Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: 30lCxr8C06au2GVb+Q94ffk9JTYxAD9BE09uJFxrlcU=
Subject key identifier: AF:F6:86:48:FD:E4:A0:AA:BA:A7:5C:69:EC:CA:A4:B7:CD:2B:D0:6D
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 0197B89037193AC1B4D2F2716CBB7955D74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0709
Signing time: Sat 28 Jun 2025 22:02:28 +0000
Manifest this update: Sat 28 Jun 2025 22:02:28 +0000
Manifest next update: Sun 29 Jun 2025 22:02:28 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: vAZLdU+seoDbLZ2l8K+6eSs5xSOBaY1nGCB0dq4DnRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:37:19:3a:c1:b4:d2:f2:71:6c:bb:79:55:d7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Jun 28 22:02:28 2025 GMT
Not After : Jun 29 22:02:28 2025 GMT
Subject: CN=aff68648fde4a0aabaa75c69eccaa4b7cd2bd06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:be:7a:87:a9:84:87:21:8c:87:2a:f4:ac:
2c:23:1a:00:ec:41:54:b2:46:02:d5:22:49:b1:75:
b7:f4:f2:3f:13:72:f1:d4:c6:2e:d5:30:12:53:e8:
16:ef:c4:bb:82:ca:74:92:be:96:8c:a4:16:b7:1c:
c8:fb:29:e7:58:cd:db:df:a3:a2:5e:54:c9:0d:79:
31:81:6e:f7:87:a1:5e:02:8c:e0:80:e1:6e:7f:67:
0d:bd:69:6b:a0:c6:77:cb:c8:a2:31:a3:8a:d8:79:
48:1e:14:b4:29:ee:c3:13:97:bc:4e:65:dc:41:5f:
8c:72:60:ef:5b:40:b9:4d:24:ec:e3:70:49:e2:45:
20:29:64:51:ac:92:c5:e8:5c:4d:72:09:8b:25:f6:
98:9b:22:ee:57:34:ac:06:4a:fe:75:b8:cd:e9:8d:
24:b0:be:d9:e7:b2:44:2d:e2:19:08:87:c2:7a:1b:
52:de:38:db:86:44:f6:a3:a7:03:cc:3e:78:e3:48:
d1:4e:aa:f7:e0:09:4e:61:bc:ce:54:72:66:04:63:
7e:51:57:c4:51:19:d7:85:a1:e9:aa:c0:50:1d:01:
6c:d4:9e:17:f3:1c:df:a1:9a:f2:4b:42:e1:7c:b8:
3f:e9:55:03:b2:d8:58:9d:69:b1:ad:94:e8:31:3f:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:86:48:FD:E4:A0:AA:BA:A7:5C:69:EC:CA:A4:B7:CD:2B:D0:6D
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:09:55:3c:37:ac:1e:7b:e2:2e:f4:37:dd:74:e8:0b:52:16:
2d:01:ea:c3:82:93:f2:44:af:15:8b:4c:21:52:a4:99:84:fe:
38:63:41:1c:fb:05:a7:c4:a5:bd:64:06:50:26:59:25:73:33:
a8:89:96:49:57:d0:2f:43:f7:17:77:38:f9:e0:e4:5c:4f:55:
50:6b:c2:93:1e:75:c4:6c:26:90:53:96:f7:a2:c3:bc:cd:53:
d9:bd:a9:9c:6e:ac:3d:f5:13:3d:50:00:49:37:66:cc:58:ff:
8f:a6:2d:44:c2:ba:17:fd:70:31:8d:ed:f6:16:be:b1:e3:0f:
7c:e2:b2:5b:36:d1:c1:11:fa:d0:85:4c:11:0e:ec:0c:e8:cc:
30:38:66:c7:17:6a:dc:25:e0:cd:0f:2f:84:fd:a9:a9:ed:ea:
cd:4d:17:aa:65:fe:cc:5d:47:61:61:14:53:6c:bd:77:7b:00:
53:3e:3e:d4:47:96:9a:0b:61:d1:af:7d:65:9d:30:8a:db:91:
c4:ac:90:e8:b8:75:a6:e1:46:4f:c7:bb:7e:11:7c:56:5d:49:
da:d3:32:51:b5:f9:99:9b:ea:01:76:9e:0e:c3:ce:ea:97:78:
e4:53:2a:28:61:03:9d:21:46:6b:62:34:83:cd:fb:e2:d0:4a:
d3:54:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:21 2025 by rpki-client