Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: PhZVResTlNTelVYjlWC677P8XOv2REeoiwU5SkWpqm4=
Subject key identifier: 53:BF:0E:A5:CD:C5:D2:19:EF:1A:7B:6D:3F:15:97:DB:F6:E4:62:64
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 01976E876D715DFE9F7A22458619D5755A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 13:00:58 +0000
Manifest this update: Sat 14 Jun 2025 13:00:58 +0000
Manifest next update: Sun 15 Jun 2025 13:00:58 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: uMcun+sdgBgSy58lLY/IZzRv6/XX7NrJcWLYlPyI38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:6d:71:5d:fe:9f:7a:22:45:86:19:d5:75:5a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Jun 14 13:00:58 2025 GMT
Not After : Jun 15 13:00:58 2025 GMT
Subject: CN=53bf0ea5cdc5d219ef1a7b6d3f1597dbf6e46264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6d:8f:ee:34:da:7b:e0:fd:26:16:5c:58:a5:
1d:fd:5c:57:27:7d:02:bc:37:cf:c3:61:a1:11:09:
c2:8d:ab:29:1c:af:80:bd:df:fb:13:c6:83:92:a8:
1f:90:05:71:80:cb:af:17:4d:d4:bc:56:94:75:6a:
8d:5e:a8:87:3e:08:00:f2:06:e6:6d:2b:4d:24:05:
2a:11:3d:98:ca:7c:88:0e:e0:0b:e5:60:aa:5e:20:
3e:30:dc:19:c9:d9:4b:1a:59:84:3c:25:68:10:e2:
d4:1f:81:12:ec:7e:d0:39:5f:46:ba:31:f6:b0:e5:
7f:32:71:80:cf:41:28:5c:ce:e3:ff:c5:c9:2d:4a:
2c:2f:4e:45:62:49:83:8b:24:8e:de:24:01:76:e9:
b2:8b:55:48:34:ac:88:be:ce:46:00:8c:01:0a:19:
94:60:80:ca:16:a0:8b:2c:73:51:1b:d3:75:da:60:
94:31:b2:47:1e:72:9d:bd:b8:d5:9f:7f:91:3c:d3:
e8:15:51:46:52:b6:24:d7:61:fd:93:bb:c7:4f:c6:
ce:a6:f8:f7:63:b2:c3:d0:a6:39:75:00:42:48:a9:
2b:cf:ee:8f:90:30:81:0f:c5:69:b6:96:4c:ec:89:
86:28:f8:3b:74:4e:a5:c8:7f:76:fa:d5:db:39:fa:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:0E:A5:CD:C5:D2:19:EF:1A:7B:6D:3F:15:97:DB:F6:E4:62:64
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:a6:72:80:7b:65:cb:f7:5a:20:86:51:c4:b7:c9:58:9b:
e7:7a:3e:1c:ae:c3:60:6f:f4:b7:58:a6:27:c9:0d:4c:f2:3c:
06:47:70:3d:bb:38:3c:c8:bd:3f:f5:38:3b:42:6f:15:5f:6d:
f6:39:1a:ec:2f:81:f1:31:36:9a:40:72:2c:f9:16:ec:e3:22:
f1:6a:e4:69:ee:29:27:e2:53:40:c9:fd:33:54:a0:2e:28:52:
63:51:06:c6:3b:25:a0:6a:a0:15:4a:04:95:c1:6e:e9:a0:75:
e4:56:c7:43:c7:a0:0c:ff:dc:ea:c6:b6:a1:83:04:4e:f5:00:
41:11:8d:45:1e:e7:de:95:57:4f:ae:00:21:06:fc:9e:bd:6d:
8b:8c:29:f6:a5:38:36:bc:cb:db:ff:00:d1:5e:26:4b:4c:dc:
d5:df:02:54:e7:5a:41:a1:fa:9d:3d:04:a5:04:2a:1e:65:d0:
89:4f:83:ba:e2:9b:00:df:26:a5:02:5c:0a:15:0b:a7:bd:32:
55:7b:85:01:7e:f2:13:68:35:d4:96:88:75:b0:da:cc:a0:f5:
79:9b:88:0b:ea:af:2e:5c:1b:ac:7a:bb:38:bd:27:5d:24:c3:
4b:54:5b:40:30:a9:b8:b6:f8:a6:1e:54:12:04:1a:a6:de:13:
77:1f:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:04:19 2025 by rpki-client