Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: kbPfX7+7/xYaLPd4hRvEmORn6PKrLCW7PTfmpA6LDqw=
Subject key identifier: E9:88:6E:2E:B8:FA:E7:76:B2:BF:D0:A7:81:1C:29:93:A6:80:30:E5
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 0197B6A148BCBD561DE79236E2BBD0328E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 046B
Signing time: Sat 28 Jun 2025 13:01:52 +0000
Manifest this update: Sat 28 Jun 2025 13:01:52 +0000
Manifest next update: Sun 29 Jun 2025 13:01:52 +0000
Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: tITPECpY2P+ym2e1S6nFKID14IfW8SP7D9AEAJHqNsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:48:bc:bd:56:1d:e7:92:36:e2:bb:d0:32:8e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Jun 28 13:01:52 2025 GMT
Not After : Jun 29 13:01:52 2025 GMT
Subject: CN=e9886e2eb8fae776b2bfd0a7811c2993a68030e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:93:84:28:88:28:c4:b0:14:1a:5a:c3:08:
e1:45:be:a2:bc:24:6c:ee:56:36:95:4d:40:be:a2:
c8:4e:ca:26:be:e3:ae:3f:fe:ba:31:4d:d1:f0:6d:
db:fc:72:d3:04:77:2e:27:11:85:75:36:dc:39:fc:
5e:18:ec:fd:00:15:43:0e:36:64:28:5b:13:ff:d3:
ce:5e:ea:1b:ae:fd:6b:fe:b9:15:6a:a5:2e:09:08:
00:74:08:0d:17:44:47:17:13:c9:d5:01:77:64:62:
c9:3a:ec:bc:71:cd:20:4c:7f:a4:c2:4d:08:57:79:
a8:2f:e9:c4:ad:8d:b5:61:cf:4a:60:b4:65:70:e2:
48:3f:00:2d:71:ab:8a:64:2f:d6:02:19:bb:38:db:
b9:a9:ae:8b:ce:c3:11:04:19:fd:11:91:5e:e4:16:
e3:79:f5:a0:2d:43:1a:66:3d:70:68:18:2b:5b:17:
fe:1a:cb:d2:3f:30:c4:62:51:a3:ff:b2:66:88:d7:
8f:8a:1b:18:4c:96:95:28:ec:87:cb:fe:99:86:a9:
be:07:28:ff:7f:40:4c:8a:8b:0b:80:a5:d2:18:40:
2e:09:69:35:3c:d2:34:33:ab:ab:46:f8:de:bf:1c:
60:1f:01:15:21:9d:01:83:9c:8a:d5:3f:95:80:67:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:88:6E:2E:B8:FA:E7:76:B2:BF:D0:A7:81:1C:29:93:A6:80:30:E5
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:71:39:14:81:88:60:62:fb:ae:12:fc:88:6e:92:51:91:40:
85:c2:8c:1a:4b:49:01:ba:da:94:53:25:86:60:00:93:91:d3:
05:05:a3:44:ad:ac:34:1b:d0:c6:42:a2:f0:6a:55:3c:bb:11:
bb:2e:f4:f7:32:80:9d:c1:d1:b8:1c:b8:88:f7:b4:b2:b9:39:
99:8d:51:db:c9:ee:87:cd:26:07:cc:30:8c:06:f5:74:dc:f1:
4a:1b:31:55:9d:bc:e9:bd:d1:2b:6a:d2:c5:7b:43:5d:62:38:
b4:62:8d:c6:16:ff:30:60:a7:ce:70:08:3a:b6:87:a5:80:f7:
9e:39:28:f1:43:27:08:8d:15:14:96:13:74:d6:52:1d:dc:c1:
58:d4:ad:9c:33:69:32:1c:59:9d:e9:e8:6d:58:a4:34:d0:c3:
d1:d4:95:da:13:01:8a:06:ef:6e:0d:a4:ee:a0:18:64:56:53:
c4:c7:5d:cd:64:93:fa:96:4b:f4:58:5d:f3:1f:9f:45:17:1f:
d9:dc:de:1e:bf:de:ca:35:fe:b9:7b:a8:be:44:ce:fe:1c:3f:
4e:dc:bd:d4:f3:d8:ca:60:11:e5:a1:e6:cf:d9:f3:f2:89:c1:
0a:7c:92:30:97:cf:3f:29:67:56:e9:26:41:85:87:81:a0:18:
b6:6d:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:29 2025 by rpki-client