00:1c:4c:
34:98:98:17:55:e5:66:2a:02:9d:23:bb:87:ce:53:40:5b:13:
ae:ac:1e:b2:fc:68:f5:f1:e6:6d:e2:3a:3f:59:ca:8d:3a:bc:
17:0a:bc:ab:8d:76:b3:3a:03:5e:52:4c:76:32:d7:24:38:27:
d0:2e:a3:83:fb:8b:19:a8:7d:79:1e:e9:8b:ce:16:f1:7d:30:
9a:0a:58:51:04:0a:84:bf:c3:73:50:3e:9d:e9:01:0b:db:ee:
b6:8e:d7:e7:b6:db:fe:cc:44:c6:71:c3:55:5b:ad:a4:8d:85:
02:c0:fe:02:43:05:8e:23:14:d1:6d:b9:90:1a:14:04:11:31:
96:79:a0:51:59:d9:f1:c3:6c:93:6c:11:7f:5a:a1:b0:cb:59:
e4:ef:10:d5:d0:30:7d:90:f7:f3:2e:7e:25:08:2f:7c:29:bb:
a2:ec:bc:f1:3f:23:e4:ba:3b:23:a9:c3:07:2a:23:d5:e1:64:
7e:77:c6:cc:05:a7:f0:48:2d:c3:8e:49:05:7a:e8:68:06:62:
e0:c2:9a:96:c1:23:b0:1d:01:45:d0:ef:8c:14:cc:bc:fe:7d:
37:a5:7a:17:96:94:31:aa:09:83:33:1c:00:ee:06:11:30:57:
44:89:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:25:41 2025 by rpki-client