Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: aUIQGufD2RyfIWplhYOZO1BlTebeUITlCVU358ulyUk=
Subject key identifier: AD:82:DE:02:6F:A5:F7:FC:AE:A8:93:E1:51:A3:86:97:BA:5A:D7:7C
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 01977F0D1CD93658C4725618AC797A951B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 09A9
Signing time: Tue 17 Jun 2025 18:00:55 +0000
Manifest this update: Tue 17 Jun 2025 18:00:55 +0000
Manifest next update: Wed 18 Jun 2025 18:00:55 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: 1eZ/fAjx/CLrY6NeYIw6HKFIc8lVILzuYa4y6+ks0w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:1c:d9:36:58:c4:72:56:18:ac:79:7a:95:1b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Jun 17 18:00:55 2025 GMT
Not After : Jun 18 18:00:55 2025 GMT
Subject: CN=ad82de026fa5f7fcaea893e151a38697ba5ad77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:e3:49:50:66:36:ee:a7:77:a0:ac:d2:6b:
34:91:ee:f0:32:1f:61:31:b9:04:a4:ff:36:1a:7a:
bc:dd:c5:d7:8f:bd:2f:fe:cc:b7:cf:3e:df:23:08:
f1:09:3c:85:68:b5:ad:a4:dd:0b:86:9c:38:bd:d7:
cf:d9:03:a1:2a:a2:8b:af:0e:72:97:83:3c:a9:d3:
7a:ff:6f:a5:61:27:5d:2a:10:42:9b:a0:5d:d0:a0:
55:ff:c6:8f:27:bc:6a:c5:37:c4:8d:c6:14:37:bc:
25:77:df:68:fc:cc:1c:f8:f7:cd:98:45:4a:a5:0b:
c8:03:7f:a2:27:5f:6b:20:d8:2a:62:76:de:da:f7:
f1:16:5b:3b:4e:66:00:06:dd:12:ec:02:7e:f9:78:
b1:d0:4a:af:66:5f:94:23:24:b4:32:ec:c9:35:53:
9c:a3:aa:02:41:b4:5b:e1:60:97:30:66:9c:be:1a:
3b:8d:67:f7:5a:b4:56:4b:c5:2b:bc:83:be:92:c3:
08:00:c7:aa:98:21:0a:6f:c2:1d:6d:83:d3:74:b4:
16:7f:65:bf:74:a9:69:e8:5c:a5:1d:ce:ad:76:ee:
a3:c6:47:bf:ff:d2:9c:9e:18:11:21:09:0b:7b:4e:
d7:58:b0:d6:62:f3:41:51:7a:da:dc:f3:d0:53:b9:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:82:DE:02:6F:A5:F7:FC:AE:A8:93:E1:51:A3:86:97:BA:5A:D7:7C
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:08:23:38:cb:e6:96:a1:85:cb:e8:45:fb:3a:f9:0f:b1:bf:
cc:ac:cd:ee:11:fd:35:0c:81:d0:ed:d1:67:71:b5:87:ee:96:
3d:c2:1c:ed:4b:b5:7a:6c:4f:da:7c:c8:59:2f:38:c5:40:76:
da:9f:cd:da:33:a9:7d:88:ad:3e:45:6a:22:44:89:d5:d1:c8:
31:a3:fc:c7:6f:03:cd:45:ef:e7:d5:e3:e3:fe:5a:d6:34:65:
c2:7b:25:8f:50:a6:ab:ac:b7:14:e9:38:b5:ac:cb:7c:80:a8:
50:e0:20:e0:29:af:49:f1:d2:cc:cb:fa:6d:98:ba:4c:bc:74:
21:ad:de:f6:47:ea:fd:5a:12:77:1e:a5:00:64:35:60:b5:c7:
88:3f:38:e9:a6:43:de:71:f7:50:79:16:63:72:01:82:3b:5f:
7f:d9:67:0d:29:5b:b9:2e:86:25:dc:f6:9c:55:7f:12:93:01:
df:46:41:c3:fa:d9:d0:fd:d7:e4:09:03:9c:7c:92:4a:af:47:
03:01:3b:fe:05:5e:10:a9:22:98:17:5d:9b:60:29:3a:f1:18:
07:95:ae:5a:38:84:20:8e:0e:8b:2f:27:e9:f5:00:5f:c9:b7:
6f:04:f8:6c:8b:f5:54:48:7e:de:24:2e:ee:2c:bd:36:29:ab:
01:87:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:47:58 2025 by rpki-client