Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: nZNCpQlUt+4/tD7nxdI30e050OKKCChOz55FwSyeGCI=
Subject key identifier: 14:40:49:C0:F3:0F:52:4A:A5:7A:2D:2D:AE:75:3C:71:EE:D5:36:B4
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 01976D06D9B12F91A3B89D2EEC82DC0EAEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 14D6
Signing time: Sat 14 Jun 2025 06:00:54 +0000
Manifest this update: Sat 14 Jun 2025 06:00:54 +0000
Manifest next update: Sun 15 Jun 2025 06:00:54 +0000
Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: vu728/7yvhsBHMxKrEqGN2iaQmJ2/QRq1a6myGo5zUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:d9:b1:2f:91:a3:b8:9d:2e:ec:82:dc:0e:ae:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Jun 14 06:00:54 2025 GMT
Not After : Jun 15 06:00:54 2025 GMT
Subject: CN=144049c0f30f524aa57a2d2dae753c71eed536b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:51:68:f1:33:9c:52:90:a2:59:fc:5d:08:
1e:e9:93:5a:4e:b7:89:80:09:db:90:3f:b3:75:0e:
af:94:fd:49:9f:19:7c:97:4d:72:2a:b6:4a:d8:d6:
6b:78:96:15:57:bf:28:86:e6:5c:9a:63:80:5e:e2:
3f:b4:e9:a2:72:63:13:bb:b0:6d:2e:be:cb:88:35:
ec:b4:89:d3:7a:2d:ba:e2:21:2b:b9:5b:8a:4c:6a:
18:85:6b:c4:51:69:e3:03:f0:92:e1:80:6d:c7:96:
b6:f2:49:b6:53:df:5a:cf:48:2d:f8:1c:95:3c:f1:
46:ce:e2:7f:2d:cd:07:f0:1f:ee:ba:41:6b:2a:f1:
68:b5:62:63:8e:d7:9d:15:b9:a1:de:c2:09:47:82:
df:23:89:f6:88:1c:0b:ea:11:37:98:63:be:a2:42:
20:2c:bf:04:67:e9:5b:00:6a:e0:72:8e:0d:4d:28:
2a:ed:90:a9:49:d9:ce:c4:9e:c1:5d:aa:fc:d2:df:
2a:ca:0b:b0:7d:62:5c:9e:83:34:52:ef:23:4e:e2:
1b:9a:77:e4:f4:82:a5:06:4c:e8:6b:62:0c:c3:17:
e2:04:ec:2c:70:3f:59:18:7a:81:74:60:be:1d:b2:
89:19:01:71:51:51:27:fa:90:ed:5a:44:c6:11:e9:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:49:C0:F3:0F:52:4A:A5:7A:2D:2D:AE:75:3C:71:EE:D5:36:B4
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ae:6f:1c:22:21:3d:5a:c5:8a:59:30:cd:46:8e:d5:db:d4:
bc:eb:b8:f2:69:86:2a:e1:f2:97:ff:b7:b1:f8:95:5f:cb:f8:
cc:51:7b:4d:29:5d:2a:9a:ac:27:5f:50:bc:ca:0f:31:c4:55:
68:d2:4d:49:b5:d5:6b:84:4f:9f:ec:b9:8b:22:bc:01:c8:5e:
0e:9c:f8:c2:ab:0e:ac:74:66:6c:4f:2d:59:57:db:04:fa:d9:
aa:98:e2:0c:fc:5e:0b:d0:4d:63:f9:7b:f7:34:b5:ef:c2:41:
9f:f3:d4:62:ad:9a:b1:04:35:77:7c:02:ec:bb:1a:62:87:d6:
df:16:cc:14:05:34:9a:48:29:50:e9:82:9b:a1:64:26:d6:d9:
32:45:ff:9f:d1:5f:4a:c4:e1:e0:0b:e8:c7:85:3d:8b:29:d6:
9b:67:19:b2:cf:70:80:dc:08:84:47:38:0d:28:5b:ec:3d:14:
25:f3:aa:64:d3:de:97:c4:15:52:fb:52:f8:32:99:36:80:1f:
15:3a:3c:2d:24:20:d7:d9:92:b0:e8:ca:ec:41:89:50:21:ad:
ca:67:06:e6:96:22:63:d5:b6:33:50:1a:d7:fa:12:80:9c:d2:
7e:ea:36:48:65:c6:0d:b8:c3:6f:0f:dc:d6:f4:a7:ca:0c:c8:
b1:08:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:52:48 2025 by rpki-client