Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: Yxtwm7Ed63LCOpM0gvBrAxxr0YgQ4RBvJLfaNLLlR0A=
Subject key identifier: 91:74:E5:A4:07:E8:12:72:DD:84:57:29:5F:90:3C:38:8F:76:4D:F9
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 0197BBC712BE670758DA2239AA05238B0011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 149A
Signing time: Sun 29 Jun 2025 13:01:15 +0000
Manifest this update: Sun 29 Jun 2025 13:01:15 +0000
Manifest next update: Mon 30 Jun 2025 13:01:15 +0000
Files and hashes: 1: AuqfHgJMLbox-SCvoHiOWVRxGtM.roa (hash: xeAvQlAlfgpUCdvO+zQfkKF/6NqDyXiaKSOgk2lfPWU=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: no+ZHqXAjSs/ctg/Nc96RZZKPfCkVKBH7jEra4jrQ0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c7:12:be:67:07:58:da:22:39:aa:05:23:8b:00:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Jun 29 13:01:15 2025 GMT
Not After : Jun 30 13:01:15 2025 GMT
Subject: CN=9174e5a407e81272dd8457295f903c388f764df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7f:9f:e9:14:19:b1:bf:86:b3:80:d5:77:6b:
c3:24:12:2e:56:e6:73:a7:6b:35:a3:17:00:dc:cf:
c7:fd:51:45:e3:30:c6:25:47:98:24:a1:aa:f5:c2:
24:22:85:79:34:89:31:b9:f0:7b:96:ec:70:2e:4b:
b8:b6:ca:1c:41:2e:14:41:ab:9f:97:b1:04:7a:6c:
6b:47:c3:cd:af:4d:b1:25:4e:fa:6f:4d:63:0f:e4:
4d:4e:1f:22:71:01:c8:89:98:2a:b1:3a:26:9f:0a:
4c:99:d4:80:72:81:da:f9:41:9c:36:67:31:b9:35:
d4:11:d1:0b:e9:b7:3c:4a:a8:6a:02:dd:aa:a2:83:
cb:e8:65:ea:f9:18:8b:46:7f:a1:7d:6e:66:73:74:
6a:4b:88:e2:66:82:06:ed:20:d5:c9:12:17:cf:74:
3c:05:e7:7f:c4:db:0e:6c:7d:1d:ff:53:c0:02:41:
6f:7b:ce:c1:80:c6:61:c0:ad:85:95:16:bb:79:d5:
f0:50:c0:93:c5:83:01:09:0b:3c:b1:b0:76:0a:5f:
7d:4a:c9:d6:dd:1f:66:7d:3a:9a:a4:b9:57:42:86:
4b:50:9b:6f:18:02:a6:e9:7e:a0:24:79:83:f0:57:
fe:d7:43:e8:76:60:7a:d0:3b:35:45:80:8c:d6:2b:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:E5:A4:07:E8:12:72:DD:84:57:29:5F:90:3C:38:8F:76:4D:F9
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b6:9c:00:97:50:80:f6:b3:ea:26:38:c4:3e:c3:df:b8:14:
53:4a:67:5b:ad:24:e1:36:97:30:8d:46:ca:3f:86:1c:7f:eb:
79:fa:43:db:0b:3c:aa:f6:3f:3c:9c:bd:b9:39:71:ad:d2:64:
49:61:c3:4f:25:78:67:0d:8d:09:75:19:bb:e7:29:4e:0d:2c:
43:63:c7:9f:cc:c7:37:87:53:86:b0:1a:40:bf:f2:32:5e:1d:
b1:09:f6:a8:c1:44:9d:6d:62:30:32:78:b1:e7:dd:04:18:72:
10:33:2d:db:ca:1c:c0:56:71:ce:68:cd:33:65:d0:bb:02:18:
5b:f4:06:7c:20:73:80:0d:01:d2:e1:eb:f3:ae:37:42:41:5e:
cc:94:28:a7:c7:5c:3e:39:28:50:7f:35:b4:c9:46:46:cc:e0:
d8:4a:6f:77:7f:a9:11:0c:ff:95:a3:10:36:84:dd:bd:d9:30:
4e:aa:8f:c4:8d:9b:d6:76:bc:17:1d:31:9a:7f:85:2c:47:44:
ce:12:5d:6b:77:42:86:8b:42:a1:78:7f:9f:1a:30:7c:5c:92:
51:24:82:b3:8e:3b:10:6d:81:8b:03:03:c7:74:26:3e:a6:7c:
98:ad:11:17:91:ef:0f:84:ff:77:9e:0c:47:ea:35:62:0d:bb:
ef:11:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:52:25 2025 by rpki-client