Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: xBF+Z0hY40roXBEksOXbBRj/Pd8Lqw43STQ2XCWzdX8=
Subject key identifier: 8D:11:0D:48:CC:78:E7:12:F6:E9:F7:8F:41:8D:D7:AD:37:E0:46:E7
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019771F64328DD9824492B3093F8A0850AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 1247
Signing time: Sun 15 Jun 2025 05:00:53 +0000
Manifest this update: Sun 15 Jun 2025 05:00:53 +0000
Manifest next update: Mon 16 Jun 2025 05:00:53 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: 0Kk1UhMxYULXLsfXGOveb1xv+XqLuYRJOkf94/vyELk=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:43:28:dd:98:24:49:2b:30:93:f8:a0:85:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jun 15 05:00:53 2025 GMT
Not After : Jun 16 05:00:53 2025 GMT
Subject: CN=8d110d48cc78e712f6e9f78f418dd7ad37e046e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:65:4f:e3:17:d9:a6:de:3a:8c:9d:7b:f4:
dc:06:e1:13:6d:32:39:24:4a:67:34:a7:7f:1f:b4:
9b:eb:3a:74:db:30:fa:66:83:e4:f4:9f:df:aa:ef:
75:4e:16:f1:f0:77:73:4c:55:23:85:6b:f6:44:bc:
9e:7e:1f:e3:fe:f0:76:47:43:6e:85:51:1d:0b:3a:
ff:0c:4a:5a:5c:98:66:45:eb:f3:f1:ed:d2:18:1e:
de:d9:5f:ab:ee:9d:29:5f:4f:76:20:95:93:86:23:
0f:39:09:b5:86:4e:e3:e8:59:ec:bb:37:66:23:56:
56:c2:6b:66:31:f9:27:1f:7c:dc:c2:6a:c1:93:f7:
27:a5:d0:1c:01:1f:31:39:26:b5:5d:e1:41:38:44:
17:f0:bd:2c:40:b1:40:ce:d9:75:48:bd:dc:d3:42:
87:3b:39:12:74:5d:30:47:97:2f:1c:53:f6:3e:d8:
33:e3:6c:a8:36:8e:6a:32:ff:35:cd:df:72:8d:c7:
49:95:a0:df:8b:4f:d3:56:de:44:3e:dc:9b:ef:5b:
f3:b1:5f:b5:71:c8:63:bd:6f:73:10:a6:6e:97:9a:
0e:f8:b1:6f:05:1c:28:c2:f4:d0:de:7a:6a:4b:6f:
b2:59:56:f2:6a:08:38:59:0e:85:53:b9:46:3f:28:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:0D:48:CC:78:E7:12:F6:E9:F7:8F:41:8D:D7:AD:37:E0:46:E7
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:69:a5:7d:d3:97:b9:e3:50:5c:78:5f:6d:a4:01:67:3c:83:
29:c3:17:da:96:43:39:59:ef:5c:7c:5b:3b:8f:fa:30:06:81:
be:ae:fe:13:b9:95:16:4c:67:59:2f:63:84:f7:c7:bb:a4:89:
bd:72:21:ce:28:83:d8:44:dd:37:68:91:08:81:98:e5:30:4f:
bb:7b:c3:73:24:fc:a1:33:3d:0c:03:e8:ce:05:62:5d:8d:1d:
c4:4a:ae:91:7e:bd:29:48:c5:05:65:f1:f3:91:cd:4b:98:49:
09:18:58:3e:2c:cd:12:bf:64:17:3c:bc:5c:0d:f5:36:e6:e3:
bb:66:af:38:16:13:19:12:b0:a9:9b:d7:1f:22:9d:88:8f:07:
be:31:5b:15:80:c3:03:3e:6e:a6:94:50:c5:b2:68:54:45:0f:
fb:36:37:41:31:e9:69:9f:6c:4e:2e:9e:be:d5:1e:94:cc:b2:
f3:62:5e:11:0c:6d:40:99:3b:8d:40:c7:8c:d5:d8:6a:7b:57:
05:4d:e2:ae:93:87:45:0e:81:d5:41:94:ae:73:39:f2:c3:50:
44:01:8a:6d:3a:d5:03:e8:76:e9:c7:0f:3f:eb:a1:73:ca:16:
3f:87:ff:62:43:12:ac:f3:f0:a1:34:a5:3a:33:e0:6b:8a:1f:
af:b5:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:07 2025 by rpki-client