Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: AS2WRqX8J8lHUKWDavp44kH6daMdmqnGWfaFVJXzRuI=
Subject key identifier: 02:0D:A8:3F:4A:7F:1C:9C:5F:A5:C2:4E:72:60:39:F4:4E:68:02:FF
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 01977D553349756658DF4BED3A5A3E69FBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 1144
Signing time: Tue 17 Jun 2025 10:00:25 +0000
Manifest this update: Tue 17 Jun 2025 10:00:25 +0000
Manifest next update: Wed 18 Jun 2025 10:00:25 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: TYnEpneueHsAswG7Uy4uV+/0Ug3TpYMxJHl8VtOY90o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:55:33:49:75:66:58:df:4b:ed:3a:5a:3e:69:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Jun 17 10:00:25 2025 GMT
Not After : Jun 18 10:00:25 2025 GMT
Subject: CN=020da83f4a7f1c9c5fa5c24e726039f44e6802ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:aa:34:15:76:78:8f:1b:b1:4f:02:6a:06:
6b:a1:15:11:df:44:0f:32:36:2d:31:e6:77:0f:39:
91:32:fc:dc:94:30:b7:90:6a:fc:ce:c6:57:54:d2:
53:4e:52:79:98:4c:73:bb:f9:32:26:b4:11:2a:61:
e4:fa:44:d1:49:0f:da:6d:87:b5:b5:80:83:7c:a1:
82:89:40:06:04:a0:c1:4d:2b:7f:34:fd:21:cd:93:
cd:6a:62:3e:01:e3:79:22:7a:ad:13:10:51:cd:28:
18:22:0f:76:98:8d:c0:eb:3b:5c:51:4c:cf:18:dc:
aa:7e:23:3f:65:11:a6:96:3b:3a:c1:a5:a9:d3:46:
64:d6:63:5b:f0:b5:72:77:12:0a:00:ab:a7:05:a7:
21:df:dd:ea:75:5b:77:b0:67:9d:c4:9f:ff:ed:39:
e7:7c:33:69:65:bf:7c:14:0a:73:6c:d2:0c:1b:9b:
b3:e2:40:6f:7b:52:54:4f:d2:b1:6e:5b:a0:f1:21:
fd:40:ab:57:02:36:16:58:0a:e1:0b:c2:cc:f8:63:
ef:dd:3a:ae:a9:8e:5a:d8:26:b9:13:b6:b9:20:0d:
d6:71:21:90:29:2b:6c:2b:65:8e:ed:25:ac:bd:de:
fd:57:e5:23:74:2d:2d:e1:5e:49:51:15:b8:c8:73:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0D:A8:3F:4A:7F:1C:9C:5F:A5:C2:4E:72:60:39:F4:4E:68:02:FF
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5b:c5:df:10:1a:d3:5f:0a:ab:03:5d:67:e8:7f:73:0e:2b:
45:50:e7:c5:ec:b1:dc:2b:05:0a:d7:75:1f:e5:15:94:e5:32:
de:92:35:d2:c9:88:98:ed:af:d8:58:d9:93:da:aa:37:a0:82:
9d:c6:bc:98:2e:3a:20:b0:91:c5:aa:d3:42:30:db:13:e2:f7:
8e:70:6f:b1:e4:b9:93:5d:b8:23:63:68:f0:4b:51:be:94:a7:
e0:95:02:9b:e3:00:2d:56:98:07:5e:9a:5a:41:06:d0:84:c4:
1e:5f:a7:84:6a:eb:5c:29:ea:d7:bf:d1:97:be:a7:24:d8:fc:
c0:45:eb:37:f1:c5:1c:4e:a0:96:59:7c:4b:ae:26:38:9c:71:
4c:af:84:ed:68:14:6f:f7:70:0f:db:c7:f7:07:47:bf:76:42:
c0:53:7e:5d:8f:10:2a:a9:38:b6:5d:ed:d0:02:79:f9:2f:9e:
c6:8e:a9:21:1a:57:ed:47:d2:0e:29:6d:81:16:45:7e:2f:04:
bc:6e:13:66:b4:4b:ee:73:f7:d5:25:3f:9c:3f:8d:50:f9:b6:
26:19:7d:bf:d3:fb:ca:b4:f2:d8:e7:01:ae:85:85:fc:bd:58:
87:82:be:51:77:0d:76:0a:8b:13:11:1d:ce:ac:e1:2a:1c:4f:
05:fc:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:43:20 2025 by rpki-client