Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: 6OniiB/g3UAfGcamvUBt0Tt3gVPi9Sda8OQ8oExSex8=
Subject key identifier: F1:4C:CC:5F:55:59:F5:1A:AE:52:3A:5E:F3:C4:E2:E0:B5:89:E7:5C
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 01976DE2ABEC61615F993B784FFCA8DDEAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 10:01:00 +0000
Manifest this update: Sat 14 Jun 2025 10:01:00 +0000
Manifest next update: Sun 15 Jun 2025 10:01:00 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: N2PEGQp56bHePkJWlFvXfJf0BYecAxS2FLSaM3/M17k=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:ab:ec:61:61:5f:99:3b:78:4f:fc:a8:dd:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Jun 14 10:01:00 2025 GMT
Not After : Jun 15 10:01:00 2025 GMT
Subject: CN=f14ccc5f5559f51aae523a5ef3c4e2e0b589e75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:78:e8:4d:f9:e1:51:e4:4c:bc:b3:e3:e1:
97:f3:9f:d3:02:aa:05:bf:4e:7e:22:ea:8a:c4:9a:
e8:42:66:4e:52:f3:f4:bd:2c:ce:dd:10:ba:67:40:
d5:24:27:9f:5a:eb:90:68:f6:b1:a1:b7:52:4d:34:
06:c3:ea:90:a8:a1:dd:a6:c3:03:e1:c8:74:ef:47:
b4:17:54:c9:5e:b1:47:e2:2b:3c:15:07:40:e7:37:
65:d0:4c:86:e8:a0:a2:34:8d:e1:f2:f6:92:72:bb:
cb:27:3c:a8:12:90:ac:96:21:22:4a:fc:38:21:28:
5c:49:fe:cf:8b:7b:73:b6:ec:98:6d:83:82:54:48:
2d:62:ff:e1:f2:d4:62:0f:7c:0d:2c:88:d8:54:35:
59:bd:70:c9:d2:50:fe:f0:1a:4f:10:23:46:7b:e2:
3a:93:fa:a5:b4:29:8c:11:ae:1c:ee:21:8a:66:fc:
ef:15:9f:4a:d2:9c:56:eb:ba:0c:8f:05:0c:87:0f:
b9:aa:27:43:a1:a4:03:3d:d0:6d:d1:c2:86:7d:67:
d0:6e:f5:e0:c7:25:19:b5:7f:7a:1e:50:d2:cd:a3:
8c:79:fb:85:b7:24:9b:3b:43:c0:5d:48:28:5e:8f:
69:2e:d8:8d:6c:a1:cf:91:13:77:81:93:8e:e9:0d:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4C:CC:5F:55:59:F5:1A:AE:52:3A:5E:F3:C4:E2:E0:B5:89:E7:5C
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:6f:dd:bf:d5:0a:2f:e9:c5:a1:07:55:68:c4:c9:4a:cc:
d0:a1:26:87:d9:f6:66:af:9a:16:95:6c:90:26:12:28:e7:67:
14:7a:2d:f0:af:2b:7c:bc:57:68:67:9b:27:1b:15:82:1e:88:
9b:9d:c0:e9:ff:7d:88:ea:43:5d:6e:e8:03:23:25:cd:85:d8:
bf:1f:5c:1a:be:c3:4f:00:5d:dc:64:ab:6f:91:3a:9a:23:71:
0c:0d:c1:39:ae:25:40:d7:db:31:66:de:97:bb:8c:1a:66:40:
a8:10:f6:16:3d:bd:4d:dd:58:b6:16:48:79:69:24:dd:b2:30:
1a:94:3e:a5:06:6c:df:44:4f:a5:b5:63:55:1a:ed:6d:2a:f8:
b5:3d:f3:00:fa:60:ab:1b:e4:90:97:e8:85:91:31:89:47:be:
46:3a:a3:71:a4:34:f9:59:5d:8a:7a:cb:b2:14:44:a4:92:bd:
51:c4:16:90:e4:f3:53:d4:cf:0d:f2:85:3d:f8:2f:46:ff:0f:
d5:64:a4:a0:a6:59:27:a9:1b:cb:1a:9e:40:28:e5:a6:63:73:
e0:3a:2a:f5:4a:01:52:d5:62:ee:b4:1d:de:84:74:42:1d:d5:
ca:90:35:f9:e5:03:0b:d6:16:ae:c6:d0:2c:17:41:fa:89:49:
7b:e2:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:25:34 2025 by rpki-client