Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: K9XwPYhwt8JkHiQ5547jry10Ic37Ze2MUn4B/PAIhhI=
Subject key identifier: 20:12:4D:49:E5:A0:81:5E:B8:5D:BF:01:6A:CD:82:50:F6:8C:58:37
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01977007AF0B7E6F64A42AD0E40964D48751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0B07
Signing time: Sat 14 Jun 2025 20:00:41 +0000
Manifest this update: Sat 14 Jun 2025 20:00:41 +0000
Manifest next update: Sun 15 Jun 2025 20:00:41 +0000
Files and hashes: 1: KNngLPUEeJfGeGvW_sjNLwrjlmo.roa (hash: VdgpRYVhUpsamPtzdnV+HbncE6iEYGQS6JyumMp2yn8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: 8homOvfmhRg8qcJh5Y93IXNuWnmst3lKH/k3KTk9NsE=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: aJuKlK4Eyd-5-SWqzCamWBjJAOA.roa (hash: JqxrD9CIJNSFvb9h8lx5ybgaqxfxBBfuz3mHyoez/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:af:0b:7e:6f:64:a4:2a:d0:e4:09:64:d4:87:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jun 14 20:00:41 2025 GMT
Not After : Jun 15 20:00:41 2025 GMT
Subject: CN=20124d49e5a0815eb85dbf016acd8250f68c5837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:15:6b:80:00:6d:c3:30:97:25:aa:03:3e:
ce:2c:61:29:d5:df:3e:04:d0:e2:b9:8a:1c:af:35:
d3:8f:6e:3b:e9:0b:8b:5a:90:b1:93:3e:27:13:56:
8e:5d:bf:be:a5:80:73:de:4f:ce:6e:5f:0a:26:b7:
07:9a:da:67:f9:67:59:53:39:3f:55:23:e8:ee:79:
54:e7:41:94:6a:1d:92:9f:e4:85:a9:cf:24:0b:81:
74:e5:2c:cd:46:41:c1:74:85:51:d6:6f:68:dd:3a:
4e:87:f2:11:88:ce:f6:da:a6:28:5c:cf:6b:e4:e8:
df:a9:7f:30:a3:f6:9a:ee:93:3d:43:6a:72:07:0a:
64:98:6b:fa:20:82:3a:63:0d:37:fc:87:2a:e6:11:
7f:97:b7:63:f7:9c:18:bd:44:99:c8:65:e8:69:95:
f1:63:2c:10:11:e9:f1:86:01:c4:84:f1:64:8a:c8:
6b:48:76:78:47:9d:bd:19:9e:c8:bc:39:64:fd:27:
02:98:66:c7:29:a3:89:a9:e7:9e:bd:d1:57:36:c6:
58:2f:02:6c:e2:e9:2d:04:59:42:ab:41:5a:0f:f5:
93:2b:25:05:05:71:fd:f3:c6:31:5c:66:b9:ac:34:
9b:9d:d6:58:5b:a3:0a:3a:e6:ed:64:d5:14:91:9d:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:4D:49:E5:A0:81:5E:B8:5D:BF:01:6A:CD:82:50:F6:8C:58:37
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:25:37:2f:ea:4f:fd:59:fc:82:8f:a0:14:34:a7:ed:e3:d4:
63:26:72:ef:8b:67:f2:18:db:7c:2d:cb:4a:55:99:1e:8a:2e:
0e:e4:9c:72:be:ee:57:87:a4:b8:20:d9:10:06:49:da:85:68:
26:54:27:4a:e3:4d:ca:98:fb:0a:3f:ba:a2:5e:0d:cf:ba:80:
8e:cc:f4:2d:1b:21:07:44:ce:d6:23:5c:7c:65:c3:66:8a:0e:
76:a4:ea:36:fc:d3:d5:41:c6:9e:0e:65:8b:27:d7:53:86:50:
bd:9d:b1:3e:63:66:a9:97:57:c7:e8:2e:97:a0:7c:44:2b:3f:
3c:ce:a7:8f:ec:26:aa:24:56:d5:15:a3:32:0f:99:74:65:be:
5a:54:8c:26:e0:47:4c:8f:0f:d0:43:b7:97:cd:fc:4b:e7:dd:
f4:2b:ac:12:b3:c1:36:8b:42:0c:2b:8e:40:44:e5:55:b5:07:
0b:4a:35:32:4a:97:b3:72:86:7c:4f:f1:0d:11:7a:f8:5a:47:
c4:e0:48:8c:33:2e:1f:9d:f2:95:31:e5:46:d0:bf:7f:ec:ec:
ff:d0:8d:2b:e3:2d:bb:ca:3e:20:7f:eb:35:1d:a4:b5:1c:81:
6f:89:6c:04:67:8c:5f:ed:36:05:15:31:b5:77:96:f0:35:e9:
e2:ac:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:07:54 2025 by rpki-client