Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: Sl30oPRQPGqgLibdVKRSjpG1rr0gOlGEz1ykc9QL5cY=
Subject key identifier: 59:94:97:92:B4:37:77:12:32:72:EB:8D:FE:97:38:4B:A7:F9:1D:DA
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 0197B7EAAB875D9FE62E7E2B124BFDEC6F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 154B
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=)
2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: lf63Vi8jouUPBY9XNbCv3t7UBOl4Gykwo9QFo3id/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ab:87:5d:9f:e6:2e:7e:2b:12:4b:fd:ec:6f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=59949792b43777123272eb8dfe97384ba7f91dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:27:e9:01:0a:ec:cd:72:b4:4c:be:54:e1:
4d:c1:c3:7e:6b:7f:f3:90:4c:e3:f9:17:89:9e:b7:
44:00:28:49:0a:60:e3:81:71:49:11:4a:dd:99:d1:
96:33:16:0b:00:ab:94:f3:51:07:1d:00:12:0e:ea:
d8:4d:be:8c:c6:e4:4e:a9:13:1c:ab:88:0d:09:1a:
cc:11:fd:f1:6f:84:58:3d:ce:37:33:d6:b1:e6:21:
a2:9f:08:f2:b8:d0:16:8e:01:b0:96:7f:6a:f6:ae:
7b:86:3a:65:4d:b5:1f:03:43:da:6e:d7:c2:f6:28:
a1:ec:22:7d:9d:c6:f5:7b:ea:e7:21:c6:1b:3f:00:
6b:22:0a:96:04:d3:f1:25:d9:c3:bc:d1:09:da:40:
61:9e:b1:c1:c5:9f:ea:7c:b1:fc:c6:6c:2e:43:5c:
64:0e:00:61:7a:0d:af:13:e0:03:d5:79:ba:39:68:
99:9d:1a:4b:65:68:02:f5:d2:03:59:05:04:4d:1a:
30:fe:b4:9b:f3:e6:33:f7:b0:f6:27:af:39:27:d7:
20:3f:f3:3c:ed:8b:35:f7:98:2f:7d:12:5a:32:ab:
c2:19:0f:43:02:ce:d8:60:73:f9:90:57:58:8f:f3:
4d:8e:e8:7e:6d:b7:a8:2e:74:fb:0b:65:f1:5d:0c:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:94:97:92:B4:37:77:12:32:72:EB:8D:FE:97:38:4B:A7:F9:1D:DA
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:31:49:07:af:f9:bd:6f:58:e3:6d:15:1a:ff:e9:5e:02:5a:
92:0f:48:4e:eb:1a:65:2c:53:df:61:fc:62:c0:b1:05:13:e1:
62:ff:58:20:8d:b3:01:97:ee:b1:6f:47:68:3b:92:54:3c:d4:
a0:28:d1:df:fb:74:4e:00:04:c3:e5:8a:12:6f:54:0b:7c:3e:
9b:af:66:73:25:54:fa:cf:bf:0d:d4:10:f1:eb:39:d7:72:7c:
14:cc:d9:53:e2:dd:90:13:e7:98:d3:6b:26:95:d5:d9:9b:1e:
68:ba:a3:0d:f9:7e:37:d4:51:42:4b:09:76:6a:a9:a6:b9:b3:
bf:09:8f:f3:d4:8f:e5:aa:f0:9d:fc:90:50:66:db:96:aa:a3:
c8:47:f6:5e:47:87:43:78:c9:7e:cb:2d:97:d2:ed:d0:bd:08:
82:05:71:79:8f:62:8e:82:3e:e2:9c:8f:46:82:d3:c0:22:1b:
9c:7c:e7:95:bf:17:8f:e0:f8:dc:f9:cf:0e:bc:58:b4:97:11:
25:78:58:7d:93:71:7d:32:05:da:4d:4e:fd:7a:89:2a:ad:28:
06:cc:11:65:67:2b:91:a7:22:2d:11:0c:51:c4:a0:98:bf:d1:
6c:41:85:18:45:1a:b9:52:ff:44:ab:8c:03:70:e3:d1:e9:d7:
85:f7:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:25 2025 by rpki-client