Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: JEgopjH17Gb1KLurJ01u9b8DAQyQwo/+7nskR8x1Xl4=
Subject key identifier: EC:F8:E4:A1:54:7D:6A:EF:9E:D2:80:8C:FD:5A:BA:46:D8:7A:5F:35
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0197B96AA5CE25BAE838895C399F9EFD6AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0EC3
Signing time: Sun 29 Jun 2025 02:01:03 +0000
Manifest this update: Sun 29 Jun 2025 02:01:03 +0000
Manifest next update: Mon 30 Jun 2025 02:01:03 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (hash: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=)
3: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (hash: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: Nw2sOlH2ogG3ZwiJn1xSf3DkmKj5zYAm1Rq8FPPgDHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:a5:ce:25:ba:e8:38:89:5c:39:9f:9e:fd:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jun 29 02:01:03 2025 GMT
Not After : Jun 30 02:01:03 2025 GMT
Subject: CN=ecf8e4a1547d6aef9ed2808cfd5aba46d87a5f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:86:91:98:aa:3a:29:85:66:48:4b:11:04:
98:29:97:49:89:f5:47:b0:b3:13:8c:16:cd:fb:e9:
1f:6d:16:2f:44:73:59:8d:e3:02:63:9a:01:f6:3c:
1e:f7:f3:0e:22:32:5e:09:3b:b3:20:2a:81:9f:99:
a2:8f:cd:bb:70:d3:15:2d:35:4a:d7:4d:10:58:ca:
a3:50:ae:d1:ca:48:bd:bb:e1:f8:6d:57:9f:b7:be:
c5:d5:14:bf:21:0f:e8:12:b0:8a:15:1a:b6:f5:9d:
a1:fa:30:b7:08:9e:0f:b6:29:f0:7b:14:5c:36:02:
28:86:43:d8:db:4d:e2:e8:a1:de:93:c3:25:eb:f5:
b7:1d:50:16:61:db:44:1e:6e:3e:56:be:8f:f8:e0:
c3:a0:09:f6:63:f2:d5:a0:b6:ef:f4:ab:2f:f4:57:
67:a2:fc:18:8e:70:ae:d8:3a:2e:5e:45:4f:1d:57:
89:6d:09:9b:91:2b:d8:38:59:13:95:ac:a0:d2:0e:
ff:30:21:42:be:6d:c3:44:51:f1:fb:71:ef:ae:21:
39:e9:27:91:1c:c8:ab:89:b7:f6:ab:11:b5:f0:05:
03:23:e9:6f:0e:07:16:50:9d:88:82:f9:28:a2:4e:
a1:4a:7b:bb:41:6f:2d:d5:44:b1:d0:6d:bf:d5:f4:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:E4:A1:54:7D:6A:EF:9E:D2:80:8C:FD:5A:BA:46:D8:7A:5F:35
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c5:b1:cd:33:6b:e1:89:83:8a:e8:28:8e:d9:c5:01:44:d7:
cf:22:a8:83:91:24:73:69:66:a0:65:7a:cc:fa:4c:21:8d:ce:
e8:72:72:1a:f8:4d:67:e7:f4:6a:d3:a8:66:fd:f3:59:82:0f:
09:24:e6:d1:01:11:38:b3:e2:7f:1d:f6:ab:21:07:f8:e6:36:
72:96:ce:20:63:b0:fe:e7:fd:89:e3:2a:d3:28:8e:76:8a:9f:
44:85:fe:56:34:bc:94:86:9b:0c:42:b5:17:58:d6:7a:7c:cc:
0e:b0:7d:59:45:04:8e:e5:54:ec:20:26:b5:2a:16:f9:df:83:
a7:29:cf:24:e7:cd:b4:a1:f8:2d:3d:e7:e0:f6:71:48:96:98:
4f:5a:ff:a3:fd:37:1c:9f:4e:b5:99:60:39:e5:e2:72:e4:45:
f4:ce:0b:11:7e:4a:8f:54:25:70:0e:9a:2a:12:cc:e2:28:2e:
77:df:18:2d:7d:c2:ac:e9:c8:25:d9:d4:49:27:81:ab:90:dd:
59:c0:94:b4:31:37:36:1b:e8:c3:95:8d:d1:e1:fc:4a:d1:5c:
51:bb:92:43:ae:58:c5:a2:77:0e:46:65:9c:9b:42:d3:d8:f3:
cb:50:a8:ab:23:95:c0:06:0e:f6:bb:73:32:9e:93:c2:7c:2a:
32:30:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:16:19 2025 by rpki-client