Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: ygpNmz2pSCsUB9VfP4WrY4JwEyWRytZH8UW6a/12xMw=
Subject key identifier: D8:AC:08:38:AF:36:8A:1A:D1:40:55:18:61:43:CA:9D:D8:7A:AB:E8
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 01976960E5D8D2772BB3374A3987EAFEAC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 0411
Signing time: Fri 13 Jun 2025 13:00:47 +0000
Manifest this update: Fri 13 Jun 2025 13:00:47 +0000
Manifest next update: Sat 14 Jun 2025 13:00:47 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: ZFM6uS9jlrh643S8sAe11lrjvY2QwGtmRSXbA6OTi3Y=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:e5:d8:d2:77:2b:b3:37:4a:39:87:ea:fe:ac:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Jun 13 13:00:47 2025 GMT
Not After : Jun 14 13:00:47 2025 GMT
Subject: CN=d8ac0838af368a1ad14055186143ca9dd87aabe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:fd:39:d8:48:a0:7f:59:7c:58:6b:4f:3a:
22:c5:f3:d7:60:de:ea:8b:21:58:38:76:1c:0b:26:
57:95:07:0d:eb:6b:6c:83:0d:d0:9a:76:a9:c7:49:
ad:c3:4c:fa:6d:be:39:ca:fd:ba:60:11:a7:1f:91:
cf:61:59:04:bd:02:59:5e:f0:ee:c5:15:7a:18:e5:
91:37:a1:18:e4:c9:f4:8d:52:00:7d:7c:9f:0f:df:
cb:22:bc:e2:86:c4:68:3f:ef:6c:6c:73:a8:fa:42:
cb:2b:47:2c:2a:0e:84:5f:03:5f:99:9a:72:e0:bd:
9e:09:da:03:49:ff:41:ec:67:11:6d:d8:31:29:3b:
01:cc:0a:49:48:3f:4d:ef:26:6c:b2:96:2f:16:cd:
94:a5:be:4a:93:9f:3f:23:c6:9c:7b:13:29:7d:92:
74:61:62:db:7b:9e:94:ad:03:fc:6b:87:5c:b2:0f:
af:09:26:e6:7d:d7:7a:06:51:d2:89:f2:67:23:32:
bd:50:d2:6e:5f:68:e8:14:cf:ac:21:76:25:b8:6e:
50:06:f4:28:dc:5e:69:95:02:14:d0:f2:41:05:e7:
93:4c:86:8c:07:20:b2:b7:71:78:3e:f6:f9:bd:25:
c4:d7:b7:b8:90:cf:f8:99:3d:c8:73:df:9a:74:69:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:08:38:AF:36:8A:1A:D1:40:55:18:61:43:CA:9D:D8:7A:AB:E8
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fe:0b:fa:a1:0d:ab:78:c4:98:6e:70:1f:d2:43:b1:99:f2:
30:40:8a:8f:38:89:63:e9:c1:bc:c4:6e:52:ca:be:2e:6b:34:
29:d8:45:19:4e:5d:43:61:76:72:cf:c0:9c:78:23:59:7e:ec:
60:e9:c3:be:47:f4:19:6f:aa:ae:fc:45:a1:9d:48:5d:3b:76:
c5:30:23:eb:62:7e:31:bf:23:68:7a:93:c4:11:9f:8b:a9:4e:
d5:84:75:7d:a5:8a:54:02:40:94:ab:bd:36:64:46:4e:45:95:
9c:40:78:c8:72:d4:f9:42:c6:72:62:34:db:eb:43:d2:77:49:
fa:8e:3e:14:18:4e:e6:53:26:d9:03:74:f7:a8:a7:5c:c5:e1:
45:81:c6:a0:5c:f2:a5:a1:90:8b:bf:cd:52:ba:e6:87:99:c5:
f0:ce:67:d3:b5:35:3c:c0:08:e0:10:64:52:6e:3b:25:0d:37:
8c:2e:7c:14:5b:1c:3c:5f:09:e7:a6:3b:01:f5:23:2b:53:d0:
44:f7:d7:5e:75:fd:b8:c1:e5:94:ad:af:88:d9:17:39:de:b9:
ba:de:da:20:9d:4b:2a:06:d5:f4:b8:03:84:06:b4:af:e6:8b:
aa:0e:94:4c:96:fb:3d:e5:c5:33:d1:62:3b:4e:7d:55:ba:4e:
d1:23:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:02 2025 by rpki-client