Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: VLQn06om4Q6KV/Y6yZjRC1KY4U6s271+iG2Bejji0Q4=
Subject key identifier: 06:D4:E0:CD:13:0A:3E:EA:57:A5:F8:60:46:66:08:69:C8:42:04:59
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 01976D3E6D48C4B196A899E455A016340DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0D8E
Signing time: Sat 14 Jun 2025 07:01:37 +0000
Manifest this update: Sat 14 Jun 2025 07:01:37 +0000
Manifest next update: Sun 15 Jun 2025 07:01:37 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: 5iTlHKj1Qy32SCiydeXCRhbwlu1vA+GBemeo81rRbaI=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:6d:48:c4:b1:96:a8:99:e4:55:a0:16:34:0d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Jun 14 07:01:37 2025 GMT
Not After : Jun 15 07:01:37 2025 GMT
Subject: CN=06d4e0cd130a3eea57a5f86046660869c8420459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:38:f0:5a:e3:bd:57:1f:8d:96:b9:37:89:
54:cc:50:d3:ac:65:95:37:da:b4:8d:81:7f:28:d8:
4f:b2:58:86:19:15:d4:3d:54:09:5a:83:15:a5:28:
ff:54:89:34:e6:ad:4c:48:de:17:80:19:a6:06:e9:
e4:c8:8a:52:ae:83:b3:76:3c:61:a1:47:47:9f:7d:
fe:17:28:61:4a:bb:46:d0:6c:d7:d0:cb:b5:8a:eb:
33:b0:56:0c:04:03:64:de:ac:8a:97:b0:7a:69:9e:
c5:bd:8d:42:44:b7:5c:f3:10:49:55:29:4b:58:d9:
4d:12:d6:b3:e7:54:5f:85:7c:11:86:ea:71:82:bd:
24:14:63:56:a7:14:36:7d:76:ea:a5:17:2a:7d:9d:
bf:95:28:58:4f:ea:ce:72:48:9d:4f:66:e2:ba:2b:
3f:d4:4c:97:20:af:63:01:b7:7e:86:3e:6d:17:a9:
14:a7:ee:b2:04:af:5a:ef:0a:2c:b2:9f:97:52:75:
c9:13:c8:dd:9a:af:7c:e8:20:bb:bb:bb:54:10:54:
dc:c7:73:9a:24:eb:9b:ea:72:bb:73:20:c0:50:3e:
39:54:f6:05:7d:89:13:61:0f:42:b9:d0:3b:4f:8b:
55:a3:af:61:70:9b:01:a6:f7:c8:07:0d:79:04:cd:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:E0:CD:13:0A:3E:EA:57:A5:F8:60:46:66:08:69:C8:42:04:59
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a4:59:99:a2:5b:d9:ab:a3:a9:ab:9d:c9:49:3b:69:57:1e:
9c:c5:f4:06:cf:09:cb:95:6e:2b:54:d4:7e:35:90:71:29:41:
82:f0:3d:fb:aa:41:0c:bc:60:16:28:7e:1d:4e:68:99:30:24:
50:b5:7e:c2:24:58:0b:7d:9e:ad:94:b8:3d:99:99:a1:b1:f8:
71:01:d8:ac:72:4c:91:7f:08:e9:11:2f:a5:55:b1:53:ab:e6:
98:13:ca:5f:e7:34:4e:4f:da:3d:59:ad:b1:b6:f7:b3:5a:cd:
19:50:74:cf:41:d8:f5:13:2d:59:be:96:8c:f6:c8:b8:ec:8e:
1d:93:1f:d2:8c:2c:06:a9:a7:c6:72:9e:8c:2e:8e:98:35:38:
a1:cc:0d:d9:fe:a6:0c:1e:35:cb:c6:34:c1:79:07:60:1b:49:
b7:b6:a1:29:4d:8f:64:e2:0a:57:0b:d3:e8:c3:c1:9d:d7:a1:
4e:65:e1:15:4f:f5:66:31:e6:64:c7:1b:72:8a:35:0b:90:77:
89:f3:d6:36:de:dc:73:54:ba:e6:87:6e:55:1a:0d:cb:da:0d:
b8:31:92:7b:45:2e:10:e0:9a:8f:77:fb:da:c3:eb:f0:02:4c:
45:8b:3d:8c:50:99:a7:aa:3e:2a:ae:de:57:9f:d0:ed:63:61:
fa:05:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:49 2025 by rpki-client