Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
File: h4R32LYtCfmui_29gSpT-X7UxXY.mft (raw, json)
Hash identifier: FdAhHNLoiHFqjGXPAlfJ9dg5X1OEW7rxT3JBny1aS9c=
Subject key identifier: 17:90:5C:BA:9C:5B:ED:53:74:1A:1E:DB:A2:9E:E0:7B:65:8E:AD:14
Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Certificate serial: 0197C8704AD586F14B56BC8FE3A20CFC5B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
Manifest number: 03E6
Signing time: Wed 02 Jul 2025 00:01:31 +0000
Manifest this update: Wed 02 Jul 2025 00:01:31 +0000
Manifest next update: Thu 03 Jul 2025 00:01:31 +0000
Files and hashes: 1: 1-chTvEPLKpclBFunFsZudwhteCw.roa (hash: Mk7QbJ14tNyeCXu9wD1n7MpPtkSCXANni+lDYxJDiAk=)
2: h4R32LYtCfmui_29gSpT-X7UxXY.crl (hash: ndGmhoGNNW4BoWFgppKxel4sZ5OgCWG/GiCjYyHGBbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:70:4a:d5:86:f1:4b:56:bc:8f:e3:a2:0c:fc:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Validity
Not Before: Jul 2 00:01:31 2025 GMT
Not After : Jul 3 00:01:31 2025 GMT
Subject: CN=17905cba9c5bed53741a1edba29ee07b658ead14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:10:bf:59:18:72:b8:d9:40:af:5f:65:9d:
22:a8:15:35:3d:c3:7d:aa:e2:65:ea:80:00:2a:86:
1d:4d:44:5f:a4:e5:62:17:d3:d4:e5:96:62:5e:49:
e6:74:78:b0:61:32:a9:a9:8d:b0:67:45:52:2d:4f:
8a:ad:82:10:a6:9f:39:73:52:ef:01:c1:f4:28:11:
13:96:ed:9e:19:2d:26:e4:82:bd:b8:e8:ad:1c:51:
59:7b:21:05:13:2d:49:8c:9d:2b:7a:52:fe:c6:81:
49:13:ca:f1:1e:62:d7:cd:ba:4f:b7:d7:9b:98:c5:
1a:f3:19:f5:26:fd:39:68:38:33:9b:ab:fb:ad:44:
fd:b6:25:d1:1e:44:97:98:8d:34:95:79:f7:41:d8:
85:2a:39:d2:9b:d6:1b:5c:25:d8:6d:64:0b:c3:64:
65:88:92:3f:f3:9c:00:62:75:c7:67:6d:a2:4f:d8:
ab:dc:4b:d1:d9:bd:5a:fb:14:c5:9e:6d:1e:83:92:
a4:2a:c2:87:54:22:ef:16:7b:c3:cd:6d:d5:b8:50:
84:f0:a8:6c:a5:8b:4b:ad:7d:ec:6f:73:73:a4:a1:
86:0d:a1:fc:1e:47:ce:36:62:d7:ec:2d:df:da:47:
71:49:b2:08:99:c7:d3:69:ff:c7:ec:cb:fb:75:60:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:5C:BA:9C:5B:ED:53:74:1A:1E:DB:A2:9E:E0:7B:65:8E:AD:14
X509v3 Authority Key Identifier:
keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4e:eb:fa:b0:87:ee:da:b2:2f:c4:89:d7:e9:65:08:c4:67:
11:91:c9:bf:ca:33:6c:d9:8e:41:19:50:11:a7:76:f2:30:d1:
69:77:ff:67:f4:e5:02:d7:34:e1:7d:29:73:f9:ce:40:50:b9:
f7:28:af:0b:d4:12:a2:2a:9a:72:9c:a7:24:6f:46:03:b1:4f:
54:8b:e9:0e:e4:40:30:18:f7:40:3c:21:06:e6:59:a4:79:da:
29:15:ee:75:df:d4:0c:ab:26:88:28:af:51:9e:6e:6c:28:5f:
1b:3b:43:2b:3e:09:f5:7a:4f:e0:2d:11:6e:cc:2f:97:36:68:
6b:7a:bb:cf:7d:9a:70:f0:8b:30:58:43:21:09:5b:6b:03:23:
5a:cc:ef:04:28:e8:09:13:89:63:d5:e2:9b:64:d0:48:67:7a:
e4:93:bb:39:dd:a2:56:21:89:3b:69:23:97:4b:7c:10:44:02:
1b:48:40:ea:52:73:2b:64:b1:27:3d:b2:69:49:18:e7:6a:1e:
62:01:b1:0a:4b:9b:63:0f:82:88:7e:fe:94:89:eb:51:49:ee:
2d:6b:4f:15:b3:a3:ec:ad:25:ac:8b:f3:a5:53:e9:39:9b:bf:
3e:b0:cc:ef:9c:ba:18:38:89:d2:1c:a4:1a:aa:8f:f5:18:d5:
b4:d0:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:41 2025 by rpki-client