Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: 2BKNMGsDOjgZVTgD3+suD1h2djbWPR/d6T0il/CnZKE=
Subject key identifier: 0E:2B:15:30:05:1F:E5:D6:28:D8:19:CD:66:A2:74:27:F3:76:43:9F
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 0197BB221469C82EBA6F291701501E1CA173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 09D1
Signing time: Sun 29 Jun 2025 10:01:02 +0000
Manifest this update: Sun 29 Jun 2025 10:01:02 +0000
Manifest next update: Mon 30 Jun 2025 10:01:02 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: gWiAZmK1W6hEzbt4Jx0Lmq50R0J37lBwNkS0UiPEXK0=)
2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:14:69:c8:2e:ba:6f:29:17:01:50:1e:1c:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Jun 29 10:01:02 2025 GMT
Not After : Jun 30 10:01:02 2025 GMT
Subject: CN=0e2b1530051fe5d628d819cd66a27427f376439f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:8f:67:7e:3d:f3:e2:9c:35:f2:3e:88:90:
5f:62:33:f6:1d:91:15:a9:41:17:ca:26:3c:83:54:
c6:bb:e7:c2:20:ec:87:76:9f:db:69:58:a9:5d:19:
d5:57:4c:42:15:43:f5:75:47:18:35:6f:cc:94:bb:
fc:25:08:24:a4:a9:79:a1:19:a6:5c:c2:81:5f:98:
8d:d4:1b:12:8d:08:1e:5b:e6:6a:37:3e:87:0c:7f:
05:bd:47:07:34:84:36:96:aa:57:74:80:fb:73:20:
e3:57:07:23:22:7a:13:bf:ad:17:be:31:2d:0e:09:
2f:33:f7:09:8a:f3:b8:dc:83:0e:05:f7:1c:63:21:
1a:60:a4:f3:cc:3b:ce:dd:77:c0:25:af:69:16:1b:
74:2f:72:4d:e0:5e:ae:d4:74:a0:95:cf:2f:1b:38:
1e:41:8d:f1:b0:0b:1a:a5:5a:fc:86:24:fd:e1:e1:
e2:f0:4b:eb:f0:b1:6d:b1:b9:d5:51:90:b6:37:b8:
36:f3:d2:d8:ab:12:ef:7f:02:a9:01:f2:22:02:f7:
86:22:03:61:f1:6c:f6:27:fd:83:7d:77:fa:6e:d2:
33:e8:13:d0:da:96:f7:b4:af:fb:76:c0:be:0f:b7:
26:0c:07:cd:1f:42:be:05:51:d7:d3:ac:44:e9:e1:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2B:15:30:05:1F:E5:D6:28:D8:19:CD:66:A2:74:27:F3:76:43:9F
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:b4:1c:74:51:96:2d:82:81:8e:e6:48:8b:a9:e3:a9:70:
7b:51:46:c2:b8:91:22:40:67:21:40:2b:34:ab:ac:d3:b9:3b:
a8:b8:6e:a4:05:f7:96:84:c3:01:7c:75:f2:56:75:48:90:ab:
06:2e:d8:d1:b3:5d:89:f9:cd:7d:39:2c:b3:bc:f3:a9:b0:f9:
41:02:82:a2:a9:38:97:80:71:21:34:f4:44:6c:34:3a:07:f7:
f2:50:80:bd:e5:36:f8:60:b2:6e:be:cb:14:5a:e2:12:da:06:
a7:65:20:3d:e6:5d:ec:f9:d5:be:28:f9:7b:83:ce:73:58:2b:
06:14:30:b4:72:61:51:40:1e:8d:31:ca:13:64:a8:a1:4f:28:
ec:b6:a1:75:46:ca:c1:79:d9:0c:92:bc:97:8f:39:df:5e:6d:
0e:6f:09:72:b4:1f:60:aa:f5:c4:31:db:e2:da:f9:80:d5:6d:
f4:33:ac:8f:84:f5:9a:8f:e6:ac:f6:f9:7a:0d:97:4c:2d:ae:
6a:cb:be:d8:e6:76:f4:32:c9:bd:d1:37:77:2e:30:db:dd:ee:
96:8e:05:e9:59:b2:be:54:33:28:c5:cf:30:e6:5a:e6:ea:ce:
36:54:4a:95:94:fb:2d:88:51:7d:b8:9d:d4:ee:f4:8d:44:1c:
a9:52:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:08 2025 by rpki-client