Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: vbfFlv178AQzqhYCz3Jx4RQRax2y7w8bDp6eFuoUUro=
Subject key identifier: 42:B9:E9:C6:9C:56:AE:52:1D:0B:C6:BE:80:FA:A1:C3:DA:F1:1B:74
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 01976CCFAB71628981367D496F5352136324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1258
Signing time: Sat 14 Jun 2025 05:00:38 +0000
Manifest this update: Sat 14 Jun 2025 05:00:38 +0000
Manifest next update: Sun 15 Jun 2025 05:00:38 +0000
Files and hashes: 1: gTuMJj4zNk4inmWeuwHt2oopg5M.roa (hash: zopPOsMBU8dt9Dr0i+LUD1TPbnQUzJ4uDKxUzfrnRiY=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: sGZUfboy6qz+/YbU54TDkrIGhMFjNrwJOYs0gnmWosg=)
3: rnwY-7oYw6V-trqxlfGxfeIKZIY.roa (hash: Yep0/R2aV0HSvC5J3JSqbOslIcQ/KKdPdI5bChqi8Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ab:71:62:89:81:36:7d:49:6f:53:52:13:63:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jun 14 05:00:38 2025 GMT
Not After : Jun 15 05:00:38 2025 GMT
Subject: CN=42b9e9c69c56ae521d0bc6be80faa1c3daf11b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:62:5d:f3:10:30:aa:3a:7d:48:1b:fe:61:
af:ab:65:c8:c0:09:4b:00:f3:29:83:92:9e:c6:0e:
7d:a5:80:d8:a5:93:d8:98:f8:60:82:59:f5:17:d8:
b6:74:35:e3:07:26:a4:50:ba:08:72:b6:af:6d:a1:
55:ad:2d:e6:b8:a2:ab:a2:12:59:57:d4:1a:c8:d3:
d1:2a:24:07:de:1c:12:de:ff:d7:74:42:f6:89:07:
12:a0:7e:da:4d:5c:d3:d3:a0:77:73:7c:c2:43:bf:
df:31:f1:19:16:67:14:8f:e7:7b:2c:3e:32:ee:47:
fe:b8:b8:8d:b0:e0:38:f6:79:5c:99:db:db:d3:a8:
a3:c6:86:d1:49:b2:77:17:df:21:90:8b:7c:9e:db:
e9:13:50:b9:b4:ad:d1:01:54:87:24:e0:10:9f:2e:
1f:ce:8c:5a:ac:b6:07:68:0f:30:f2:ff:f4:bb:d2:
6f:65:46:a4:ca:7b:3b:11:10:4a:24:11:7e:6e:9a:
b6:c7:ed:80:8a:89:c1:f6:0b:d7:dd:1d:fe:bb:0b:
cb:2e:9c:40:44:de:14:16:41:fe:bb:6f:5f:f9:0d:
c8:25:0f:44:99:f9:d8:97:6d:c7:ab:31:69:bf:27:
97:9c:dd:91:d3:d9:e8:25:f8:89:72:a1:98:81:aa:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B9:E9:C6:9C:56:AE:52:1D:0B:C6:BE:80:FA:A1:C3:DA:F1:1B:74
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:67:43:0c:6d:fd:4d:0b:65:65:87:d2:73:7d:61:46:ec:7f:
7c:71:eb:6a:8c:72:ce:03:c0:67:bd:c3:40:30:1a:59:72:8e:
97:76:4e:02:67:a7:a7:5b:be:69:90:ea:27:9d:8a:c8:ed:b5:
b3:7c:06:47:7c:21:a1:6b:a5:8c:40:7b:0f:1f:f8:06:78:6b:
d8:99:40:9b:e0:eb:b8:4e:70:09:e0:c2:d4:43:77:40:d4:21:
8d:75:21:0e:84:f0:02:d8:ea:30:86:49:56:20:25:df:fb:97:
09:b4:8f:c0:c6:24:fa:46:db:4d:83:9e:ec:cc:59:4d:f2:d2:
81:f8:22:96:87:70:51:c5:5a:ad:fb:bb:21:fd:f2:bc:ee:4c:
5e:82:5c:67:0a:61:33:4d:58:59:41:4c:f2:5c:49:6c:e4:a4:
6a:79:8a:c1:eb:a7:f3:13:94:93:a8:21:00:86:6d:88:55:ed:
30:2c:0b:a8:21:75:2e:56:f3:8c:2b:47:b1:24:b4:0d:96:5a:
6a:4c:8a:6c:37:4c:af:51:b8:b4:2e:b5:42:3e:ea:08:17:16:
af:18:34:06:2e:b1:57:51:13:06:84:a1:b6:45:19:33:43:ee:
90:bb:7a:08:19:30:be:ea:f3:5f:ce:db:f6:ed:4b:c8:20:58:
e9:17:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:38 2025 by rpki-client