Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
File: MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json)
Hash identifier: Yi/pNglbenBF4W/xqSeXrt0YQr3yvEC6shf/yelQR8Q=
Subject key identifier: 56:30:5A:65:E6:39:D8:1C:B9:14:14:D0:9F:40:CB:63:F7:11:1A:EA
Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
Certificate issuer: /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Certificate serial: 0197B632E9D374573A3CCEF7B2B83FFE64BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 11:01:19 +0000
Manifest this update: Sat 28 Jun 2025 11:01:19 +0000
Manifest next update: Sun 29 Jun 2025 11:01:19 +0000
Files and hashes: 1: 1-eAJE_ZPw_LJuNlElXg0BRaL11g.roa (hash: YakZb3LMYAiCfML5t2kxegtBvI+8ocrvx+dTJt+Il2M=)
2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: thN9RIjBuxkuJ/+Pm/qPSCKFlUcC4Uvsdr6pqCfFSr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e9:d3:74:57:3a:3c:ce:f7:b2:b8:3f:fe:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Validity
Not Before: Jun 28 11:01:19 2025 GMT
Not After : Jun 29 11:01:19 2025 GMT
Subject: CN=56305a65e639d81cb91414d09f40cb63f7111aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:15:8f:0b:24:a9:8c:f6:79:f4:ea:be:5a:
32:73:bf:d1:41:92:4f:9c:fa:1c:77:ec:21:c4:af:
c8:c4:84:cd:6c:fd:5b:a9:6f:ce:a5:60:61:2d:6a:
85:99:5f:97:f7:ce:07:ae:75:f1:68:d5:c0:0e:e8:
99:24:bb:b4:e2:66:99:38:4d:b7:e8:d2:34:fe:fe:
3e:a0:f7:6c:6a:de:97:ef:07:ad:05:cf:64:9b:70:
6b:33:02:b8:76:dd:60:d8:54:ed:a1:01:80:c4:d4:
8b:a1:06:5a:61:a2:85:9d:ca:2b:65:77:d5:2a:7e:
4a:46:04:f8:88:a6:df:db:cf:5a:55:5b:31:d6:5f:
98:97:49:b5:48:d7:35:28:04:37:7f:90:f4:10:8a:
6b:e7:81:12:46:30:e7:04:4e:19:23:c9:40:ae:e3:
3f:c5:5c:80:69:d8:44:0f:09:72:b6:55:ed:d8:c2:
f0:8f:23:7f:70:cc:fc:5d:76:4f:99:6b:c9:96:85:
69:83:7c:3c:1f:9a:f9:5a:14:8f:06:5d:2a:c1:57:
1a:35:7f:77:1b:c7:f3:46:4b:db:0c:8b:6a:1c:80:
32:39:15:55:36:87:15:bd:8e:95:db:6f:e0:db:0f:
98:98:9b:4f:20:ff:7e:94:00:55:5f:fd:f0:59:f1:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:30:5A:65:E6:39:D8:1C:B9:14:14:D0:9F:40:CB:63:F7:11:1A:EA
X509v3 Authority Key Identifier:
keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d9:8d:03:37:bc:a5:b3:b5:f9:2e:58:62:d1:80:4a:8a:7d:
da:ed:f1:1e:1b:d8:71:44:aa:47:47:57:6a:5d:48:a7:88:d3:
53:a2:e9:e9:86:ac:97:e5:b1:93:d3:0d:5b:7e:31:c4:6d:96:
41:a0:47:0f:94:5a:9b:c2:79:52:59:3a:53:8c:83:15:47:16:
4c:2f:30:8d:86:da:55:ed:d8:72:bb:e0:ee:06:b4:72:93:57:
d4:4f:fd:23:64:c3:98:ed:f4:63:a3:aa:93:6f:1f:de:ee:c3:
9b:6a:15:7b:40:84:91:80:54:bc:09:98:7c:f6:e3:d7:56:d3:
86:23:6c:c1:8a:35:8a:35:1a:95:a8:98:a0:19:c3:35:55:0e:
45:3b:b0:07:89:20:ff:73:59:38:5c:19:6e:65:62:4d:25:c4:
0e:12:36:72:84:2c:35:e0:92:ab:b4:37:2d:3a:f0:f9:28:1a:
6c:88:a4:b6:93:ab:c6:cb:76:69:29:c8:18:b0:49:72:b4:5f:
d2:00:5b:ff:83:0d:4c:c2:8f:81:31:21:0f:4f:0b:08:b1:c4:
43:ca:34:c2:e0:d1:97:a1:c4:93:dd:e1:1c:ec:8f:ec:58:24:
aa:64:8e:9e:53:a2:10:53:b0:a4:7f:02:71:41:ce:2b:75:34:
30:8b:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:31 2025 by rpki-client