Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: QJ8TtbaICNZ8MUjpxOSC79Xl10VbC1tyYvRXytD8EEQ=
Subject key identifier: C7:2E:A2:BA:AB:21:3E:E9:F1:37:DA:63:ED:2C:23:88:37:C9:4F:91
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 0197B7EA7CC398E91AABD8630BA3FBBEFA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 022F
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: pibhDeohySIUAl2PFWK2sff6m/WgGmK4rvbkxUKoMlQ=)
2: lO_Mg3DZHEdW5_hWel-RB7XxrdI.roa (hash: mSvOkFvyMe8N8eCEVEp8qdqZ/KkLJkgUd3GK7ljSNTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7c:c3:98:e9:1a:ab:d8:63:0b:a3:fb:be:fa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=c72ea2baab213ee9f137da63ed2c238837c94f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:2d:be:3a:90:ac:da:24:6c:74:94:ee:14:
9b:af:4c:23:30:9b:71:1b:25:fa:9a:98:98:02:7d:
4a:66:15:0f:7f:b8:cf:ae:6e:1b:2f:97:ab:17:96:
1d:6d:38:da:48:d0:93:55:88:8a:cc:ce:69:31:08:
36:e0:05:3c:47:69:05:20:71:ad:5d:86:96:29:88:
44:9c:26:ca:c2:e4:6a:a5:36:ce:8a:e1:af:13:81:
5c:a3:dc:b3:00:fb:42:f3:3f:72:b8:16:94:7c:3d:
de:cb:99:fc:4d:58:ef:4e:e7:b1:49:d9:b2:aa:5c:
96:b8:c9:e8:a0:2b:73:db:dd:8d:64:e6:dd:9f:c7:
6e:ad:b1:12:bc:07:ba:6b:ff:84:78:9d:c1:da:fe:
72:4e:ad:e7:9c:b7:12:f3:46:d5:1c:3b:3d:9f:b7:
a6:bd:6d:5b:cc:06:e1:c4:2e:87:ad:4f:e1:ec:36:
e4:67:64:e3:e9:cf:cf:29:66:4d:2c:fd:57:95:a9:
4a:49:1f:f6:1e:29:e8:0b:81:42:b9:28:d8:a8:6c:
88:82:80:de:df:23:fa:44:44:ab:34:4b:d5:3a:ed:
4c:7d:30:dd:bd:fe:27:50:ba:b3:31:8f:d3:ea:e7:
af:25:8f:c7:67:87:bb:15:ca:e6:f4:e8:b6:e5:56:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:A2:BA:AB:21:3E:E9:F1:37:DA:63:ED:2C:23:88:37:C9:4F:91
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ee:31:cd:5a:5b:9c:12:ef:f6:77:00:7c:d1:2a:5e:03:79:
19:f5:fd:3e:43:56:db:87:4e:14:ff:21:44:cf:1b:5a:5b:c9:
c6:0c:5a:7f:c0:e7:56:ef:8d:38:a6:d5:40:b6:5f:84:d5:b6:
62:5c:97:36:bf:31:ac:95:43:af:ab:5b:4e:be:66:e9:02:9f:
cf:5d:85:aa:01:7d:85:44:16:59:d9:31:69:47:7d:8f:70:01:
4a:aa:cc:ca:ac:23:be:69:7f:7a:42:66:e8:cc:00:52:e2:da:
7d:9d:7a:64:f7:96:c2:b3:87:3d:34:87:e3:52:2a:13:66:37:
2d:7e:4d:72:97:13:c5:d1:1e:45:7a:5d:50:37:a6:18:bf:fd:
4f:bb:05:3c:a0:53:44:b9:e7:d7:d4:36:6b:06:61:f7:71:e4:
6d:04:76:02:ac:34:ef:a6:f3:ab:8a:72:f8:ea:1a:10:bc:09:
06:ff:c1:5f:6a:94:89:4d:fe:de:1d:46:df:bf:c6:08:bd:40:
f5:0a:b0:54:c9:ec:d8:a5:3c:66:69:b5:93:56:4e:1d:49:50:
d9:33:8b:54:22:f9:3c:a5:1d:bb:9a:53:b3:cf:65:ab:af:b0:
3f:f6:51:e1:82:10:d4:05:86:8b:14:18:e3:34:96:b8:ae:21:
fe:f7:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:10 2025 by rpki-client