Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: E7w2dfzTCV3neMxVKy619wdNBjklo5SlqYQStBBmrVU=
Subject key identifier: 4D:81:57:68:9D:FA:0E:92:17:DB:A4:C4:DA:D9:92:7F:00:7B:4D:BE
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 01978131F79E95A27F16C3B0E9E880CBCF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 0F99
Signing time: Wed 18 Jun 2025 04:00:24 +0000
Manifest this update: Wed 18 Jun 2025 04:00:24 +0000
Manifest next update: Thu 19 Jun 2025 04:00:24 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: xibCF53FNcc0iDkCqS0LwAVFRFxV+Wtb38HY38cigXo=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:31:f7:9e:95:a2:7f:16:c3:b0:e9:e8:80:cb:cf:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Jun 18 04:00:24 2025 GMT
Not After : Jun 19 04:00:24 2025 GMT
Subject: CN=4d8157689dfa0e9217dba4c4dad9927f007b4dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:ad:a6:36:0e:b3:9c:13:59:0c:6b:ae:06:
d7:1e:6e:17:9b:24:53:f1:a0:74:48:b3:2e:2a:ba:
1a:67:60:64:9a:92:e2:2f:5a:c2:d8:35:d5:40:cb:
bf:01:6e:d6:69:ff:ff:5e:b7:27:2b:f3:d6:e4:dd:
b2:bb:a3:57:3c:2f:c6:64:e8:7a:5b:57:6c:83:36:
cd:6f:d4:53:9c:02:ba:d4:9b:cb:0e:6a:96:5c:bf:
0d:43:eb:2c:ff:40:c5:c1:69:ed:2b:d1:0f:2e:83:
d9:32:ab:80:04:7f:99:4e:46:c1:45:c8:4a:44:cb:
50:7f:9d:89:90:58:d7:ce:4c:b1:cc:30:e7:e2:5d:
0a:9b:e9:5f:e9:80:3d:60:4a:c0:7b:c7:d5:a8:9a:
98:ab:3d:94:c6:1c:01:1c:5e:c1:79:2f:d5:db:d4:
a2:83:ee:b0:bf:61:08:25:39:0d:f9:1c:fc:f2:d0:
22:aa:31:0a:a8:65:68:11:07:9a:ac:8b:3e:a6:d0:
1f:36:ba:ee:28:dd:31:c0:b7:e2:31:e2:dd:eb:77:
32:b4:ab:fd:dd:21:a8:86:5c:eb:52:a9:b2:f4:06:
d1:49:ea:fd:8f:0d:78:aa:0c:c0:81:2f:dc:7c:8e:
c0:22:06:f2:b0:d1:4c:5f:d5:9b:bd:fb:91:b4:07:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:57:68:9D:FA:0E:92:17:DB:A4:C4:DA:D9:92:7F:00:7B:4D:BE
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:86:0f:dd:fb:76:11:eb:7f:c5:e9:77:4c:7b:94:f4:e2:e8:
f1:99:00:65:d4:f7:ee:ac:d0:46:39:a5:a6:24:89:a9:fa:fb:
b2:77:31:80:6f:72:a5:bf:c0:a5:85:5c:b5:c8:b8:da:ab:eb:
19:80:7e:1c:1b:f2:a6:25:42:02:ee:99:50:98:39:c9:bd:f0:
14:1b:16:49:b4:80:6f:ca:55:6a:c9:22:e0:f4:89:ce:8b:a1:
3f:f4:33:2d:45:2a:0c:fd:44:b6:1d:d7:cd:75:18:b7:fb:8a:
dd:d3:9c:b5:0d:bb:9a:f6:36:bf:12:22:86:81:78:a9:a2:e1:
88:9d:25:3f:2c:f6:85:8d:03:f1:f8:95:b0:61:bb:cf:a3:ab:
01:23:ac:6d:e7:b0:62:36:38:9e:5b:e1:02:4f:9a:60:0f:77:
53:7c:db:5e:fd:40:98:11:f8:66:e8:9a:71:3e:a6:65:41:c8:
bf:9b:11:00:7f:02:d8:d3:e4:cf:fb:01:5e:10:bd:0e:66:77:
52:bb:2c:5c:5c:0a:30:5f:33:2a:41:eb:4a:d9:65:aa:3f:ed:
1c:2d:07:90:ad:28:74:4a:f8:06:74:24:8c:ab:30:fa:f4:8f:
af:92:81:d2:a8:f6:c0:0d:58:57:b5:f3:47:60:93:62:2f:50:
8e:4e:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:18:14 2025 by rpki-client