Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: B9ztrd9gJ+sZxhxqQe+K35H9uJpMUS8Kp83pA7w/b+4=
Subject key identifier: 3B:F2:FE:50:E7:72:85:4C:6C:5C:A6:3D:41:AA:82:D3:62:0C:B0:9E
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 0197BFA3D698D3D3DC72A7C7F941407B1B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 064D
Signing time: Mon 30 Jun 2025 07:01:14 +0000
Manifest this update: Mon 30 Jun 2025 07:01:14 +0000
Manifest next update: Tue 01 Jul 2025 07:01:14 +0000
Files and hashes: 1: LeauqIgA77Guz7NTqsqggxkb3OM.roa (hash: kn3sF5o0HTuBHvbByMR9Dn62yBg3LuqPb4rgaycQgmQ=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: BtLPsMOPU/fiMz9Gco0RTxk2LvnKVri+iABzcJRvrHw=)
3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a3:d6:98:d3:d3:dc:72:a7:c7:f9:41:40:7b:1b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Jun 30 07:01:14 2025 GMT
Not After : Jul 1 07:01:14 2025 GMT
Subject: CN=3bf2fe50e772854c6c5ca63d41aa82d3620cb09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:51:a1:4e:11:b3:85:bb:0d:9b:df:97:60:
1e:31:db:ea:47:cf:7e:7d:34:f4:f5:40:f5:03:8b:
86:28:e8:df:ad:a9:60:f2:ca:c1:65:60:24:bb:ef:
97:f3:6f:1c:e7:27:0e:41:15:40:91:a1:9e:6d:ec:
b4:48:35:af:e5:35:46:22:66:8a:04:5a:d7:e7:6c:
70:06:8f:a8:8d:29:c1:a2:7c:cf:81:1f:c8:cd:0c:
da:d6:77:69:14:1b:2d:f1:69:7b:c0:0e:98:23:2c:
f2:97:13:9a:49:59:e6:08:ec:39:9f:ce:a9:58:94:
d4:ef:8e:77:11:a3:7a:cd:64:ec:fa:28:20:01:52:
5c:75:ed:17:90:c6:bf:ee:82:d1:fa:9c:6b:18:ff:
86:ac:b7:77:04:b5:01:cc:bf:e2:bb:5f:19:3e:49:
2b:80:72:55:54:ca:bb:af:48:c4:82:38:6d:f1:fa:
47:91:59:6c:7b:19:b9:74:da:7b:b6:13:41:1d:81:
80:71:51:48:6b:ca:15:f5:0f:12:d5:0c:1c:dd:ca:
b4:12:5f:6f:f2:fa:c5:51:40:8d:01:0a:19:49:ce:
cc:09:ea:9f:17:7f:f1:d5:a6:cf:77:25:a7:24:bc:
85:4f:07:4c:b2:e2:4f:d0:ad:c4:49:77:70:00:62:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:FE:50:E7:72:85:4C:6C:5C:A6:3D:41:AA:82:D3:62:0C:B0:9E
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ff:80:60:59:e3:09:1f:25:bd:3b:18:cf:3a:3b:96:7f:f6:
c5:26:d4:3e:6d:b1:be:1d:94:c1:7c:95:f1:33:2a:cd:bc:05:
5c:14:17:4f:10:1d:61:88:93:fc:3e:29:19:23:d9:71:12:92:
19:ed:22:72:08:21:8b:62:b5:75:36:04:5d:c1:4d:e5:1e:da:
fa:55:bc:72:a0:ef:b6:54:cb:b3:e5:bf:72:36:e7:78:06:7c:
cc:ed:c6:44:3a:16:23:a5:66:09:9d:59:b7:d7:cb:20:b7:c1:
21:ec:f1:be:cd:6f:15:bb:51:ef:d0:35:4a:d6:37:11:17:f9:
4b:6c:40:96:d7:50:76:79:c8:9a:aa:d3:9b:48:fb:0b:ee:00:
86:ef:ca:b6:68:ce:30:e9:1b:b5:18:fc:82:e2:1b:80:7d:05:
ea:8f:79:5c:26:3d:79:5f:f6:7c:38:3e:b1:d9:4e:3d:43:00:
73:cb:9e:01:12:a7:a3:38:71:62:5d:c4:22:f7:4a:d0:a2:2c:
c1:31:0c:60:dc:36:9a:27:29:8e:f5:b4:d3:4d:99:57:a0:40:
12:03:13:74:e6:40:06:1c:07:31:e6:a8:53:b8:f7:53:87:65:
e3:11:aa:d3:b6:8a:29:f4:c2:34:b2:fc:31:9b:1c:7b:66:98:
12:98:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:51:49 2025 by rpki-client