Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: 2SEDSWGESC9iRWW6eEqUBW7TJa3083CF8LExli3LVxI=
Subject key identifier: F9:8B:59:D5:B7:3E:DA:56:7E:40:B6:E4:8C:8C:46:B8:DC:02:28:59
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 0197703EBE571736F6F05EDFADC0FD05B463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 1565
Signing time: Sat 14 Jun 2025 21:00:49 +0000
Manifest this update: Sat 14 Jun 2025 21:00:49 +0000
Manifest next update: Sun 15 Jun 2025 21:00:49 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: ckRTLud+jwrOptvkCievFUJmalUJjd7XpL0upokqiEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:be:57:17:36:f6:f0:5e:df:ad:c0:fd:05:b4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Jun 14 21:00:49 2025 GMT
Not After : Jun 15 21:00:49 2025 GMT
Subject: CN=f98b59d5b73eda567e40b6e48c8c46b8dc022859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:ce:dc:ca:90:74:2c:96:6b:05:04:86:da:
a1:60:cc:31:5c:27:7a:62:a8:ae:21:7f:d9:39:9c:
e4:d6:da:b8:66:fc:f0:72:3c:70:8d:1d:90:51:0c:
00:b2:62:c3:e2:55:6d:37:fb:0e:bd:e1:e3:f3:8b:
cd:28:ab:5b:0d:0d:93:98:4d:08:3c:5f:16:fc:f9:
56:1c:c5:0e:4f:4e:6e:a8:c4:5c:f0:5b:f6:e3:50:
32:41:15:80:56:46:42:15:4b:68:e2:73:c3:fc:58:
00:fb:18:6c:a1:f9:c8:0a:f2:ef:08:f9:f3:cb:39:
c0:31:c9:d0:48:8e:03:a7:71:8d:ea:df:db:0f:eb:
f2:5d:d9:4b:4d:3d:ed:31:2b:2f:dc:4b:3b:3c:21:
c6:28:10:c8:8c:14:28:57:4c:52:c6:ef:43:3e:43:
ee:2a:9f:88:e7:41:ec:40:f5:7e:29:63:5e:11:e9:
c9:76:f9:7f:71:eb:86:db:bb:76:97:72:71:80:76:
cd:b9:fd:c4:97:e3:37:42:7a:6f:e7:9b:e0:81:04:
a9:e4:e1:99:3a:99:31:b0:88:42:72:3a:73:26:a8:
5e:7a:7e:64:fa:ac:b8:4f:6a:b3:e2:b7:03:42:ed:
24:1b:6a:2c:fb:11:79:26:9b:92:a2:b5:a5:96:97:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:59:D5:B7:3E:DA:56:7E:40:B6:E4:8C:8C:46:B8:DC:02:28:59
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:43:89:1f:bf:48:5a:1e:18:09:f8:e0:fd:e9:22:ce:40:2c:
16:9d:38:d7:da:d8:25:2a:8c:d5:11:f5:2b:2f:ec:e3:50:9d:
6b:34:7a:0e:af:bf:dc:48:70:50:bc:2a:c3:05:c8:00:db:ed:
df:da:31:b9:c8:e7:27:2b:0c:e1:5b:5f:54:55:3a:07:d4:d3:
63:10:0a:bf:32:2c:03:15:0c:bf:bc:f2:43:7d:e8:1a:92:1d:
e5:19:0b:1f:9c:6d:89:5b:6c:62:81:05:46:14:3a:f5:6a:72:
67:52:f1:19:21:2a:2d:4a:da:ec:18:67:1e:ca:a2:e4:fc:60:
f1:44:05:d1:ed:c7:14:45:64:e9:03:19:1f:73:e7:ca:54:4a:
b6:2d:44:4e:11:c2:47:c0:44:5c:be:ec:9d:31:6f:a8:c8:42:
4f:b2:83:75:45:8e:d0:fd:88:d1:7b:47:1b:36:76:24:da:44:
91:bb:3f:81:ac:d6:62:85:c2:a0:b5:b9:8f:a0:18:ec:58:f8:
ff:07:b5:d5:44:eb:46:6d:a8:0a:86:40:86:d3:4f:63:50:53:
13:11:83:a1:20:a4:1c:c6:f4:44:25:4c:d1:c3:9a:80:af:47:
56:8f:f6:36:85:4e:8d:ae:fb:22:63:30:c2:b7:2e:7a:15:cd:
63:71:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:57:37 2025 by rpki-client