Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: 6OS1g+obkdknvAcbhEF0ED0+0mEIcv7RnpB8tAwk/JY=
Subject key identifier: 85:7A:F0:08:26:6B:88:87:D2:EF:30:44:B4:78:E1:42:66:46:E8:85
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 01976C61E1B288936E0B1020DA21AC482EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0888
Signing time: Sat 14 Jun 2025 03:00:43 +0000
Manifest this update: Sat 14 Jun 2025 03:00:43 +0000
Manifest next update: Sun 15 Jun 2025 03:00:43 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: kkXkCoJsBX3u/CJW8jPlr6vqobtYhI0fkSEGldYaDdE=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e1:b2:88:93:6e:0b:10:20:da:21:ac:48:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jun 14 03:00:43 2025 GMT
Not After : Jun 15 03:00:43 2025 GMT
Subject: CN=857af008266b8887d2ef3044b478e1426646e885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:d9:71:c6:48:9f:35:8c:a9:f6:c7:3e:1d:
c3:ec:9b:14:90:08:88:9b:82:f6:42:1b:a2:13:3d:
08:8e:4b:bb:47:11:c4:c6:db:cd:b6:26:83:13:d9:
48:f5:e6:cc:42:99:41:e7:6d:2c:32:a8:8d:8b:6f:
b9:38:19:91:90:b4:46:2a:67:e8:04:ea:1e:19:cf:
6c:59:ee:9a:84:72:fb:67:19:d3:02:31:82:f4:e1:
39:e8:05:ea:f0:b0:ae:1d:de:db:3f:82:87:7c:03:
ff:d5:48:27:48:63:7e:51:a3:8c:6a:80:c0:b7:5e:
9b:1d:0a:0d:0f:3c:75:a7:63:bb:d0:f3:70:9e:92:
5c:b9:2a:14:26:b6:a7:c5:f5:af:23:ac:c6:55:f0:
c8:5f:b2:6a:8b:59:6e:52:d1:c2:52:ec:ff:e9:ab:
7b:6a:e7:5a:5b:8f:7b:b5:49:92:4e:56:20:50:65:
3d:ab:74:86:2d:90:ce:12:d4:fd:d2:f5:d8:55:fe:
e7:3f:b4:4e:8c:a0:1e:4c:b2:4c:14:38:5a:ca:d8:
91:06:40:2d:76:f6:92:e8:d1:dc:92:00:d4:b0:5f:
21:8e:d9:11:78:1f:31:69:34:8d:db:69:2d:4a:4b:
aa:14:e2:e4:c8:2a:8f:c5:9d:13:1f:1c:82:8a:9c:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:F0:08:26:6B:88:87:D2:EF:30:44:B4:78:E1:42:66:46:E8:85
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c5:62:79:1a:fc:eb:0f:07:16:6b:a6:06:4b:c8:55:17:49:
36:db:33:58:c2:d1:89:d6:21:17:db:88:9a:6d:6d:75:17:ff:
35:6d:8f:d5:d7:56:3d:62:df:12:27:ce:f6:ae:80:9a:41:89:
12:bf:c7:1e:ad:1e:c0:17:78:2f:41:4f:93:c3:1e:f1:18:e5:
f3:94:42:d3:0d:33:46:94:87:eb:48:b6:be:27:22:6f:9f:de:
4b:53:c9:2d:d1:1c:57:ef:5a:e3:f7:ae:46:52:b2:73:cb:0a:
be:ac:8c:7f:81:67:db:ad:be:c9:28:47:ec:b2:2d:1b:46:9a:
64:44:49:1e:c4:d4:ab:99:31:58:41:9f:99:3b:b0:c5:2a:4f:
68:7a:10:d7:af:95:e6:8b:ba:02:5a:51:f4:a5:65:fb:48:bc:
3b:5f:22:87:e3:77:65:26:04:60:d5:7b:f5:c8:4f:83:20:74:
b1:fe:83:90:1b:c6:ee:2b:9d:64:4d:34:0a:1a:d5:0b:29:1b:
cd:05:a2:22:04:47:43:58:ab:17:56:d5:cb:83:f5:64:ef:55:
a8:f3:f7:c6:8d:6f:37:47:4a:c3:fe:0a:65:8b:3e:7e:0e:32:
67:e8:52:5b:f9:30:a2:8e:a4:ee:9d:b6:54:56:53:93:38:4c:
eb:7c:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:19:32 2025 by rpki-client