Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: RbLOwfqYpEsAFZ/nnLbBJBfqsyvlVpnzOuo2k0BSAbI=
Subject key identifier: B3:31:7E:09:B3:A8:57:7D:F0:06:0C:66:2E:53:FB:F4:DF:5D:DE:EB
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 01976884D05C9BF017F1A51537EFA59F3453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 0654
Signing time: Fri 13 Jun 2025 09:00:23 +0000
Manifest this update: Fri 13 Jun 2025 09:00:23 +0000
Manifest next update: Sat 14 Jun 2025 09:00:23 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: N10Bz0cw7mpuXQddjSoNU7oP6U11ha449tUIyByhXQg=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:d0:5c:9b:f0:17:f1:a5:15:37:ef:a5:9f:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Jun 13 09:00:23 2025 GMT
Not After : Jun 14 09:00:23 2025 GMT
Subject: CN=b3317e09b3a8577df0060c662e53fbf4df5ddeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:86:ab:9c:97:c0:e2:b4:f9:ce:49:89:bd:
0a:4d:61:a7:ca:51:ed:9f:ea:ab:3a:61:3f:47:8b:
23:86:29:77:44:e1:97:a0:16:a9:2c:3d:84:15:e6:
c0:90:34:90:11:12:e0:5c:d9:a3:16:d8:57:3b:20:
d4:06:d1:79:ef:8f:46:81:5b:a6:19:bf:7c:eb:f9:
a3:5a:9c:c1:96:f8:90:6e:da:c1:68:2e:30:06:c7:
f7:5c:21:0d:80:c2:93:3f:aa:80:4b:53:f9:0a:a7:
46:ab:5b:50:6a:ed:60:16:49:f8:11:da:2b:ca:cf:
c6:98:d6:66:6f:1f:ac:8d:a9:7e:45:c0:ad:01:29:
e2:18:53:f2:b1:f8:f6:02:4b:21:a5:de:2a:7d:de:
73:f8:3a:dc:0e:a7:39:d4:20:b9:1f:bf:25:69:ca:
95:66:de:16:55:5a:37:e5:27:81:2d:cf:f2:a6:5b:
21:c0:c8:b0:46:58:e8:b8:e1:ea:38:28:8a:7d:76:
6e:dc:d4:df:c2:86:b8:6a:fc:6c:e4:0a:b8:eb:6c:
21:02:d7:d2:cc:e9:37:92:ed:ed:d9:4f:33:89:f6:
74:8c:c5:a1:bb:da:63:a8:9e:f9:97:67:71:a3:c8:
17:04:e8:69:25:94:cc:df:24:d5:3e:c1:13:e4:d6:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:7E:09:B3:A8:57:7D:F0:06:0C:66:2E:53:FB:F4:DF:5D:DE:EB
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:d4:9d:e1:2b:ce:b7:c3:2b:e9:96:b6:59:ee:c1:aa:cf:
a5:7a:64:07:cd:0d:57:51:de:4f:dd:5a:6a:55:c3:2c:45:9f:
ba:cc:45:9c:d5:08:d5:b2:ba:c4:fa:d5:1c:b7:87:ac:f7:81:
bf:2b:21:43:3c:3d:9d:ec:1d:e0:24:e3:a3:84:ec:4c:91:f6:
42:a3:33:11:2f:77:f6:ea:36:60:e5:a3:57:28:21:fb:45:a7:
d3:e4:88:fe:f0:7f:ed:c1:d5:d8:51:f2:18:c2:d1:b6:8e:e0:
73:4e:7e:50:41:f2:9f:91:0e:e5:14:92:25:74:df:bf:ee:b7:
b0:d1:67:59:86:69:1c:c5:b9:ff:ca:58:d5:89:40:8d:53:d3:
a3:64:fd:d9:79:f6:35:f7:ad:4e:7b:73:f2:fd:0e:e1:9b:0e:
70:4f:bf:ec:22:a7:f0:8f:15:dc:9e:c6:70:f6:1c:1b:94:59:
d1:54:6d:dc:36:36:f8:59:f8:5c:e4:62:a0:5a:2d:ae:3c:ea:
f4:9b:0a:52:b2:e6:88:d8:65:26:31:76:7f:62:74:cb:c1:cf:
6e:28:bc:bc:c6:01:c9:07:91:0f:df:f0:1f:20:88:39:51:22:
fc:8a:07:f2:17:fc:01:11:d6:0c:21:10:5e:87:2f:9d:e9:e4:
d5:bf:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:24 2025 by rpki-client