Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: K6hN/cftb9Z8lQcoRRloHV+VaKoPwXVo+qOMNo/8BDM=
Subject key identifier: 07:8A:59:B6:4F:32:38:04:16:B1:E3:BB:4A:73:B3:C5:A8:04:AF:80
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 0197903777ABEA5095C2724B3331B508E1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 0159
Signing time: Sat 21 Jun 2025 02:00:43 +0000
Manifest this update: Sat 21 Jun 2025 02:00:43 +0000
Manifest next update: Sun 22 Jun 2025 02:00:43 +0000
Files and hashes: 1: NwE-Q3U5NROLLw8YZo5SdVq6prU.roa (hash: 4nK8pCzkjFWGecL8LPoOkleHLxc20BBIlahc8LVNGkQ=)
2: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: t+aUkee/+a4Ba1icOqq2ljTLKFF61Ph6L1YKapyQl2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 19:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:37:77:ab:ea:50:95:c2:72:4b:33:31:b5:08:e1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Jun 21 02:00:43 2025 GMT
Not After : Jun 22 02:00:43 2025 GMT
Subject: CN=078a59b64f32380416b1e3bb4a73b3c5a804af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:1c:45:e7:15:bd:81:5d:6d:66:ec:0f:f9:
08:2c:63:00:14:7d:97:4f:7c:b7:82:90:b8:4b:1b:
a0:e6:76:e4:8f:6c:a0:61:1a:fd:68:77:65:64:83:
a1:60:17:84:cc:59:ee:78:22:4f:8b:db:5d:d6:6b:
74:d4:c4:72:d9:49:72:b2:0a:96:f7:e0:fc:43:da:
03:25:87:ba:de:2a:be:20:03:ca:b0:78:35:d3:e3:
34:89:df:76:40:c3:5b:ab:bf:46:ed:fc:e5:55:34:
b5:a5:6b:e3:8e:1c:f1:6e:8e:f4:88:02:50:62:1c:
89:e8:52:07:a2:90:15:14:38:52:04:e2:3a:f0:31:
00:d8:fd:7e:a0:9f:61:65:9f:cf:24:bc:a3:53:eb:
e6:83:b2:c2:61:93:1b:63:e0:b7:8e:6e:0b:76:c8:
fc:03:4a:8b:9f:a4:b7:4d:2e:1d:1d:2c:fe:dc:0d:
06:ae:fa:25:16:e6:0b:c7:d2:00:a2:eb:e3:4f:10:
19:5f:1d:84:b4:a0:88:86:07:09:2a:e3:f6:f3:ca:
a3:9d:e0:a9:83:16:52:e1:f1:23:ba:ab:50:fa:d7:
56:e3:e2:5b:da:24:91:62:e5:9f:3a:04:7d:67:33:
68:a4:78:10:43:7c:a7:5d:96:e3:32:01:8d:72:9a:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8A:59:B6:4F:32:38:04:16:B1:E3:BB:4A:73:B3:C5:A8:04:AF:80
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9f:c6:4c:4f:2d:37:7b:85:9a:12:2d:4a:20:d0:5b:19:1a:
5d:58:7c:fd:fc:c1:33:3f:51:8a:d6:57:ab:6b:a0:cb:c2:6c:
92:81:28:26:f2:ff:15:30:30:7c:35:8d:ce:5e:ed:95:03:b5:
e2:d9:51:29:e9:ff:60:ba:81:bb:cf:2b:6e:34:5f:fb:41:bf:
fa:51:79:89:bf:4f:3e:e0:b7:bf:fc:70:fe:aa:68:da:7d:1d:
99:c5:49:21:a8:7d:3f:23:ed:f9:82:36:7e:44:f0:65:1b:df:
9b:9e:65:86:8e:c5:ee:d2:e6:18:94:b3:c3:59:e6:75:a6:23:
7d:50:df:e6:96:34:82:2b:8d:07:42:bf:b1:3b:75:c4:5f:1c:
73:5a:b1:c1:30:ec:9b:77:a1:7f:ec:65:86:6a:4f:64:55:c3:
5e:aa:2c:d4:11:3c:f3:9b:e7:02:05:3b:94:21:9c:71:04:a7:
49:fa:fb:a5:fd:f6:bf:27:b5:94:c3:0f:ee:c0:bf:a8:a3:5b:
02:bf:1d:9d:ab:bd:8f:7e:97:60:89:5a:9f:07:67:61:7c:13:
f1:97:a1:93:3e:cd:ff:41:ed:3a:36:8b:0c:cb:ee:5b:aa:4e:
a8:5a:26:6d:bf:e3:b5:e4:84:05:36:49:84:f8:96:82:07:33:
38:2b:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:33:45 2025 by rpki-client