Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: aINy+pX/eqXzPb3xa5iBWKpmoSzFCD++FDo4VhaLCzE=
Subject key identifier: 48:7D:2A:53:49:5A:FE:4C:BF:D7:A6:FD:D8:01:A6:D0:F1:45:8B:30
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 0197B6A0CDA4735522891903620AEBEEF52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: /RXkbcrIVEKTGeOoyB4UGcIfi7fG3hURZRMFIjR/tVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cd:a4:73:55:22:89:19:03:62:0a:eb:ee:f5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=487d2a53495afe4cbfd7a6fdd801a6d0f1458b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:8c:ac:0f:44:63:e8:27:cd:ba:23:e4:14:
95:26:d4:fc:37:5a:35:da:a9:96:56:0c:d1:15:54:
6b:df:1e:5d:a4:88:90:e3:9c:22:a5:a7:41:2b:14:
d8:c6:10:35:8b:2a:8c:96:b9:2f:99:4a:f7:ed:23:
ed:b5:a7:fa:bb:96:12:cf:ce:fc:0c:1d:75:0e:b1:
8d:ca:bd:70:da:94:83:3f:4a:1d:30:41:59:a2:66:
8d:ff:fc:ea:6b:1f:ca:c2:7d:c3:7b:be:8f:ba:61:
27:9c:f5:c7:0b:49:41:b8:e5:71:39:89:4b:9d:23:
c3:96:e8:71:34:c4:1f:c2:aa:73:1f:88:8c:48:53:
61:40:c3:58:b6:59:11:18:a1:cf:3d:f9:c9:47:83:
1a:26:31:31:10:29:f4:72:6c:b9:ff:d9:9c:fb:6e:
9c:3d:d8:0a:f4:c1:e3:18:9e:9c:83:e6:ed:ee:8e:
17:14:a1:37:46:1e:4d:b2:93:59:0f:aa:b9:12:2a:
b5:45:f8:47:df:dc:8d:a6:32:14:ce:2a:35:5c:6b:
96:e9:33:94:40:8a:4e:27:e5:c2:d0:d4:c9:10:80:
63:d4:83:fb:42:f7:6e:9e:23:d3:37:97:f9:16:b3:
74:6d:de:6e:64:9a:53:72:1d:44:f4:12:6f:3f:49:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7D:2A:53:49:5A:FE:4C:BF:D7:A6:FD:D8:01:A6:D0:F1:45:8B:30
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8e:46:9f:35:d7:fe:55:70:06:8d:fd:78:6d:f0:bc:f0:38:
f0:13:7d:55:97:8b:64:2c:bd:36:7b:0f:6b:c1:a6:a9:3a:22:
c2:26:7b:ef:a6:8b:c9:d0:54:f3:e9:e6:3b:44:6e:54:6f:62:
25:bc:ab:43:6c:02:ba:2b:64:a5:35:e9:09:82:ca:91:06:4d:
54:51:0f:cd:a8:3f:ee:6b:ad:ac:8f:0f:08:4e:af:f9:c0:90:
c0:d3:9c:91:61:5a:54:48:08:ef:20:b9:f0:58:d9:3a:05:74:
e5:b0:a0:6d:6c:5d:a7:f8:e1:fc:69:3e:57:3c:24:97:a1:7c:
f2:c8:bd:e6:3a:8a:c9:5c:a1:00:2e:97:87:87:ee:11:fe:b4:
73:6c:47:27:01:b7:6a:ad:ad:fb:60:ad:d8:30:67:15:cf:9f:
ca:f5:67:d5:18:83:f2:b6:04:3d:6b:0d:58:6c:f1:b2:62:be:
3e:96:fa:16:07:08:a5:78:69:71:59:db:3d:f4:ac:d7:03:71:
90:b8:7a:f7:12:26:d3:5b:46:7c:75:c5:cd:ea:c5:c5:17:59:
0d:ac:50:b3:cc:37:41:55:8c:a6:8e:a6:88:74:3f:b0:ec:82:
85:31:18:f2:54:fb:ff:48:56:6e:5a:b3:57:a6:22:26:39:52:
ec:58:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:54 2025 by rpki-client