Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: z5vzYbnUNbX0/CupEXl/1YlSFD1tbH+z1rSyVoxA+KE=
Subject key identifier: 38:E6:A9:0B:0E:F2:F6:41:2C:FE:FC:50:A3:23:71:43:4F:80:2E:1B
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 019768F2E00342C3B99BC3D14234CD477F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 1593
Signing time: Fri 13 Jun 2025 11:00:36 +0000
Manifest this update: Fri 13 Jun 2025 11:00:36 +0000
Manifest next update: Sat 14 Jun 2025 11:00:36 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: XjScjBMD2X/Kfnx11W6c/t245hFR2Qa/ganuIpH9MgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:e0:03:42:c3:b9:9b:c3:d1:42:34:cd:47:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Jun 13 11:00:36 2025 GMT
Not After : Jun 14 11:00:36 2025 GMT
Subject: CN=38e6a90b0ef2f6412cfefc50a32371434f802e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:ac:08:5c:30:a1:70:4a:23:28:a0:17:cc:
d8:44:7f:4c:9a:75:af:54:b7:f1:49:0f:c8:73:29:
44:ce:23:46:b7:a7:a6:24:9b:23:8f:d0:b4:04:d9:
05:24:8c:9a:ce:ca:74:4f:5a:1e:d0:4d:0c:45:ee:
77:cd:d4:86:fd:cb:79:d1:d4:9d:e4:31:10:9d:40:
d0:8b:3d:74:ad:db:6e:98:f1:5f:2c:01:5f:0d:17:
6b:13:43:e3:ee:7a:5f:c8:cb:5f:c9:6e:6c:9b:3d:
cc:4c:ac:f1:37:30:71:9a:e3:90:ce:48:a4:de:48:
a3:6a:b2:6e:20:07:39:58:ae:a5:ec:cb:bf:16:05:
dd:2d:42:87:ee:e0:84:d2:40:d8:6f:ab:3c:d2:76:
fa:8e:f4:0b:a3:02:9b:3b:20:2f:09:7d:0f:0a:26:
11:a2:91:5a:49:06:2d:a4:d2:44:26:74:d5:09:97:
25:dc:60:49:3c:80:3a:57:fe:96:39:ac:ed:68:82:
e1:d7:d1:a6:43:35:de:c5:97:59:db:e7:55:07:98:
ac:81:c4:8e:52:56:18:9d:02:9e:2b:95:dc:9b:8b:
59:05:22:7c:46:49:d2:12:9e:1b:47:5f:00:8e:4b:
7e:49:ee:a8:f2:de:7d:7b:e6:62:47:30:c2:51:f8:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:A9:0B:0E:F2:F6:41:2C:FE:FC:50:A3:23:71:43:4F:80:2E:1B
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:40:48:7f:3f:cb:4d:a0:49:39:42:c0:d8:20:60:b3:ec:b3:
3e:4d:0b:da:c1:f1:58:9f:4e:bd:6b:d8:ca:d3:ec:7a:d8:66:
f7:26:b3:45:82:40:3c:d8:cd:aa:bd:5b:34:14:b4:c6:79:38:
da:f5:ef:7c:1b:1a:a9:41:b6:a9:80:54:50:12:f7:5f:51:8e:
de:e5:e6:f1:2f:f5:93:24:a3:62:08:23:7b:36:60:66:a8:4d:
df:c0:fc:1e:7e:e3:a4:a9:67:b6:91:38:d6:09:34:32:a3:c0:
77:a0:cd:a6:ef:56:be:54:78:72:6f:40:97:25:74:d4:85:74:
4f:09:21:2b:ae:5e:78:db:b0:78:2f:de:bf:18:3e:d1:b7:8c:
c1:4f:2c:91:48:84:96:83:a0:f2:e6:5a:e8:75:48:60:86:5a:
28:ef:e0:ae:80:62:6b:2a:28:86:a3:7a:5f:e1:89:8e:ab:1a:
e5:83:e9:27:43:cf:34:57:a3:17:db:32:9a:99:e8:69:4e:08:
b0:28:57:d5:49:67:d1:f3:0b:e3:2f:ad:19:34:ab:d3:be:d0:
5c:ff:67:2c:88:6d:7e:e9:60:d1:74:7d:59:15:1f:33:2b:04:
33:d4:f3:cf:a0:b2:84:1b:1e:38:c7:57:c3:d1:a2:dd:c2:85:
d2:09:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:56 2025 by rpki-client