Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: 8fKH/t4/f/81fiRJMHk5rck0y8JTPKZo2QlvwyjZd2E=
Subject key identifier: 41:C6:8F:F0:F5:64:3B:02:95:54:33:1F:A1:77:17:19:36:CD:FE:05
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 01976F99D6D4B119330780DC3B5CC6CA4919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 18:00:42 +0000
Manifest this update: Sat 14 Jun 2025 18:00:42 +0000
Manifest next update: Sun 15 Jun 2025 18:00:42 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: CsRIzxPmlezBsWZiMvmU2KhzCmbuaw0mpanfCSecbG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:d6:d4:b1:19:33:07:80:dc:3b:5c:c6:ca:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jun 14 18:00:42 2025 GMT
Not After : Jun 15 18:00:42 2025 GMT
Subject: CN=41c68ff0f5643b029554331fa177171936cdfe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:f1:a8:c9:f5:7f:75:5c:57:23:fb:c6:f3:
9c:0b:88:6d:9f:83:e9:27:4a:e4:9d:1e:70:4c:4e:
52:49:45:03:c8:db:92:3e:0e:be:a8:d5:47:a9:fc:
cc:6c:5c:82:42:96:3c:90:c4:05:df:42:f2:77:32:
ed:37:38:67:e7:48:a5:1d:74:4c:43:cc:dd:1d:d8:
f0:5e:13:56:eb:d5:eb:07:e4:d2:74:bb:2d:78:91:
2e:64:cd:3f:f9:ae:30:75:3c:ca:a5:67:83:e1:8e:
6a:01:66:b0:75:81:2a:f9:fb:f1:d8:c2:c2:07:ae:
6e:cf:63:5d:72:1d:d9:e6:89:41:53:74:a5:2e:93:
2d:6d:80:1b:ff:31:a9:2d:f1:10:33:60:c8:01:22:
28:d8:81:02:43:90:60:85:70:93:15:17:92:de:33:
92:ea:7b:8b:6e:f0:19:bf:a3:65:c7:a1:ed:22:9c:
bd:fb:4d:b7:03:26:0c:9f:8b:43:f8:ff:b5:7d:35:
75:5a:d8:d5:d0:b2:59:d9:a7:e8:26:8a:bb:11:65:
8c:52:92:d5:da:ca:dc:7a:a9:e6:7a:63:18:8d:a7:
94:40:f1:09:51:ad:d3:5b:63:ad:4a:43:55:68:f0:
e7:9a:fb:d6:1d:8f:1e:66:5f:45:c1:4a:cd:a7:e4:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C6:8F:F0:F5:64:3B:02:95:54:33:1F:A1:77:17:19:36:CD:FE:05
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:61:2e:87:ac:8b:09:dc:7e:da:f8:b4:77:29:79:76:e7:55:
79:db:09:ec:56:e5:1b:e1:48:ea:d4:53:b4:82:8f:ac:30:29:
f1:be:d2:58:1f:f1:f6:d3:e0:dc:b5:2a:14:26:f4:91:f2:0a:
fa:6a:41:b1:1a:f6:4a:50:57:2c:12:09:32:b2:f4:d2:ef:79:
15:35:64:ac:91:a5:55:be:05:c5:ef:d7:8b:87:d5:17:75:02:
24:59:21:0b:f2:5a:4a:f3:42:54:60:18:0b:ce:20:de:66:73:
e3:74:32:ec:65:c3:4f:23:7b:e4:85:ed:17:b1:c7:e7:db:93:
fe:17:2d:a6:2f:29:0f:c8:c9:ff:90:97:97:ae:3b:bf:b0:2c:
7f:d0:aa:05:ce:4a:46:ab:f7:d2:46:9f:6d:a1:62:bc:68:73:
27:41:06:c2:83:dc:3b:58:11:41:39:01:33:5f:0e:5c:4d:06:
14:47:03:f5:04:6f:f2:0a:fa:07:4d:8a:02:d3:57:3b:88:bf:
f0:6a:d0:9d:2b:6e:3c:9c:67:99:9f:11:ed:97:82:8b:ee:e3:
25:60:6a:ab:23:cf:fb:a0:aa:94:82:30:f5:eb:b1:30:76:d6:
a7:0a:f4:f8:82:bb:00:5f:61:7d:d4:79:24:41:0b:8d:cd:17:
49:f5:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:12:02 2025 by rpki-client