Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: KDXzVt70+TJHxP3wkIvFjYuRRAAWW0C3RA1arx1mCCk=
Subject key identifier: 8E:BB:BE:32:18:03:E2:D0:13:66:C8:EE:22:A2:36:1C:F2:8F:16:30
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 01976C2AB566DE9B0C290107E426D9C4CABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0E8E
Signing time: Sat 14 Jun 2025 02:00:27 +0000
Manifest this update: Sat 14 Jun 2025 02:00:27 +0000
Manifest next update: Sun 15 Jun 2025 02:00:27 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: 854nVD4NwMslO6F1GWqFZ9uXeMDRZS5utr4/5Tw2Ggw=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:b5:66:de:9b:0c:29:01:07:e4:26:d9:c4:ca:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Jun 14 02:00:27 2025 GMT
Not After : Jun 15 02:00:27 2025 GMT
Subject: CN=8ebbbe321803e2d01366c8ee22a2361cf28f1630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:a9:fb:ed:1d:52:5e:01:4e:ee:22:ee:86:
cb:a1:ac:99:e0:dd:6a:8a:36:5f:15:39:38:67:99:
67:99:e8:aa:fb:3d:ca:b5:a7:51:cf:4d:02:c9:df:
27:10:a1:f5:3d:f9:31:3e:cc:be:a0:61:ce:81:ac:
74:f6:33:24:c3:26:e3:f3:cd:f3:b7:14:b1:d1:3c:
fb:d6:86:87:a7:37:6a:32:5e:0c:f1:5b:1d:f2:9d:
1b:ff:c2:7a:66:53:c9:1e:28:47:ae:0c:63:72:cc:
f0:54:2e:5f:91:6b:f5:4d:76:2a:22:9d:9d:7d:75:
ec:0a:c5:39:2e:79:dd:b1:64:37:9a:17:e4:a9:df:
9d:2d:be:08:5f:53:35:3b:b5:92:7b:bf:50:a7:1c:
ce:e3:50:cb:21:11:f2:f1:be:19:c8:fa:ad:72:d1:
89:2d:1d:6d:9a:50:2d:7e:4d:da:f8:00:7c:08:72:
94:c8:e0:5b:73:fc:a7:6e:4d:96:f4:55:71:f0:07:
08:28:2e:24:30:88:bf:18:53:83:b6:86:23:14:79:
cc:6b:ce:74:f3:d8:2f:a8:b5:11:58:18:d4:37:73:
f4:48:2c:03:8b:7f:3e:00:31:b2:95:41:25:49:79:
94:d2:c1:50:55:9b:c9:55:2e:f2:18:27:47:56:19:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:BE:32:18:03:E2:D0:13:66:C8:EE:22:A2:36:1C:F2:8F:16:30
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:10:63:ce:6c:b6:98:a5:66:b1:53:02:05:4c:62:4b:eb:d2:
fd:c8:7a:55:5c:97:9e:5a:fc:5b:7a:4a:3a:7d:e2:05:66:ce:
ce:16:26:91:54:a9:c0:22:99:f6:9f:bf:3b:66:5d:5f:0b:23:
7a:9d:7c:ba:61:9c:83:76:2a:25:04:81:05:fb:6d:48:90:9c:
46:39:5c:a8:91:7a:e2:8a:aa:98:9d:70:6e:66:79:be:ea:36:
b5:69:0f:c8:1a:26:33:41:0b:ed:b1:e8:48:a9:c3:51:58:7b:
21:a1:67:37:19:f7:01:06:07:2f:cb:27:df:bc:6f:b9:e5:eb:
77:cb:51:10:b2:3f:7e:e4:15:9a:ac:d4:30:eb:32:2e:64:f8:
8b:6e:75:9e:89:01:29:d2:6d:4c:da:38:e3:0c:64:fa:55:f1:
2f:3d:09:6f:87:6b:9e:b2:67:38:67:f7:f6:b9:c9:80:bd:88:
04:08:99:53:6f:63:ea:ab:7f:30:9a:9b:bb:b3:78:55:89:d3:
16:f8:3e:86:32:56:1d:77:32:81:0c:4c:1b:af:6b:43:31:87:
76:bd:dd:d2:19:e7:8f:fc:b5:ea:69:ff:93:49:f5:be:71:81:
2a:07:f5:06:eb:42:a0:35:53:6d:a0:51:48:03:d3:e9:07:65:
1c:83:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:54:18 2025 by rpki-client