Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: etwR8XxpuNTCy0hD/wYJwzVKWO5N6wEs1Oyh8V27BG4=
Subject key identifier: 60:FD:B1:C1:01:81:24:EA:CD:80:D2:23:52:FA:86:6B:7E:0A:3F:C0
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019774F6FA4478E7661105FB2874F773C56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 08AB
Signing time: Sun 15 Jun 2025 19:00:32 +0000
Manifest this update: Sun 15 Jun 2025 19:00:32 +0000
Manifest next update: Mon 16 Jun 2025 19:00:32 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: BE8NBL/kZYLGeb6maVQMQtRWogCWX4sovKYSHVP5a5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f6:fa:44:78:e7:66:11:05:fb:28:74:f7:73:c5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jun 15 19:00:32 2025 GMT
Not After : Jun 16 19:00:32 2025 GMT
Subject: CN=60fdb1c1018124eacd80d22352fa866b7e0a3fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:b5:1f:31:31:e8:1a:af:e1:6a:55:38:0e:
a8:5d:fa:9c:44:fd:6e:e7:ca:0e:93:8c:54:67:42:
6e:ac:cd:f2:55:57:06:4f:cb:45:b0:87:a7:f1:09:
e5:9e:bf:fe:67:58:a9:26:b2:e8:6a:97:75:97:c0:
ab:37:53:bd:10:59:bc:25:8d:cf:b9:15:2b:88:10:
a8:d4:e8:7e:ff:c5:48:a5:12:0a:d1:b5:e2:05:e0:
f2:19:50:76:23:98:26:db:22:83:83:d3:16:7c:c0:
ca:76:ab:b4:0d:2a:b2:db:55:dc:b2:a7:aa:59:6b:
c6:23:9c:74:4c:df:20:68:cd:81:a7:53:04:04:eb:
08:5c:9e:fe:f6:be:25:ae:62:a7:14:d6:42:c1:f7:
12:84:e0:78:fe:8b:15:97:e1:8f:de:71:86:18:4e:
cc:1e:5e:56:33:17:08:55:24:bd:30:09:2a:93:a3:
02:66:f9:72:ef:54:c9:79:92:25:58:00:38:bb:c7:
73:f9:8f:12:e1:a2:13:e7:99:ce:9e:74:77:5c:d5:
97:e6:a0:0d:16:46:1c:c1:c5:3b:c8:86:80:8c:bc:
89:ad:10:91:4a:01:ab:00:20:2f:a9:f6:90:ae:12:
24:3e:6c:df:67:1f:1d:d9:96:26:02:d1:f8:7b:4b:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:B1:C1:01:81:24:EA:CD:80:D2:23:52:FA:86:6B:7E:0A:3F:C0
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:48:00:b8:31:58:3b:a2:05:0e:1c:87:a2:28:47:fc:58:4d:
1e:b7:e7:76:31:b8:16:8d:2c:78:75:74:89:94:bc:12:75:49:
f8:b4:f0:05:fb:7e:9c:d2:c5:dd:f6:03:46:8c:52:52:a2:bb:
ca:72:0b:7a:f1:47:81:e4:4b:eb:8d:39:62:ee:c4:42:24:77:
c7:45:2d:b5:e8:83:fb:df:29:28:4f:ad:0f:20:cd:a4:28:ca:
b5:b6:61:6c:cd:b1:66:bd:06:97:23:95:dd:45:7d:69:d2:f5:
ef:cc:5c:80:53:85:44:2e:bd:b5:e8:fc:ee:8a:34:66:87:14:
34:01:e6:6e:d1:26:66:38:da:5e:63:c2:61:65:00:13:dd:55:
4c:b9:b5:31:31:3d:33:33:30:c1:e2:45:b1:50:86:53:b8:22:
ee:77:ae:b7:70:a2:f4:96:d9:0e:4c:f1:15:72:57:42:f9:06:
f3:73:98:59:83:d7:db:11:12:e5:1d:95:07:fc:11:a3:50:c1:
c2:52:03:74:00:02:8a:36:c9:2a:e3:88:66:1e:a3:b1:32:41:
44:83:21:bf:37:94:00:b6:d7:34:8d:66:88:a6:62:f5:16:9b:
f9:8c:a1:4f:e7:d6:5a:93:57:b3:a0:88:17:68:6f:be:07:51:
50:b3:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:44 2025 by rpki-client