Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: YsLnum7jE1lPTm+EChSZo+QmnEhJUaNAP5R7lPL9pTY=
Subject key identifier: 72:CE:A9:81:82:B9:0C:EF:BD:5E:D9:15:75:9C:0A:3A:D1:F8:A3:7E
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 01976CCFBDE08D5B4E1CCCB55F42C8F7B67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 07A2
Signing time: Sat 14 Jun 2025 05:00:43 +0000
Manifest this update: Sat 14 Jun 2025 05:00:43 +0000
Manifest next update: Sun 15 Jun 2025 05:00:43 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: tbOT0mdC1pWfufFHVGlZW2x130xokr5U1tejVHEH5PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:bd:e0:8d:5b:4e:1c:cc:b5:5f:42:c8:f7:b6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Jun 14 05:00:43 2025 GMT
Not After : Jun 15 05:00:43 2025 GMT
Subject: CN=72cea98182b90cefbd5ed915759c0a3ad1f8a37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:31:5f:1e:62:8b:a2:9d:7b:a3:e2:7d:24:
59:f2:bd:0e:f4:38:1e:52:95:fe:d2:40:33:3b:a6:
09:7e:53:aa:a3:05:29:3f:75:63:15:ca:b2:a0:e1:
bc:a9:09:2f:9b:68:51:11:3a:7d:fa:e3:88:70:f5:
98:d5:7b:ea:d6:c3:76:a8:bf:a7:5a:b6:a2:91:76:
ff:da:53:2d:18:d7:a5:e8:bb:f8:e2:35:59:f7:07:
70:01:88:df:72:b1:83:22:7e:69:3b:5f:22:a6:6d:
43:b6:26:bf:9f:e9:77:96:06:ca:35:a7:2c:c1:d5:
8c:35:39:b8:f6:09:9d:1b:2e:e4:aa:04:50:40:d8:
91:c8:8c:b4:b1:18:4e:ac:36:76:dd:4f:81:93:96:
34:57:17:dd:83:64:f5:a6:28:1a:ae:c6:a2:7d:a9:
6b:1b:be:e4:9f:2a:90:96:db:e5:e8:2c:f7:37:11:
68:96:b8:ef:9e:ac:a1:b4:8c:57:a4:86:13:c0:b1:
68:c8:de:ba:8d:a8:65:ad:c6:31:81:0b:15:58:61:
c6:ea:ee:e3:32:85:ea:9a:29:da:2d:33:f9:a6:96:
e1:21:be:f6:9a:c8:41:54:a9:ab:d6:a4:95:7a:87:
81:63:28:73:e8:4a:9f:0c:1a:3a:c2:c0:38:2f:2a:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:A9:81:82:B9:0C:EF:BD:5E:D9:15:75:9C:0A:3A:D1:F8:A3:7E
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:65:0f:1f:6e:83:83:a8:3c:d5:e7:cc:46:4a:dc:81:13:86:
00:32:08:4a:8c:1a:6d:b3:e1:13:72:6a:9d:32:69:aa:ae:43:
a2:df:a1:50:05:91:5b:3d:fa:90:0b:8b:6d:cd:e0:17:e3:6d:
33:be:8a:a4:48:e3:19:f0:66:e5:48:ef:83:19:54:98:2a:34:
6d:d0:99:e2:52:9a:61:06:a8:34:8e:9a:78:aa:08:48:ea:6f:
cc:b1:9c:e7:d9:f2:3f:61:f9:66:6c:7b:25:49:05:7b:0a:c2:
0a:de:b0:8c:f6:bb:36:e4:09:24:be:3b:ab:b5:40:44:79:ca:
52:e9:93:11:1b:ce:5b:e2:85:f6:64:42:94:f3:4a:d2:fb:c8:
f3:77:a7:c5:34:ab:04:d2:26:13:1b:75:e0:10:82:96:ef:a0:
14:da:13:1b:57:32:b7:29:a0:72:ae:61:24:cb:bd:fa:43:12:
c7:7d:dd:22:4c:f9:ed:4e:26:5e:a2:bb:73:bc:55:be:39:0e:
99:33:9b:2a:cd:62:a5:7d:52:56:ac:f6:8a:1c:86:33:b3:f3:
15:be:c4:f2:23:eb:58:2a:b4:4b:2d:71:98:4b:5b:5c:5c:3f:
ce:ce:8e:ec:40:19:f0:23:57:aa:e4:c9:bb:12:b0:ad:a2:4e:
a6:20:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:53 2025 by rpki-client