Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: zisc3yGc2ALHZYxumF7KwCPKLatq14aPpEn/Cix/ocg=
Subject key identifier: 46:DB:99:BD:D6:B4:DF:CC:1A:F2:55:1A:26:16:1D:79:2F:35:6E:42
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 01976C624C458933B4E92234456FAD43BCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 03:01:10 +0000
Manifest this update: Sat 14 Jun 2025 03:01:10 +0000
Manifest next update: Sun 15 Jun 2025 03:01:10 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: TD6nlAQyxVntdxPd8QJbr74tUNBzZ/VN/XXARgM9ZUk=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:4c:45:89:33:b4:e9:22:34:45:6f:ad:43:bc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jun 14 03:01:10 2025 GMT
Not After : Jun 15 03:01:10 2025 GMT
Subject: CN=46db99bdd6b4dfcc1af2551a26161d792f356e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:a8:af:52:1b:e0:4b:7e:c3:9a:39:bb:34:
43:20:fe:cc:93:94:2a:3e:7a:2b:2f:6f:24:90:ff:
9b:56:15:86:eb:a8:70:20:c4:6d:c6:52:f9:76:83:
78:6c:76:60:cb:6e:0e:af:35:67:d7:2a:9b:4f:83:
b1:4f:ae:0b:8a:16:4e:82:a4:15:b9:af:c9:17:97:
15:bf:69:21:60:0f:41:2a:f2:a4:ec:0b:a1:0f:6f:
74:94:ed:3a:a0:f4:25:93:32:8e:f3:8d:a7:63:a2:
9f:4a:8a:ef:bc:69:e2:01:59:cc:81:9b:a8:4d:85:
1b:6e:1c:f6:13:ae:01:5d:4b:7a:a9:69:c8:8c:b8:
d3:89:bb:1d:4a:e6:c2:38:18:9d:7d:cb:16:66:32:
d6:75:5a:6d:d9:70:f0:0b:21:02:65:5c:6e:ab:8c:
cb:b2:08:20:92:d6:38:78:5f:39:eb:55:d1:de:78:
99:84:d7:9d:93:e8:30:4a:5c:90:60:c8:33:4e:f1:
f6:b5:b9:ca:29:75:d3:b0:06:8a:79:83:12:ae:49:
a4:dd:ad:02:56:c3:87:70:81:df:b6:38:df:71:f2:
3c:e0:97:1b:21:4c:6a:96:bf:5e:26:83:75:fa:36:
20:0c:70:16:c0:f5:8f:91:fd:c8:6f:62:5f:dc:cf:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DB:99:BD:D6:B4:DF:CC:1A:F2:55:1A:26:16:1D:79:2F:35:6E:42
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:db:0d:85:11:92:6a:0e:d2:72:58:2a:0a:d3:c8:dd:00:
39:ba:c9:e4:fc:ef:ee:7b:a8:fd:7e:16:1f:04:6e:a9:c3:24:
f3:61:11:fe:13:02:bf:28:8f:45:9e:53:ed:75:5d:4c:46:6c:
0f:d9:21:a7:c7:bd:0d:3a:6e:11:10:13:12:6b:38:01:af:b0:
e3:24:d9:8d:34:5d:c9:b9:7c:2c:8c:af:2a:b5:b9:dd:5b:49:
ed:a7:d2:50:6e:98:78:7a:c8:d6:ff:39:56:c8:77:58:17:33:
b7:1a:37:fc:3a:fe:8e:bf:ff:ec:fc:c9:c0:a7:b8:8e:20:72:
11:4a:71:e4:83:97:46:11:93:67:9a:08:ef:2b:ab:7e:97:c7:
c7:02:78:75:9d:42:fd:46:d6:64:4c:02:d3:70:54:2d:bd:49:
20:9c:8c:2a:d0:ea:5d:5e:d6:6a:cb:73:34:05:e1:39:65:72:
db:c1:49:30:8f:ba:cc:fa:4b:df:7d:30:a1:14:24:3b:05:2d:
b7:34:33:2a:8f:1c:24:d0:7b:85:98:f8:7a:29:3a:b5:9c:01:
4d:e5:2d:a4:37:15:24:78:db:96:c7:4f:0f:45:2a:b7:12:d6:
33:94:52:48:7a:86:0f:b0:bc:3d:95:e3:4d:75:05:38:8e:69:
42:0b:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:34 2025 by rpki-client