Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier: jBzzggpkW0d+qBddQP4K2LMNfYX0TfKjc6Rq4odNokI=
Subject key identifier: 6E:52:BC:92:41:EC:02:2A:20:86:AF:08:40:BA:E5:40:46:CB:C4:E0
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 0197B88EB193B511AA98CBEB5596F01714D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number: 15C3
Signing time: Sat 28 Jun 2025 22:00:48 +0000
Manifest this update: Sat 28 Jun 2025 22:00:48 +0000
Manifest next update: Sun 29 Jun 2025 22:00:48 +0000
Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: 6wh0zK7a2KzwRR72e7HC6WUw7uLbk+R+MA96R4ougsI=)
8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
9: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (hash: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b1:93:b5:11:aa:98:cb:eb:55:96:f0:17:14:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Jun 28 22:00:48 2025 GMT
Not After : Jun 29 22:00:48 2025 GMT
Subject: CN=6e52bc9241ec022a2086af0840bae54046cbc4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:ae:51:0b:82:38:1f:49:08:c8:20:72:80:
7d:a2:94:ca:43:a5:2f:87:aa:f8:eb:33:d4:55:53:
a8:50:47:b7:df:df:d8:ca:08:97:9b:40:4b:e1:34:
e4:5e:82:30:03:89:65:2a:25:d9:51:e1:70:07:3b:
8e:0e:de:fd:38:c7:8f:0d:3d:71:fb:ac:c5:46:3a:
b2:6e:d7:7d:cd:91:78:17:d0:69:b8:5d:48:28:9e:
1c:30:99:65:90:c8:c9:0d:be:b9:d5:c3:91:e6:61:
2d:6f:38:b0:40:1b:ea:d5:92:de:b3:30:6e:9d:40:
26:8e:a2:c3:e6:21:fd:04:57:ae:6b:69:f6:ca:7f:
e6:1e:77:c5:81:c1:3b:80:d5:d9:24:9f:66:5d:f4:
3d:d4:59:12:44:0b:d7:af:2f:fc:6c:a9:0b:f3:a9:
a3:9d:b5:54:6c:58:6d:da:8e:11:ef:8b:bf:92:e1:
17:f6:bf:cb:c8:9c:2d:bb:83:54:28:0e:69:4b:67:
98:75:a1:93:bb:ee:32:38:7a:17:73:78:b1:e5:bd:
3a:2b:a6:7e:ed:c8:13:da:f1:da:c7:04:45:2d:31:
76:f2:72:83:0d:9b:bd:4e:7f:27:91:c5:db:98:e5:
a4:63:42:5b:13:98:2c:67:73:94:3d:2d:3e:1e:3e:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:BC:92:41:EC:02:2A:20:86:AF:08:40:BA:E5:40:46:CB:C4:E0
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d5:66:9d:81:14:b4:1e:54:d3:9a:19:bf:97:44:cd:cd:26:
6b:59:82:0b:72:72:0b:17:de:93:e8:5a:9c:6b:a8:22:61:bc:
7d:61:00:a5:6e:2b:ff:4d:a9:a5:30:f8:07:16:22:eb:ef:7a:
b1:ac:2a:a9:37:bb:d1:24:89:b3:75:c3:c5:6b:53:56:fe:4e:
df:8c:0c:28:fe:56:2d:1a:e2:0b:16:ca:33:fb:d5:90:16:2e:
c0:36:91:b1:9d:40:30:ca:23:31:f8:42:c1:d4:3e:a0:ab:37:
66:d2:68:7e:24:da:73:42:e8:6e:40:3f:80:e0:34:5a:48:64:
fc:b1:8c:a9:da:0f:df:7d:b0:81:05:0a:44:68:ba:6a:e8:fd:
5d:7f:df:77:fa:0b:95:3f:21:47:92:0f:e7:6b:cb:8f:e1:a0:
58:cc:fb:b1:9e:58:16:88:0f:04:27:bc:bb:54:7f:65:07:44:
7b:41:9a:6e:45:02:2d:8b:e8:72:a3:a0:82:53:e4:ab:fe:01:
98:fb:c4:1c:0e:55:da:71:44:dc:41:70:10:f0:c1:7e:89:4e:
c4:f9:37:33:3e:17:ff:f8:76:5e:83:c1:0d:71:79:f5:bf:8f:
79:0a:67:b4:7b:6f:e5:99:9d:a1:32:fa:5f:ca:ec:33:a9:06:
4c:c9:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:32 2025 by rpki-client