Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: HBoIVG1Bu9HjcEzSYeGIascLSPze4+wA/g5bviCRXHc=
Subject key identifier: 94:8B:45:39:A1:AB:8B:32:B7:AD:4A:B9:B1:B8:A1:04:89:3C:48:05
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 01976A731C1922F57D8B37BA9A7159698996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 01B0
Signing time: Fri 13 Jun 2025 18:00:18 +0000
Manifest this update: Fri 13 Jun 2025 18:00:18 +0000
Manifest next update: Sat 14 Jun 2025 18:00:18 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: GEKBHVzj5SsG7i9gvo8MMOg2q2kD8sB3uxjj4DAEPSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:1c:19:22:f5:7d:8b:37:ba:9a:71:59:69:89:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Jun 13 18:00:18 2025 GMT
Not After : Jun 14 18:00:18 2025 GMT
Subject: CN=948b4539a1ab8b32b7ad4ab9b1b8a104893c4805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:da:db:63:b0:0d:96:c0:42:6b:54:fc:f9:
ff:63:b6:10:06:95:31:25:6e:69:7a:d6:61:91:15:
14:34:57:8d:ff:d8:12:75:53:b2:1a:7d:8b:21:42:
48:7f:07:87:5c:8b:77:fe:b4:f5:39:56:10:d9:ac:
e7:8d:0c:fc:ce:8d:61:dc:eb:fb:72:db:10:eb:09:
98:85:ba:9d:33:a1:81:c2:22:de:14:90:20:11:41:
eb:61:b2:3f:fd:cb:c2:09:1d:e0:5a:65:f3:59:7f:
db:26:0e:76:86:a7:ab:e7:3b:e9:6a:a8:e7:21:d5:
76:3d:71:e9:6c:9f:3e:b4:ce:b6:57:7a:48:9c:c1:
fc:11:b2:6f:a5:ae:52:1b:55:67:da:bf:a4:af:52:
77:68:47:b2:80:d0:90:ec:4a:df:c9:92:0c:12:17:
f3:96:c7:0b:d0:6e:b1:1e:94:01:5e:22:44:cc:23:
8e:7c:5f:80:c0:3c:0f:e9:d2:ad:b6:99:64:19:e5:
fe:6a:68:26:3b:62:d4:3f:d0:a2:79:b9:d2:24:45:
12:19:04:3f:c8:57:bf:39:b6:89:2d:94:6e:4e:f5:
f0:b1:d3:c9:c5:f0:01:f4:d5:1c:6c:3d:92:41:a7:
27:ca:e9:87:de:c1:ab:98:1d:90:c6:fa:a5:63:12:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:45:39:A1:AB:8B:32:B7:AD:4A:B9:B1:B8:A1:04:89:3C:48:05
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c7:71:ac:0f:14:fe:d4:ac:3b:23:04:90:df:fc:a3:3b:65:
9f:41:1f:09:00:e0:76:b2:13:51:81:6c:5f:f3:a5:e3:4c:8d:
e5:ed:e9:c9:d0:f8:15:38:6b:01:56:40:e2:27:be:c4:a7:82:
26:53:76:25:cd:c3:ea:3c:bd:5f:83:50:41:fc:5f:44:a7:a9:
e0:a5:27:1f:8d:79:88:c3:31:ba:ff:d9:f4:5b:0c:6d:22:a0:
65:b6:f1:2e:9e:6e:31:49:c3:c7:cc:c2:b2:4e:74:7f:3d:8c:
5e:75:30:21:5f:1c:8d:de:b9:ff:98:ac:d9:28:97:ba:b1:e5:
e8:43:2a:5f:ec:8c:79:4c:d0:c9:d8:2e:13:54:de:68:3a:4d:
8f:a9:e6:fd:a4:d9:6b:20:e0:27:77:e0:22:77:1c:53:e9:e9:
98:97:78:bf:15:b1:ed:f6:86:8b:5a:c6:02:20:78:85:b9:c0:
2c:2a:f6:4d:0a:13:a6:6e:61:9e:a7:51:1b:01:3f:21:bf:f1:
ce:1a:ac:5b:7f:0f:ac:10:f8:f1:94:b5:f5:a1:78:eb:a1:7f:
bc:e3:1c:eb:e6:8c:28:81:49:1c:ce:8b:9b:de:51:10:b9:92:
a6:ba:e5:15:79:8f:82:00:6f:07:07:f9:0d:d2:45:03:a6:df:
05:96:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:51 2025 by rpki-client