Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: 45bJGLvODGyb4D+dC9kDdPoMEjNIVPmkBM6YVH6cLgw=
Subject key identifier: 42:36:0D:94:6B:F1:C7:79:CF:43:52:07:DB:43:12:BE:24:09:5A:9E
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 0197801FAE24CBDDDF4866E39B576BA16D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 1301
Signing time: Tue 17 Jun 2025 23:00:49 +0000
Manifest this update: Tue 17 Jun 2025 23:00:49 +0000
Manifest next update: Wed 18 Jun 2025 23:00:49 +0000
Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: z1wfOO4cmiSEX9cgxQG+/gG8Ifany62tpjZmU+ob4g0=)
2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:1f:ae:24:cb:dd:df:48:66:e3:9b:57:6b:a1:6d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Jun 17 23:00:49 2025 GMT
Not After : Jun 18 23:00:49 2025 GMT
Subject: CN=42360d946bf1c779cf435207db4312be24095a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:e3:d0:eb:5a:86:7b:11:0d:3a:b9:a0:28:
e5:f3:1f:f7:4c:00:23:87:b8:2c:1d:23:ec:e9:18:
d9:b6:7c:d6:d5:0b:a5:24:26:34:5b:96:1f:52:8c:
5f:7a:26:fb:65:80:95:6e:76:66:ab:ad:90:83:fe:
94:28:7c:8c:1e:c7:84:6c:f3:11:ae:f2:b0:c4:16:
0b:9c:f6:9d:e3:20:3a:5f:23:4d:e2:dc:c4:08:83:
4d:16:e7:d8:22:7d:c3:d9:b2:4a:89:1d:12:aa:5b:
fd:fb:3c:39:7b:de:e7:81:d7:0a:0e:fa:5d:c9:a6:
f3:15:a1:48:20:12:59:ff:83:00:7b:7d:eb:ca:19:
04:db:ea:5f:f3:4c:b2:33:ae:12:ea:b5:b6:02:90:
a6:8c:fc:b2:c9:e3:1c:b3:23:42:f6:54:cf:27:10:
00:32:db:39:f0:a4:35:68:eb:5f:f0:23:92:f6:5e:
16:4e:ed:43:74:56:8a:c5:a8:62:4d:8e:a6:7d:29:
7f:7d:b9:4b:81:d8:28:86:14:d8:9b:b2:63:a5:ea:
d2:2f:85:ad:c9:67:cb:a9:5d:b5:3c:61:49:8c:f3:
45:ce:c5:be:71:7a:d4:7a:8c:ab:59:42:df:7b:41:
37:11:7f:80:27:dc:86:1e:d1:d4:76:ea:e8:8c:f3:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:36:0D:94:6B:F1:C7:79:CF:43:52:07:DB:43:12:BE:24:09:5A:9E
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:67:a1:c0:5d:28:ab:bb:68:71:39:d0:75:de:32:25:27:1a:
3c:fa:b3:2a:de:49:a6:ff:a5:b4:34:6f:ec:98:64:b0:a0:34:
d3:80:b2:4b:b1:b9:71:85:6a:22:1d:a3:f3:a4:b7:18:f0:85:
ba:cf:66:1d:34:9b:43:c0:e3:a6:30:4e:45:9c:95:85:6b:35:
d3:e9:9c:f1:e8:13:d5:a9:70:83:4d:b2:02:87:f3:db:00:81:
3e:7d:98:80:ed:aa:6a:57:3e:d3:d5:9b:bd:ee:88:2b:e7:bb:
d6:44:02:31:73:01:62:2b:67:7e:a3:11:00:0f:ef:8e:5f:5b:
34:6b:5f:55:03:f2:1a:fa:a1:87:c1:1f:01:59:ce:88:40:98:
e3:5c:8a:40:30:08:f3:80:a1:9f:0c:69:ee:9a:9e:62:7b:62:
43:33:3b:ad:cc:bd:68:a6:b7:f2:cf:01:6c:46:ad:e3:9b:54:
43:46:90:57:4d:27:9a:54:f7:30:c4:46:f7:d8:1c:99:3a:c8:
07:15:49:49:97:1a:71:44:9e:4a:49:5c:39:8a:05:93:18:a2:
f0:40:54:a3:8b:f5:85:90:72:d0:8a:dc:93:38:ef:0f:8e:fd:
43:3e:52:7f:48:b0:dc:88:ee:9a:d0:78:82:6d:af:62:3c:67:
55:12:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:01:45 2025 by rpki-client