Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: cNzs84CwlGb9qjUs+vz/4m432PG1U5wceSkrrfle6NA=
Subject key identifier: 1D:B0:19:AC:21:A1:73:02:F9:DE:A8:55:D1:35:17:E9:2F:04:94:29
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 0197B7B2E74BCF15B9025180168FB2A34D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1249
Signing time: Sat 28 Jun 2025 18:00:44 +0000
Manifest this update: Sat 28 Jun 2025 18:00:44 +0000
Manifest next update: Sun 29 Jun 2025 18:00:44 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: FztBGyrXpm3LyNu3mfWAARysV0LqxyL/FSDIO6gLrNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e7:4b:cf:15:b9:02:51:80:16:8f:b2:a3:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jun 28 18:00:44 2025 GMT
Not After : Jun 29 18:00:44 2025 GMT
Subject: CN=1db019ac21a17302f9dea855d13517e92f049429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:f3:2c:39:75:2a:be:92:3a:95:40:ed:23:
a2:54:75:b5:73:af:65:f6:dc:12:a7:54:43:96:7d:
d9:a7:07:ff:fc:d3:6d:aa:2c:59:60:5f:bc:83:aa:
b0:d2:3b:3e:90:f4:8c:62:3c:17:de:55:90:f5:ee:
f5:45:06:f8:59:fb:1b:b3:9a:5d:07:de:32:fc:64:
67:02:d4:ee:bd:35:e6:2c:a0:d5:c0:06:32:7a:63:
fa:f2:ba:44:a2:4c:bd:14:32:93:83:e9:a7:d5:00:
23:55:90:3f:96:cb:5c:5a:a9:a7:37:68:67:54:dc:
68:fa:a8:4e:83:5f:e2:02:1d:b6:36:23:cd:37:57:
bd:40:96:63:8c:08:5b:65:6c:a5:d2:2c:e6:a4:e2:
15:65:2a:ed:c5:2d:b1:55:83:83:f7:21:ed:fe:ed:
f9:64:83:0b:74:02:cd:03:b8:7c:eb:f2:ec:3d:7c:
96:42:21:b2:ad:a8:6b:0b:e9:c6:a3:ff:7e:26:d7:
e3:57:b5:36:0e:5d:e8:7a:62:f5:11:d5:df:8d:89:
7a:be:06:4a:bb:e2:ed:7a:49:ba:5c:1b:26:79:97:
49:43:83:a8:93:6a:a0:d5:3a:d1:67:48:09:8d:67:
1b:66:b0:06:59:27:ff:55:67:48:9a:92:68:f2:0f:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:19:AC:21:A1:73:02:F9:DE:A8:55:D1:35:17:E9:2F:04:94:29
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:32:59:e1:52:cf:62:00:6a:ef:13:f3:20:62:76:43:89:
db:dd:7b:a2:31:d6:65:bf:bd:23:e7:78:1c:2c:83:39:88:c9:
48:c0:15:87:f8:44:be:fd:a4:65:63:52:1e:54:d4:1c:30:00:
b6:8a:d7:a3:ee:02:d4:65:c9:8f:c1:8d:74:97:81:ae:cc:2e:
4f:fe:fb:f0:63:d9:b6:63:2d:0c:c8:49:89:ab:7a:aa:16:ff:
59:e4:eb:ff:6f:14:bb:63:ef:95:d1:b6:e0:bd:38:11:54:07:
c5:61:46:4c:91:83:98:d3:70:5c:72:c8:63:73:c0:e0:2d:1d:
ca:cd:53:09:99:aa:d6:4a:7a:8e:59:95:31:dc:de:d2:5e:28:
88:d5:fd:87:1e:14:9d:5f:65:d1:db:20:6d:79:7c:80:06:9c:
31:30:ee:24:15:eb:31:c3:1f:7a:f1:8f:00:22:19:bd:57:56:
13:e1:6a:7e:5b:aa:d7:4e:77:47:29:ba:76:6d:8e:51:cc:df:
a6:bc:e6:93:02:27:1a:78:98:de:af:94:96:e0:2a:be:fe:4e:
f3:58:a3:76:86:de:06:3e:51:bc:43:3f:ee:a8:af:47:c7:62:
4e:62:48:95:5a:fb:2f:55:70:34:a2:9a:8f:9a:d5:34:d1:84:
9e:d6:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:22 2025 by rpki-client