Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: qbHad4y6e/KHX56zc12zuOUj7hhhV51p1CbzmwUemaU=
Subject key identifier: 82:DD:44:BF:36:6A:FD:82:B1:B7:EA:04:59:E5:D7:82:58:62:A9:4C
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 01976C2AB8CE56D2ECFE9965B210899B9936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 040A
Signing time: Sat 14 Jun 2025 02:00:28 +0000
Manifest this update: Sat 14 Jun 2025 02:00:28 +0000
Manifest next update: Sun 15 Jun 2025 02:00:28 +0000
Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: DpxDJZtm6fjx0VWxOW2/va2qqby5kzyxHPNJlA8D/gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:b8:ce:56:d2:ec:fe:99:65:b2:10:89:9b:99:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Jun 14 02:00:28 2025 GMT
Not After : Jun 15 02:00:28 2025 GMT
Subject: CN=82dd44bf366afd82b1b7ea0459e5d7825862a94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:e5:80:0e:b6:91:24:f8:8b:69:9e:c3:35:
51:f7:09:b9:2b:e4:45:24:20:c1:fd:20:88:87:05:
8f:ab:b0:89:b1:d8:95:8b:28:44:fc:6a:72:65:cf:
1b:58:f3:62:ba:10:f5:de:09:5b:a8:5b:85:79:76:
ba:3e:39:82:60:14:07:d7:bb:1a:7e:50:be:6b:e1:
ac:2f:dd:9e:a3:bb:2c:3e:81:27:78:ff:35:32:7c:
ed:68:2b:b4:1f:ec:6d:dc:ea:07:7a:4f:bb:ee:bb:
de:34:0a:b2:3c:90:f0:13:41:72:ee:d0:a7:d0:74:
b1:c6:be:f8:7e:43:63:28:f0:7a:48:48:97:dc:96:
7e:e9:4e:11:59:fc:4a:bd:59:8e:23:28:86:a9:06:
8b:67:6b:b1:d5:48:cc:be:82:c1:17:ed:e6:b9:15:
f2:39:97:af:c4:8b:0c:74:70:60:fc:6c:ce:42:33:
15:aa:95:7b:42:a0:47:ba:cf:6d:8c:00:56:9c:a3:
80:33:24:9e:cd:c2:9c:0b:ba:84:08:2b:dd:91:a9:
f0:58:51:10:1a:5e:96:27:fd:b9:6f:9b:ad:d0:f7:
5e:f9:55:cf:91:3e:01:2c:58:d3:b6:60:d3:ff:bf:
e1:b4:9a:d7:1c:46:e8:f1:0d:1d:9b:67:62:b5:a3:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DD:44:BF:36:6A:FD:82:B1:B7:EA:04:59:E5:D7:82:58:62:A9:4C
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:73:97:eb:bd:45:0f:b0:b7:8b:01:1a:25:4a:ef:7f:b6:f7:
a8:93:2c:52:c2:ef:3e:73:4a:4b:e4:f0:3b:8c:8c:82:90:f9:
ec:60:d2:55:59:4b:94:5d:c2:94:31:5a:28:18:d8:9d:a6:6a:
93:29:2d:fe:c6:aa:08:d5:2d:15:c3:00:b3:26:41:22:7f:bc:
17:3d:57:d1:9e:b4:a3:a5:35:0c:b2:30:51:6a:c2:3f:a5:a2:
36:a3:ab:a3:9c:0a:d5:9a:48:16:bd:01:41:fe:2e:53:2c:eb:
a8:85:a3:f1:01:f0:fb:86:81:7a:b8:5c:fc:57:73:5c:54:83:
e0:c1:5b:36:1b:9c:4d:7a:e2:eb:2b:28:86:cb:44:98:e8:fd:
f5:fe:20:2b:95:dd:71:68:36:b5:14:fe:3b:bb:e8:d4:ba:4d:
16:e5:b5:c6:c1:a2:73:e4:30:4b:3d:58:47:c1:7a:bb:21:92:
75:f9:3a:c1:38:22:c4:ca:01:9e:78:00:ec:6c:9a:2c:04:2c:
f5:c1:70:f8:b1:3f:5c:e8:7c:08:2f:a6:bd:cb:ad:06:e0:7a:
50:e4:c9:78:14:f8:e7:58:fc:9e:bf:d8:59:ec:33:71:8a:98:
d8:9b:60:11:36:e3:b5:fe:4b:31:f0:96:9b:ad:02:5c:67:83:
74:ba:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:19:33 2025 by rpki-client