Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: K36uP9KzP1opU4uTfsrknfd5E9m4sVbF7FidrPyG7Z8=
Subject key identifier: 94:2A:FB:2A:5D:E5:E8:75:7E:38:FC:03:59:99:EF:DD:78:29:DA:57
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 019779789E7CDD5E59DDB43152C1430DBB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 16:00:37 +0000
Manifest this update: Mon 16 Jun 2025 16:00:37 +0000
Manifest next update: Tue 17 Jun 2025 16:00:37 +0000
Files and hashes: 1: J2vDIE39ML2dQIioX-84LBq6-7M.roa (hash: 8kL6c8FUmTdyZfSSSH7csG9NWpaHPuGePFXhn8lYBjs=)
2: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: fNIZTYD8ekc6jiEr0gBqjjFuO0AhuySyZIIzqsxXm5k=)
4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:9e:7c:dd:5e:59:dd:b4:31:52:c1:43:0d:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Jun 16 16:00:37 2025 GMT
Not After : Jun 17 16:00:37 2025 GMT
Subject: CN=942afb2a5de5e8757e38fc035999efdd7829da57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:46:3d:a3:86:a5:72:b6:5b:d7:44:64:aa:
74:d6:c0:9f:b3:0a:77:0e:b3:a7:2f:03:fd:7f:b5:
3e:03:b8:e9:f1:59:5b:97:15:cd:59:5f:a0:7d:6c:
5f:9d:b9:6e:5e:6f:85:7a:88:4b:db:bc:db:a4:ea:
32:36:79:f0:a2:0c:84:28:a5:e2:f1:45:23:e2:ae:
7f:4e:2e:c6:8e:2d:32:a1:ca:b4:73:d5:cd:c2:7b:
62:05:3b:b8:cd:ff:f7:0b:14:aa:f3:ef:b6:fe:74:
8f:07:f8:d1:8a:af:b3:2d:05:f3:5c:f9:1a:67:77:
55:68:c5:69:80:6e:04:1d:a8:60:a3:ec:74:8e:bf:
40:66:f5:bc:c0:3a:3f:ab:39:56:e3:64:88:8e:b7:
a7:00:18:3a:3b:41:17:f5:dc:dd:c9:4e:08:5d:b6:
d5:08:aa:e9:7d:b7:a1:3c:4b:23:af:c3:a3:a4:14:
09:5c:c3:a5:e4:33:65:c8:0c:a1:f8:57:75:b8:6c:
8e:fa:6c:7d:af:52:5d:1b:79:d6:72:ff:d8:40:fc:
52:19:67:52:87:ae:f2:e7:9d:89:1c:26:ff:ce:b4:
f1:d6:ae:a6:4c:76:d2:71:23:16:f1:4e:00:9b:24:
c9:7c:1e:f8:bb:65:e3:33:58:6d:e8:43:15:66:8a:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2A:FB:2A:5D:E5:E8:75:7E:38:FC:03:59:99:EF:DD:78:29:DA:57
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:87:a1:d0:18:d9:96:73:fb:43:ab:ff:cc:67:1e:0a:12:
cd:14:cd:37:86:f0:ce:52:52:be:4e:d2:00:4f:87:f1:e9:d6:
b0:a7:eb:29:8c:39:10:0b:94:a2:77:b1:4c:f6:dc:01:47:43:
6d:8f:8d:b0:d4:78:84:88:32:2a:0d:d7:10:8e:d1:f8:8a:fe:
1b:bc:a7:56:19:de:05:97:28:37:07:4d:30:11:7a:4f:b3:b7:
80:cd:ca:5a:3e:27:3d:12:0a:24:53:98:cc:c3:00:54:35:d0:
b8:5f:47:e9:03:51:b0:24:02:3a:76:2d:e1:30:43:26:c4:8b:
01:40:67:a5:f3:4e:a4:b7:1f:66:8d:d2:1a:7b:33:50:73:fb:
0b:da:fd:5e:6c:c6:bf:a2:94:b0:cb:0c:8b:5f:20:59:35:cd:
76:0b:35:83:1f:08:ed:b0:bc:49:48:f6:90:bd:68:68:7f:be:
5d:55:4a:49:92:e6:f9:ea:0e:d0:f8:4a:e8:f0:d8:36:ef:3d:
98:32:3f:23:b6:f9:9f:57:e1:d5:c0:ee:87:32:a6:7e:35:d7:
1e:f1:53:28:7e:18:14:10:54:92:cf:6c:77:35:91:97:aa:7d:
e4:e3:7f:44:f9:70:c3:1c:a5:a2:ff:72:6e:30:af:5d:5f:5c:
8f:4d:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:08:23 2025 by rpki-client