Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: tZGCAGjW/RpsYDoZKAjdwa46KtsXBi/5Xadi4BbmUCs=
Subject key identifier: 90:BA:A1:C0:CA:DD:59:DF:B2:FC:0F:45:93:33:96:BB:C8:2C:0C:A9
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 01978734078E213DD2EE988C04F1ECE7C205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 0FA0
Signing time: Thu 19 Jun 2025 08:00:23 +0000
Manifest this update: Thu 19 Jun 2025 08:00:23 +0000
Manifest next update: Fri 20 Jun 2025 08:00:23 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: 7gZEdhNbVFCAFHIHkBxPixhGAAqILdWNLa579VDMghE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:07:8e:21:3d:d2:ee:98:8c:04:f1:ec:e7:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jun 19 08:00:23 2025 GMT
Not After : Jun 20 08:00:23 2025 GMT
Subject: CN=90baa1c0cadd59dfb2fc0f45933396bbc82c0ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cc:f4:e5:6e:c5:b6:a8:f0:a6:34:31:78:04:
37:18:c2:07:c9:35:e8:da:1a:ce:73:3a:4b:94:d5:
2c:64:4e:8f:2c:a5:3e:e8:a4:bc:67:ec:26:57:db:
f3:2d:b4:fe:a0:1c:01:35:20:7a:c1:a8:89:d3:d9:
87:9b:61:09:c6:91:49:b0:df:55:03:9b:4e:6a:84:
40:bd:ac:51:1c:0c:c4:12:70:e1:0f:87:52:22:6c:
b4:77:ea:08:b2:97:f4:1e:f8:25:c2:e1:81:99:53:
18:37:d8:a4:d0:9d:75:b4:94:a3:14:0a:ba:8b:8b:
dd:d3:b0:d8:a4:c4:34:bb:7c:de:b6:67:71:7e:39:
9e:e0:f4:1f:ae:27:c8:c6:ae:21:9b:f5:34:fd:62:
c2:72:f7:0d:ec:98:a7:45:cc:32:5d:df:35:f2:67:
d8:0b:6f:11:c0:81:ea:48:ed:81:50:76:f4:12:b5:
44:e7:37:cf:a9:46:db:17:e7:03:b4:91:fe:74:25:
53:b8:b8:f6:bf:b8:43:e2:c5:19:ad:a7:eb:fb:8f:
81:04:69:d2:f1:a1:91:55:51:df:43:4e:b5:e8:6a:
65:7a:39:cd:15:e3:d5:d0:b6:c8:82:a9:82:a8:24:
d5:86:1e:85:86:89:4e:5e:9e:18:b2:29:01:b5:fb:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BA:A1:C0:CA:DD:59:DF:B2:FC:0F:45:93:33:96:BB:C8:2C:0C:A9
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:54:f9:44:d0:04:3a:91:71:41:23:4e:4a:97:3a:a8:85:15:
9b:53:36:e1:3f:51:67:71:8f:48:02:7f:a3:35:c9:29:72:13:
ae:b1:1a:5c:43:b8:6e:b0:af:2e:c8:f0:a1:a7:bc:87:a1:3e:
ed:c7:2a:25:1d:26:82:b3:3e:94:97:2d:18:ac:d8:94:3c:e2:
61:ea:f3:3e:98:4b:2f:8c:7b:31:46:4c:bf:27:07:8b:ee:39:
2d:59:e6:50:bc:51:07:26:15:ae:bb:ca:b5:1f:c9:63:25:aa:
8b:b5:7c:b1:9b:9b:1e:73:e1:a5:62:a1:12:43:72:4a:99:f4:
08:6c:0c:d6:94:3e:1b:f1:cb:f7:fe:9c:1b:19:77:8e:2a:7c:
0f:6e:83:48:cb:76:69:1e:2e:c1:fa:a1:7e:f5:c7:d3:a2:e6:
c6:44:7c:29:54:75:d2:21:46:60:af:5b:20:01:7b:69:d6:43:
97:4a:be:3f:7c:e3:c1:8f:e6:f6:e5:de:1c:5a:a8:2b:9a:14:
72:db:6f:ad:2c:b4:ec:0e:a9:a5:c0:02:08:bb:f7:ba:fb:81:
11:94:00:73:b5:82:17:55:6e:60:e1:c2:bf:83:27:46:54:03:
87:d9:85:93:4a:03:d4:db:33:88:cd:b2:01:60:47:01:86:ac:
c9:9a:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:08:44 2025 by rpki-client