Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: t2pLpzDvMuHm85NoWbBbZbHG3WN9VB4UtDU33mFqG6Q=
Subject key identifier: E1:26:87:06:7D:FF:35:48:5C:F4:31:8E:33:9B:6E:CC:56:C2:D9:53
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 0197B77CD66DB20D558E68AD707CBE5E6477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 0436
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: CtP18AXfa+Kr9kWGriC+Avk5g/eo5AUm5VtMIgc3Zok=)
2: uwztSUaVa32JKkn4Q4-prIWIsHY.roa (hash: 9SKm5leahKDADIT+6y+OevxMRMYcy45USoP8dQ3RH/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d6:6d:b2:0d:55:8e:68:ad:70:7c:be:5e:64:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=e12687067dff35485cf4318e339b6ecc56c2d953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:e9:08:63:5c:40:d1:5a:9c:4b:8f:cb:88:
e8:aa:5f:26:f8:76:1b:df:2d:96:b4:99:2d:69:85:
c6:5a:16:57:f9:41:0d:65:60:ac:15:f0:c6:81:8a:
7b:95:ec:36:18:a2:9a:57:93:90:04:3a:59:ee:2a:
ce:1c:47:ca:d6:a1:2f:78:2d:42:e8:12:ac:fd:0c:
00:fc:64:d5:e8:72:e0:35:85:32:11:57:44:0e:88:
b8:59:e8:ea:48:79:a8:a8:ea:c6:82:2b:7b:39:6a:
94:f1:68:8d:45:22:23:0e:37:1b:1c:42:a8:e9:26:
97:97:d0:00:b6:b0:c6:4b:25:83:f4:5a:8b:09:64:
55:4c:7a:69:b9:52:b2:74:f9:c1:48:6a:65:f4:62:
f9:f6:90:a6:2d:03:47:18:2a:f7:1a:a6:51:ed:5f:
4f:af:cb:70:38:9c:3a:08:7c:ca:a1:2c:15:8b:3b:
c2:e8:20:78:67:9b:42:3c:50:7c:62:39:c0:14:46:
b7:5c:83:41:e8:6c:f8:48:43:ff:02:54:20:ca:03:
39:e2:69:59:27:0a:89:4d:fa:30:0d:f6:49:3d:16:
63:4e:b9:f2:ad:83:5c:a4:e6:d6:48:7b:fd:17:7e:
89:43:09:89:d9:c9:bb:70:09:a3:8d:9e:0e:a2:b3:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:26:87:06:7D:FF:35:48:5C:F4:31:8E:33:9B:6E:CC:56:C2:D9:53
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:bc:8d:6a:31:3e:af:bd:8d:68:1f:c4:f2:2c:36:95:1f:
8b:25:83:cf:1c:ef:09:14:83:89:56:69:49:4c:aa:7a:53:10:
3f:fd:c4:53:c5:fd:11:d2:4c:29:9e:0f:af:f2:50:55:c5:62:
4c:cd:23:f8:42:11:d7:54:fc:84:33:ec:65:22:06:10:b8:52:
ae:7c:fb:0d:6c:99:44:36:39:17:ce:1c:fb:cd:18:ad:9e:3f:
7d:b1:ba:0f:92:c5:2e:e6:43:ef:00:73:d3:52:de:bf:fd:c5:
b5:3d:da:eb:cf:20:b4:33:42:d7:c6:06:78:2d:37:dd:9f:de:
21:9f:5f:f7:b2:3f:0a:68:ae:5d:7a:1c:70:47:1b:dd:34:a7:
ad:c7:18:f2:a0:dc:ee:e8:c4:12:4d:0b:b3:7b:94:b5:58:2d:
0c:7c:77:f9:be:8a:f8:f5:83:cf:2f:f8:ec:2d:6e:60:e4:e4:
5d:64:03:b7:aa:41:07:5b:0c:24:b6:97:da:10:ed:42:a2:39:
96:a9:07:db:c5:f6:f0:8e:6f:bc:73:37:b1:08:ba:97:55:4b:
f3:fd:4c:a8:ee:fd:c1:1d:2c:84:1f:8f:9a:36:96:cf:1e:2c:
46:96:b5:7f:04:b2:e1:9e:ac:f6:bf:cd:81:13:cc:4a:f4:aa:
00:95:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:21 2025 by rpki-client