Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: jdOeoqQ5HxQY2FFeN4s+czjJxmFKJzquQQDi0kTpRnQ=
Subject key identifier: 3F:18:9D:78:3F:CD:29:F2:EE:91:72:FC:0A:EE:7B:5C:1F:61:78:B7
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 0197B6D78D43961E661B2F937BFDAE13A8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0557
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: 7Ub16BOLmHKhTR2tdRkcxBx0W5Hlf8HJgOxcl8HB0xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8d:43:96:1e:66:1b:2f:93:7b:fd:ae:13:a8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=3f189d783fcd29f2ee9172fc0aee7b5c1f6178b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:3b:cc:df:9e:44:f6:5f:e2:0d:6f:a8:c3:
a2:0a:80:69:df:09:66:1a:1d:9a:28:4c:94:69:50:
a1:4c:24:73:5e:36:1d:4c:31:44:86:c9:4a:a3:ba:
a5:53:72:92:d1:9a:b0:64:a8:1c:52:a6:c8:45:15:
dd:77:dc:4d:ab:e0:1f:17:d4:25:59:18:ec:9d:0e:
3e:6f:a7:80:97:56:6d:43:14:16:73:47:89:7a:48:
f3:93:ea:fb:27:37:af:d9:c3:d6:9f:44:01:0f:42:
ca:28:6e:01:24:d1:1f:a7:c7:75:15:da:54:62:3c:
85:eb:32:6a:08:ba:7c:1f:73:ee:ad:6b:9a:d7:d9:
bb:7d:c4:01:4f:8d:ba:79:f7:2a:8c:f2:54:c8:d9:
2b:ed:9d:b1:82:c5:53:b5:e7:20:cf:67:14:c6:d7:
5a:23:27:4b:bc:39:f7:e9:df:23:c0:d5:6c:ad:c3:
77:cb:ec:e3:4b:0d:91:e1:01:5a:45:88:4d:69:3c:
60:e2:1d:9e:6b:a1:f0:59:50:34:a8:f1:20:13:f7:
da:54:28:d3:d6:9b:bf:6d:4a:53:61:f7:61:78:46:
c5:83:22:57:26:d2:a9:29:e4:7a:92:0e:1d:5c:bb:
de:69:c3:af:27:19:7d:69:ab:71:6a:dd:ce:08:47:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:9D:78:3F:CD:29:F2:EE:91:72:FC:0A:EE:7B:5C:1F:61:78:B7
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c7:f8:fa:93:13:dc:27:c7:ca:f6:4b:be:e5:5a:30:b0:b5:
7f:30:46:76:c2:01:67:64:4f:13:84:b5:34:cc:81:c2:19:7e:
0b:42:5a:68:8d:7b:a5:75:5b:82:31:33:be:82:f2:7b:af:eb:
b9:2b:6b:84:72:6a:1c:fb:97:a8:93:ae:f9:4b:b7:99:71:6d:
e8:e0:73:92:8f:11:62:de:97:ff:2b:19:3f:c7:03:9a:fb:c8:
62:54:44:86:d3:01:81:1a:c2:eb:47:4e:fb:4e:94:59:be:86:
6d:de:09:1d:a4:33:fc:98:f5:2c:85:c3:c5:24:91:e5:63:0b:
40:80:3c:ce:c5:3d:b9:1d:cb:42:b8:10:54:03:64:cf:28:33:
76:d1:21:fe:08:1d:c8:8e:91:c8:4b:30:07:12:4e:d9:90:b3:
0f:b0:a2:2a:15:25:35:9e:e1:05:95:54:cf:c6:c4:7c:a6:c6:
20:37:db:0c:1b:cf:43:2e:b9:f0:bb:85:2f:11:d8:a3:30:a7:
68:5f:dd:59:8c:3d:55:34:4a:3c:e6:94:56:bb:e1:8a:7a:4c:
3d:98:1f:97:dd:d4:b1:8e:bc:63:53:22:4f:b1:8f:97:36:0d:
89:0a:43:b9:ba:c3:a1:42:8c:9a:fc:6f:3a:3c:a2:ca:a0:c6:
6b:ab:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:42 2025 by rpki-client