Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
File: H9e7sd5oCd9_blc_mrtk5gNhPKE.mft (raw, json)
Hash identifier: wks/hlP3rRfdkKyVHYzT6wca6iEonU392SFaTj0+o00=
Subject key identifier: C8:05:05:51:E8:52:3E:E0:02:0C:2A:AF:0B:72:24:10:A4:10:6C:2D
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Certificate issuer: /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial: 01976997A76B940BB9699680A07D4E338581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 14:00:35 +0000
Manifest this update: Fri 13 Jun 2025 14:00:35 +0000
Manifest next update: Sat 14 Jun 2025 14:00:35 +0000
Files and hashes: 1: H9e7sd5oCd9_blc_mrtk5gNhPKE.crl (hash: idRnr+Sx+t/Qsd1kOTDQPec5degbLM3UUSfuFwC8vjc=)
2: hOjqFzmwDn3h8aF0jh7_FXo9ReI.roa (hash: CNoH2a1MzUmjFlMi/+aHXlooSM/YD9l7gB33O/u52sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:a7:6b:94:0b:b9:69:96:80:a0:7d:4e:33:85:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Validity
Not Before: Jun 13 14:00:35 2025 GMT
Not After : Jun 14 14:00:35 2025 GMT
Subject: CN=c8050551e8523ee0020c2aaf0b722410a4106c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:37:8b:d2:6b:40:37:27:7a:38:1d:94:e7:
e0:07:da:e5:35:83:8a:99:a1:b3:6b:57:7a:06:6a:
81:6e:a4:7e:c1:23:f6:8d:4c:4d:07:cf:c1:72:4a:
64:94:83:f1:c9:bb:da:fe:64:b7:fa:ab:e1:c0:71:
bd:f1:06:09:62:f4:5e:0d:ce:ba:70:df:84:18:8f:
08:e4:07:dd:49:df:c0:0c:7f:f4:24:e5:df:09:b4:
ee:3a:40:33:ec:f0:39:b4:8d:0c:d7:e3:97:c3:d8:
18:31:f4:8e:1c:f1:ea:69:e2:bf:f1:eb:38:f1:f3:
c8:30:79:c2:c5:0a:ee:cd:9b:9c:31:60:48:b5:a8:
1a:fb:2f:34:26:93:97:30:ed:21:2e:1e:0d:be:91:
93:08:2f:6f:23:d1:27:78:e6:75:9d:2b:d1:96:e9:
ac:57:b1:84:ee:9b:ec:ca:76:95:22:b0:5c:b4:72:
34:a4:77:95:b1:20:d1:5a:44:90:e2:f9:77:5f:ce:
0d:65:a3:9e:4d:b8:7c:3f:e1:f2:24:a1:c2:4d:4d:
35:16:41:57:17:13:bd:75:ae:73:4b:cb:5e:eb:dd:
b6:81:32:67:59:f8:0d:ac:74:5c:78:4f:fd:9f:63:
38:e5:83:9d:90:9b:1b:33:49:9c:ed:60:43:ec:0e:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:05:51:E8:52:3E:E0:02:0C:2A:AF:0B:72:24:10:A4:10:6C:2D
X509v3 Authority Key Identifier:
keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:9d:f4:aa:c2:57:4a:90:09:3a:e7:c7:3d:85:51:18:1b:
f9:19:94:3b:a4:50:6a:9b:79:f8:a2:57:69:7b:51:e2:3c:c6:
32:10:d5:95:ae:b6:7f:45:ab:fc:49:88:23:8f:15:39:8c:4b:
16:c4:3c:27:a5:c8:87:d6:4a:7e:50:87:c8:41:dd:78:05:c4:
bd:a3:0f:e3:eb:27:70:1d:5d:e0:ac:f3:ea:64:c3:f3:b7:1a:
18:82:b3:5d:3e:6c:44:5a:fa:d7:50:0c:a5:56:15:ca:fd:e0:
77:bb:78:ae:03:a8:05:48:68:6f:94:48:e2:61:9d:4a:a8:80:
e4:6a:1d:07:fa:62:0c:15:8c:7e:51:d0:dd:55:b8:79:26:10:
da:a4:3e:f9:5d:09:a5:44:ca:02:89:14:30:30:76:2c:ea:03:
58:cf:6c:cb:ea:8f:9c:a6:2d:33:4c:22:f0:17:97:df:25:23:
6a:11:08:ea:90:80:e1:3d:81:51:d3:d7:d3:3d:2d:f1:13:ae:
53:4f:d5:6b:36:3b:7d:29:74:21:ea:22:8d:69:7c:49:60:1a:
d7:5d:87:92:e6:3d:f3:f3:28:3b:a8:77:e9:87:36:c5:c0:14:
c6:46:b1:c1:13:1f:39:c2:d3:cd:2b:bc:fb:f2:eb:66:37:1a:
02:f9:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:21 2025 by rpki-client