Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier: RmGvx6kfE6UTYeWbMpJxYVWpUoMJRiR/fPdie6qTpjQ=
Subject key identifier: A6:36:E9:3C:EF:D6:87:E3:19:D9:2E:5F:E1:A6:08:7B:6C:EF:92:5A
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial: 01978B47869F2126EABEE09F00B21F44447A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number: 159F
Signing time: Fri 20 Jun 2025 03:00:09 +0000
Manifest this update: Fri 20 Jun 2025 03:00:09 +0000
Manifest next update: Sat 21 Jun 2025 03:00:09 +0000
Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=)
2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: bIlp3FfKRY1NIIiFJwf6Y8Ta34KUVTO3Qf8hrlN8Tpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:47:86:9f:21:26:ea:be:e0:9f:00:b2:1f:44:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Validity
Not Before: Jun 20 03:00:09 2025 GMT
Not After : Jun 21 03:00:09 2025 GMT
Subject: CN=a636e93cefd687e319d92e5fe1a6087b6cef925a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:39:89:da:84:d9:9c:4d:20:5d:69:ab:8e:
59:3f:58:b3:df:db:03:73:00:47:21:d8:d4:a0:3f:
42:b1:aa:e1:04:08:39:f3:4c:f7:89:e7:12:45:e5:
e2:cc:37:67:be:32:d1:57:49:31:d0:30:f7:88:fd:
37:d0:92:52:7e:39:2f:9b:a8:8e:2f:65:05:b1:68:
c2:ec:02:b4:56:07:6b:ce:af:93:1a:46:8d:8f:2b:
32:c4:33:58:fd:35:eb:19:26:8d:14:83:9f:12:24:
6d:0e:2e:38:2d:4b:2a:2d:01:06:52:87:dc:36:27:
10:46:62:70:75:c2:a9:80:4a:7b:7d:37:31:06:54:
8b:a3:02:28:b4:70:93:0a:f4:3b:88:24:d6:88:87:
db:cb:a3:5c:54:22:f9:af:4c:44:4e:cb:ab:12:3c:
fd:b7:fa:40:88:2e:9e:76:fa:1d:54:31:ec:09:67:
a5:7c:78:ef:7a:b6:56:d7:ba:ba:49:81:df:f2:05:
98:43:b7:9d:22:f5:35:1d:74:e9:cc:78:9c:a8:4e:
f1:dc:77:6b:2b:9a:fa:6a:9b:e8:bc:96:1e:50:1b:
a6:5a:0e:1d:13:43:75:d7:2d:b6:ba:cd:e5:f6:c9:
14:ab:77:a3:e9:fd:c4:c5:9c:b3:03:98:fa:77:d7:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:36:E9:3C:EF:D6:87:E3:19:D9:2E:5F:E1:A6:08:7B:6C:EF:92:5A
X509v3 Authority Key Identifier:
keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b9:fc:a1:22:16:1d:e3:33:a3:00:14:b1:de:e4:2a:c0:52:
75:86:6c:c1:7a:46:5b:17:52:c9:12:74:7a:9d:c9:ba:cf:22:
9b:37:1e:70:a3:01:f5:95:5a:76:00:23:02:65:48:fa:ea:06:
cf:75:00:4b:76:4a:cc:c6:f8:0e:6a:01:2b:66:49:e0:4e:78:
57:0b:85:64:7f:34:c0:0b:34:0d:8b:d7:9f:ee:fa:e7:42:86:
12:71:21:6f:37:d9:b5:c3:2f:33:48:d9:9b:91:94:5f:c6:dc:
dd:55:3c:98:8d:aa:ad:21:c7:09:0b:75:f8:ea:4b:10:b1:26:
7f:12:ed:a9:89:e7:78:44:21:78:06:a2:da:40:a7:c7:ef:6b:
0a:14:74:7c:f6:bc:1e:8a:9b:e9:a0:b9:4b:60:d3:3d:8b:10:
3f:6f:38:a6:b8:7d:3b:3c:42:ab:0d:75:26:89:90:94:7d:92:
67:57:cf:d3:8a:65:46:79:80:ee:38:f7:90:5b:df:ce:1f:4b:
b2:e4:2e:90:8b:60:46:c7:00:50:a2:a0:fb:33:57:d6:73:64:
75:8a:10:06:ac:49:1f:f9:13:96:47:66:a1:c2:4d:3e:98:a6:
ba:ad:e3:d7:ee:e6:63:d9:a3:89:62:c9:84:3d:62:6f:d2:1e:
83:a0:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 04:58:54 2025 by rpki-client