Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: j8sBiAxEgp30tkM2XLWiKvxznYqgpPGISG/xAEkTXPM=
Subject key identifier: C9:57:85:33:6F:B1:76:DE:A6:B9:AD:08:40:16:C8:1C:1E:BD:90:9B
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 019768BC1C603498A3F62C843AC131E22616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 0F1C
Signing time: Fri 13 Jun 2025 10:00:47 +0000
Manifest this update: Fri 13 Jun 2025 10:00:47 +0000
Manifest next update: Sat 14 Jun 2025 10:00:47 +0000
Files and hashes: 1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: WiotZSIFDUc81mo0n51UUX6gwdVbEJzRYARPG4Jwodc=)
2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:1c:60:34:98:a3:f6:2c:84:3a:c1:31:e2:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Jun 13 10:00:47 2025 GMT
Not After : Jun 14 10:00:47 2025 GMT
Subject: CN=c95785336fb176dea6b9ad084016c81c1ebd909b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:c3:d3:00:b2:4f:9a:25:87:cc:b8:dd:53:
c5:09:cb:2f:7d:70:49:95:ac:ad:26:ed:d5:42:0e:
11:10:aa:60:ca:2b:35:e0:a9:84:0c:fc:a0:94:f8:
ba:b5:46:e4:75:75:31:02:b4:d3:2e:7e:b2:f4:c5:
6f:a0:60:40:1a:01:24:b3:a5:06:dc:d4:1a:13:80:
42:c9:ce:62:6d:28:7f:92:fe:01:22:64:74:02:d7:
0c:67:48:2f:98:da:99:6c:1e:81:60:c5:97:04:af:
86:99:a2:63:07:f4:ac:ac:59:d2:92:42:43:5b:3a:
50:09:cf:4e:7b:ba:90:5a:ab:ac:20:e9:19:bc:f2:
bc:86:39:91:c8:c4:1f:0a:91:28:7e:38:d4:94:ae:
c8:fa:b9:5f:b1:00:8a:00:ce:d5:3b:d8:a8:4d:38:
5e:88:18:86:ae:da:4a:51:ae:40:f7:b8:16:64:a9:
f1:9b:94:b8:d2:9d:f3:44:ed:f1:b7:f3:a6:34:0a:
32:93:d0:2b:3f:6c:e1:b8:09:50:40:72:45:82:10:
d8:e5:8f:20:a3:c2:a2:4f:05:b4:41:18:24:50:ff:
2c:04:06:b0:26:60:61:c6:7f:fd:2c:94:3c:27:24:
24:ac:07:28:b0:85:46:68:ed:d9:fd:96:ae:9e:7d:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:57:85:33:6F:B1:76:DE:A6:B9:AD:08:40:16:C8:1C:1E:BD:90:9B
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:00:a7:15:e8:31:01:b8:fc:eb:91:d2:46:5d:60:9c:8a:
10:19:ec:90:7e:08:05:2e:d2:cd:84:2f:c5:d4:4c:b2:8e:64:
fd:69:8a:ed:ae:ad:3c:d1:6e:0d:de:68:66:d2:d6:06:3d:d9:
8f:64:41:da:88:4d:f8:79:43:73:f5:ce:f1:b7:9a:39:03:57:
fd:84:0d:f0:a1:38:9b:82:c4:3d:4f:e3:51:92:a1:2f:13:b8:
ed:3f:fb:e7:51:0c:08:ee:3a:0e:57:da:9b:4a:5a:3f:4a:8f:
ee:ae:34:f6:29:38:ba:74:bb:ef:21:23:9d:2e:2f:78:c6:fb:
89:cd:85:8f:e6:8c:4f:45:4f:5b:48:55:da:06:85:e7:1c:cb:
94:aa:40:f5:4e:31:7d:3f:2c:21:59:e0:1d:ff:b4:37:3a:3a:
a6:87:e9:f6:74:45:d2:4b:22:7b:ff:9d:f2:84:6d:02:8c:27:
e0:5a:de:d1:62:ec:05:89:f0:ac:07:e5:0c:3d:a1:5d:96:d1:
1a:46:cd:05:c7:a3:82:91:be:1f:97:1c:89:c5:e0:65:e6:50:
bf:33:ca:d3:3f:97:ab:06:75:35:fd:2b:a0:f9:15:9f:b7:ab:
61:c1:22:77:18:ec:bf:0a:44:2e:00:13:24:46:b1:a7:69:9f:
a8:4a:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:14 2025 by rpki-client