Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: Yz42TcTbQ2XHLIJVIYaqPShRXdp4io1u0OtylnAIn9w=
Subject key identifier: 08:67:F4:69:2E:EF:30:69:4F:BF:3A:A1:33:50:49:E0:65:9D:8E:0C
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 0197BFDA67862C185F8A9EDC6F71574A80F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 06B2
Signing time: Mon 30 Jun 2025 08:00:51 +0000
Manifest this update: Mon 30 Jun 2025 08:00:51 +0000
Manifest next update: Tue 01 Jul 2025 08:00:51 +0000
Files and hashes: 1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: Ox3H1VXfkCiIoJIcNUCI4vwAhd5MI9mnQUHb0sqSGDo=)
2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:67:86:2c:18:5f:8a:9e:dc:6f:71:57:4a:80:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Jun 30 08:00:51 2025 GMT
Not After : Jul 1 08:00:51 2025 GMT
Subject: CN=0867f4692eef30694fbf3aa1335049e0659d8e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:a5:5e:49:d9:8d:9b:83:40:92:e1:2a:75:
d7:53:93:5e:ac:50:83:28:ba:06:a9:aa:ba:a5:d7:
d2:7e:b2:53:69:06:b0:e7:a7:9a:f0:fc:ba:4e:b6:
50:79:49:8f:49:ef:18:25:d6:c8:ac:a9:cf:a1:9f:
f4:0e:8e:9c:3b:d6:cd:bd:19:fd:d2:22:d0:4f:b9:
38:1b:2e:c0:a3:0a:b5:53:35:72:58:f8:1d:24:6f:
1a:f5:40:4f:77:ec:bb:2a:07:8e:ed:8c:cd:3c:35:
17:7d:37:79:14:47:d4:d0:49:02:89:ae:23:53:8a:
5e:97:37:78:96:e9:f9:7a:ec:73:ad:15:8c:d7:8f:
08:fb:16:8b:42:37:d7:45:87:f6:51:58:88:18:32:
11:ab:7a:f5:50:89:1d:39:05:23:4d:ce:7b:bc:f9:
a5:5b:36:97:38:63:17:1f:c2:03:8e:1e:ae:d0:fc:
98:84:19:1c:72:eb:3b:82:c4:7a:9d:fd:cf:a8:cc:
80:0d:ef:34:69:9f:56:a2:fc:15:32:e4:e5:26:d4:
b4:54:ed:93:a6:d4:27:55:ba:08:19:1d:74:b7:60:
e1:b0:0d:0b:4f:6f:1b:28:00:98:43:58:b8:0e:89:
a9:99:81:bf:cb:f2:39:7c:c4:13:f7:db:05:82:9a:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:67:F4:69:2E:EF:30:69:4F:BF:3A:A1:33:50:49:E0:65:9D:8E:0C
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:49:be:fe:47:a7:95:13:b2:6c:76:16:4b:77:32:7b:6b:ea:
41:0d:92:b4:72:e0:5a:4d:bd:87:5d:b3:99:66:e6:58:91:17:
12:d3:07:44:5d:29:14:3f:4b:2a:58:a8:85:3b:8d:08:df:8f:
64:1a:0b:30:81:22:47:43:e0:20:09:d6:bf:ec:40:46:37:29:
f5:ac:93:c1:a2:aa:00:f8:0c:0c:b0:86:9b:bc:a6:ec:2b:ad:
90:1e:fb:2b:f0:f7:e9:33:ae:f8:bf:ca:99:bb:1a:20:b2:9e:
90:02:fe:83:1d:8c:57:cb:d4:6c:f3:71:db:59:ec:2f:00:f9:
07:7f:69:ca:56:1c:31:54:3d:8b:3f:ee:d8:9b:91:17:7d:30:
87:de:fb:d7:ec:46:1b:01:b8:9c:24:28:c8:e8:88:f6:2f:26:
25:88:0e:97:ba:2d:6e:a1:03:28:15:c5:b9:44:a5:97:8b:2a:
04:7d:34:52:0e:f9:18:69:d1:24:b4:a3:93:cf:22:0c:03:4f:
6d:26:53:48:8b:e7:07:db:b4:e1:7b:c4:ce:8d:be:bd:e4:6d:
47:9e:c0:41:b2:cf:9f:f0:3c:32:c9:06:f9:8f:9c:fb:17:56:
d4:7d:16:7b:98:dc:37:3e:35:af:14:9e:37:be:d8:73:7c:5c:
e8:51:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:19:41 2025 by rpki-client