Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: TzOYMy/F8nnsffLTF/Lu/9apiSgK5DamDpc5sY36o/I=
Subject key identifier: C7:E7:FF:B0:31:4F:5E:E8:97:8A:CF:C9:59:FF:A8:CE:4A:3E:95:0E
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019771881ECA50F5C62CC54F5E9DF8DEC63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 159B
Signing time: Sun 15 Jun 2025 03:00:35 +0000
Manifest this update: Sun 15 Jun 2025 03:00:35 +0000
Manifest next update: Mon 16 Jun 2025 03:00:35 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: 8EmqhbKCK9kDxGcqh0EW4PGj2mMFGWNgdn1HABFOD/E=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:1e:ca:50:f5:c6:2c:c5:4f:5e:9d:f8:de:c6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jun 15 03:00:35 2025 GMT
Not After : Jun 16 03:00:35 2025 GMT
Subject: CN=c7e7ffb0314f5ee8978acfc959ffa8ce4a3e950e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:85:b0:f2:8c:c0:71:93:a0:97:de:06:0e:
f6:53:d8:ee:91:11:58:75:e9:aa:bf:ef:70:50:dc:
f2:a8:65:17:c8:f7:a7:9b:de:b1:63:4c:88:5b:7a:
52:79:b1:36:90:11:9c:24:3d:ef:44:a7:00:42:64:
6b:4e:3a:16:86:3d:49:53:a7:6e:ae:e3:f8:a0:9c:
5d:5c:6d:9a:5f:68:39:ba:df:b0:91:d9:cc:25:e6:
96:67:7d:b6:be:10:50:15:9e:f2:33:64:24:3b:44:
cf:20:b3:dc:44:2c:98:56:f0:5a:51:63:7e:dd:ef:
b4:de:06:6a:2c:b8:f9:ca:15:ce:3b:1d:04:65:79:
0a:70:8a:1e:01:c0:f2:f3:2e:a6:91:31:a4:f6:3a:
01:f7:e3:6f:9a:1c:8a:15:f4:85:63:d5:1d:39:56:
b6:aa:7b:3e:46:b3:5b:84:f0:63:a6:27:16:13:5e:
f7:96:5f:93:13:af:88:57:16:2b:cd:fc:a7:90:39:
07:ec:46:9e:92:d6:da:ab:8d:de:ed:25:5b:58:65:
ae:d7:a5:1a:d5:53:05:55:94:82:f3:62:fc:40:02:
f5:4a:1b:be:cf:18:bb:6d:4c:6b:4e:36:9e:62:a6:
e5:a6:28:42:05:cb:d6:f9:09:ba:c0:a1:e2:58:a7:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:FF:B0:31:4F:5E:E8:97:8A:CF:C9:59:FF:A8:CE:4A:3E:95:0E
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:68:65:d3:43:97:83:2a:98:5f:d9:b4:1e:28:c2:a3:51:d2:
bd:d9:ca:9d:4c:7b:cb:ad:8b:f0:bd:4a:11:93:9c:05:c0:f6:
7f:19:1f:c0:e4:5d:a6:60:30:ec:cc:91:16:e8:f6:6b:59:9b:
e9:b8:01:74:bc:52:7f:2f:71:8b:99:64:0a:fc:a9:b2:dd:68:
19:ce:c3:4b:a1:53:e5:92:98:ee:e2:49:e8:b6:c2:0e:3d:f2:
0a:6e:0e:50:21:b3:f9:d5:66:e0:27:25:1a:35:af:33:e6:d3:
3a:1b:52:c5:c5:4a:0e:4d:38:9b:95:08:ba:33:60:11:9a:93:
a5:78:0d:fc:af:36:11:ad:61:73:58:8a:19:ff:c0:47:42:85:
a2:1c:6c:02:9f:1c:1d:eb:bd:e8:bc:c5:93:e5:b6:d0:27:31:
46:d2:b0:14:0a:ea:2e:c8:1e:f1:68:e3:33:02:2b:cf:a8:60:
53:7b:4e:e3:19:e3:f2:44:b8:3e:53:aa:35:54:29:21:95:e1:
f7:f3:03:11:29:f9:20:8b:31:1e:78:92:76:dc:33:0a:66:f0:
9c:7b:3c:97:6c:24:4a:75:6c:f9:41:7d:97:70:82:5d:e1:d4:
b4:76:85:5d:01:c6:b8:77:fb:92:1d:19:ab:49:29:c6:2d:58:
25:fe:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:01 2025 by rpki-client