Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: +gKYkuhgsyKbAUR/0QovK5MGpU1uB1Xq1kOIbKOAi/Q=
Subject key identifier: D1:C4:9F:3C:5C:12:16:1E:1C:A0:8D:93:18:FB:D5:8E:3A:2E:F9:F5
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 0197B70EF8D657FD53C62C040870F97A83B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 04CC
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: fIXoNzaAmPD+IZx2P6gu17NqzYrrpgDI3wmMyPjfnCU=)
4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f8:d6:57:fd:53:c6:2c:04:08:70:f9:7a:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=d1c49f3c5c12161e1ca08d9318fbd58e3a2ef9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:a9:a7:a5:77:ca:f6:0c:89:8c:87:9d:ee:
4f:d2:05:d3:a2:b3:f5:e2:81:db:ff:82:ce:22:01:
f6:0d:b8:ae:d7:3d:2e:35:e2:2d:1d:68:b4:b2:ec:
a4:ac:29:ab:76:ba:b8:57:3a:61:42:b8:d4:a9:ff:
6d:46:83:e4:19:9b:ad:ff:7f:be:57:a3:4b:19:b5:
24:b2:a8:6a:35:65:a1:c5:ad:5a:f4:c6:cc:22:0f:
5c:a0:26:66:67:2d:00:e7:b3:bf:65:0c:dd:36:75:
3d:0a:41:45:0e:77:41:4f:25:37:59:78:ea:c8:ec:
54:1d:0e:82:cc:68:0b:0a:ec:03:b5:9a:a0:08:28:
34:ee:44:5e:73:54:fe:10:41:3c:dd:a5:c6:34:e1:
b2:e8:8a:ee:7d:a7:2e:57:06:d1:18:1f:ac:21:f3:
da:4c:5f:67:d1:78:d8:65:a2:2e:0a:2b:e1:99:35:
0c:00:fd:1b:47:0a:74:fa:aa:fb:1a:68:fe:a0:40:
25:07:4c:47:97:22:61:09:83:7b:17:ec:6e:d2:47:
55:47:86:c3:d0:a1:f8:be:a8:9d:81:64:13:4a:c3:
6c:3c:36:db:d9:19:27:68:22:52:89:99:fa:73:a2:
fd:e1:2d:8d:ce:d9:6f:cc:35:f6:37:39:c8:b2:77:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C4:9F:3C:5C:12:16:1E:1C:A0:8D:93:18:FB:D5:8E:3A:2E:F9:F5
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a8:6f:36:b4:a6:ad:01:0c:f8:41:55:d8:71:d9:60:eb:29:
01:c0:54:8d:ca:68:d5:d7:1e:df:53:ff:83:44:fd:74:00:54:
f2:b8:94:87:05:a9:37:50:93:5b:e5:ba:d9:da:1c:8d:2d:5b:
b2:dd:7e:b8:34:d1:6f:b5:93:97:1e:e5:0a:44:72:6c:76:4f:
14:e4:22:07:85:a7:09:da:d4:f9:b2:9b:20:fc:53:f9:64:dd:
65:8f:bf:c2:02:20:9f:01:8a:d3:69:f2:cc:a0:61:49:b7:e8:
db:b3:7e:47:0b:f2:52:e5:e1:14:f4:48:04:f9:d2:a4:bb:60:
8b:29:b8:98:87:86:c3:2a:a4:05:3c:b3:26:de:ed:8d:83:11:
c1:ef:c1:60:04:1d:de:67:b2:14:10:5d:3d:c0:e6:ed:fe:da:
56:1a:2c:76:6d:f2:09:7e:61:62:db:31:52:f6:41:fb:2c:e9:
c5:5b:6e:52:87:55:c3:86:ca:2e:0a:33:25:26:26:73:a5:f3:
29:33:1c:9e:37:fc:67:3f:92:c7:f7:c9:e8:24:60:ff:05:fa:
71:36:80:61:a8:86:d5:df:a1:6e:6e:e5:07:c0:1e:ed:ad:80:
85:28:94:40:2e:aa:73:e8:1d:c3:11:8a:15:b2:09:dd:6e:0f:
c2:1c:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:43 2025 by rpki-client