Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: 8+7tC3cIKnn15zgpnpt75ChuiFyuFD9slo7232y36P4=
Subject key identifier: 17:5E:5A:56:26:57:8E:24:E6:16:35:06:15:86:DD:E1:68:72:4D:33
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 01976F2C80F71D0B5A9E2C0FD26F77DF76A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0ED8
Signing time: Sat 14 Jun 2025 16:01:16 +0000
Manifest this update: Sat 14 Jun 2025 16:01:16 +0000
Manifest next update: Sun 15 Jun 2025 16:01:16 +0000
Files and hashes: 1: Zj9lVIh8knr06HL6M68exsdyR78.roa (hash: DpNM17SY3ZBbdFnRbmny2u5MR4zgFSyDbmfcX50gqPI=)
2: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: JfYVBQH+hBUB8SiFWqvuEMW6KYj0PPeFqWnrYQxNdTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:80:f7:1d:0b:5a:9e:2c:0f:d2:6f:77:df:76:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jun 14 16:01:16 2025 GMT
Not After : Jun 15 16:01:16 2025 GMT
Subject: CN=175e5a5626578e24e61635061586dde168724d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5b:d9:14:49:65:ff:18:5d:11:fc:f0:e5:ed:
3f:d3:f5:05:67:64:06:b2:93:57:4f:a6:2e:60:57:
af:49:db:0f:f9:5c:08:93:17:e6:0e:d7:33:8c:32:
1a:fe:73:b5:be:a1:32:b0:33:94:49:2e:49:22:20:
63:55:1e:63:5b:a8:8f:b8:2f:07:57:f5:98:e1:71:
a7:01:9a:90:aa:a4:92:02:e5:7a:c3:70:ca:df:31:
c9:81:64:df:96:69:6a:eb:62:29:6d:09:f5:e7:fe:
3f:e4:2f:f1:22:af:08:81:d7:f6:18:0b:f2:01:1d:
79:7c:15:6c:ba:53:a9:8d:72:37:03:95:37:88:ac:
e3:3a:99:15:b6:92:a4:6e:b8:92:7d:60:d5:71:fb:
fd:fc:34:30:82:e8:8d:d8:5b:b8:b7:29:b0:a3:3a:
b8:84:aa:58:6d:51:c8:3c:13:ab:61:5c:ac:cc:88:
78:d3:8d:29:59:59:9a:e9:90:41:16:54:25:21:38:
5a:15:e0:11:9c:49:32:09:22:03:44:ec:15:bd:b6:
06:f5:86:e1:30:c3:46:95:5d:36:00:88:7c:ca:48:
e8:fe:43:49:90:38:b1:1c:38:38:12:4b:e5:cd:f4:
1e:45:72:50:69:a2:be:23:09:37:f2:57:04:bb:14:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5E:5A:56:26:57:8E:24:E6:16:35:06:15:86:DD:E1:68:72:4D:33
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:91:38:b6:2d:c8:13:2c:91:0c:63:7c:c4:e2:53:07:04:bd:
fd:d3:aa:d0:0a:4f:f4:1f:15:63:2a:be:cd:34:a0:57:a1:51:
a6:5d:a4:61:3f:8c:05:74:e4:b0:c1:6e:44:c9:d7:d6:8e:14:
b6:2b:b0:25:e7:da:ab:4f:ec:13:44:f4:e5:82:bf:d3:d8:10:
85:03:cf:f7:b8:3d:49:bd:8c:10:26:d3:8b:bd:78:78:7c:99:
81:50:0c:bd:28:e4:b6:56:9e:0f:0b:65:a4:ff:0f:5d:aa:ab:
67:c9:6a:38:c9:86:92:89:25:c1:55:21:b3:de:32:1e:cc:d6:
bc:13:e0:af:35:ae:27:ef:d8:62:60:fb:e0:83:43:fb:0c:20:
aa:b8:be:29:a6:19:32:d0:e6:53:60:16:0f:fa:80:40:59:a6:
82:75:c9:2c:16:08:e6:82:27:e7:eb:5d:c2:f8:e7:5a:88:28:
aa:4b:7e:82:d4:50:84:b0:c8:2b:98:0c:e3:06:d1:ae:eb:71:
99:3a:f2:47:73:f3:b5:af:cc:30:bf:68:6a:e9:12:0a:f2:0d:
2c:f4:99:6e:79:e0:0c:ec:01:b4:03:b4:6c:72:93:33:5e:b2:
3c:e8:f6:a8:cf:58:58:58:c6:fe:88:5a:d4:dc:1f:a5:b0:2d:
fa:c6:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:15:03 2025 by rpki-client