Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: OOQZFGB9nJHnsL8fT0VtfoSGimprFoXmZrC0wB2quRI=
Subject key identifier: 51:48:EB:0D:54:B9:C7:45:E1:BF:F8:2C:A3:C5:B6:8C:05:91:2F:80
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 0197B7EA4C7512F3236BBF40DE58B814C469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 154E
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: RpwSlGvCi8+3BhJHa6K4QB4+272L/pF/zEMyXjcpcoE=)
2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4c:75:12:f3:23:6b:bf:40:de:58:b8:14:c4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=5148eb0d54b9c745e1bff82ca3c5b68c05912f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:a7:df:78:5e:f0:ba:6e:ad:79:b9:b1:8a:
54:a4:31:4d:ac:d7:73:93:d4:99:5a:4d:50:9d:3f:
94:f5:b0:5c:d1:08:00:eb:89:a5:26:74:aa:aa:09:
ec:6b:97:ec:92:0f:48:ec:bb:94:2f:46:88:4d:66:
2a:db:af:96:7e:df:c2:25:4d:be:97:48:76:65:d6:
c8:03:e6:ee:30:67:de:c7:e6:a1:93:37:9a:7b:1e:
d3:9a:06:d2:1c:81:36:fe:c5:bd:b4:52:f5:06:6e:
0f:a2:d3:87:bf:ec:39:f5:19:ca:7a:17:11:4a:36:
c1:ed:1f:89:be:a9:57:d5:f3:a0:a8:cc:6b:cb:3e:
97:b0:1a:e3:68:19:6a:d6:13:47:c5:19:1d:84:2d:
9e:27:12:bd:06:a3:28:02:80:cb:d6:c7:b9:76:b9:
79:6a:35:6c:93:9d:05:7c:c8:17:d4:92:9d:9f:88:
d2:f5:58:ed:d2:dc:90:8d:60:96:1e:77:3b:19:f4:
22:0b:65:f8:c3:f3:0c:ed:91:06:ae:4c:45:2b:93:
fe:b9:e5:4c:96:e6:08:2f:a8:43:e9:3a:ff:c2:23:
0e:64:d4:93:94:c5:40:76:da:e4:62:3e:8d:4b:ef:
94:83:52:11:5b:c5:0d:60:8f:6a:48:5b:5b:22:e2:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:EB:0D:54:B9:C7:45:E1:BF:F8:2C:A3:C5:B6:8C:05:91:2F:80
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:7a:a6:d3:e8:e4:32:b6:9a:02:cd:be:08:f2:fc:98:c2:
2a:d6:48:22:8d:5d:b2:af:45:5d:b8:70:0d:b7:dd:31:4f:cf:
c8:a9:63:e4:e4:49:03:ca:33:ef:fe:e9:aa:57:f3:f0:aa:5a:
87:b1:05:40:48:f5:01:64:dc:36:70:ca:3c:4f:bb:e6:a6:25:
f9:c5:e7:10:11:6f:a9:fa:26:35:0a:40:d2:cd:47:bc:bc:13:
bf:5f:e0:f6:d8:44:50:85:4e:55:dc:36:9d:31:fa:44:22:80:
bd:12:ea:f6:89:f9:95:90:26:cc:86:8f:03:e7:5d:42:a2:b4:
3c:dd:c2:0c:d5:ab:e9:36:dc:49:90:30:3d:e3:32:db:3a:aa:
82:68:2d:26:93:9c:b4:63:c8:ba:3f:99:42:a8:eb:04:83:c6:
9b:13:f1:5f:8d:90:bb:f6:06:f5:2a:44:47:c7:1d:cd:1a:17:
4c:bd:52:61:01:31:2f:fc:85:d4:7c:04:ff:16:b9:4c:5b:64:
bb:4f:39:f4:a3:0b:d8:d8:7e:11:de:87:f8:7b:3d:62:ca:43:
5d:2c:2a:93:4c:5e:34:6e:b3:8c:f0:0f:38:ec:f3:4f:8b:09:
af:d7:57:28:67:ad:6c:02:4f:21:69:25:24:24:43:ff:c8:d3:
74:2e:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:50 2025 by rpki-client