
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
File: hESS25y7Cg62v2nCXIaWH0kYPJs.mft (raw, json)
Hash identifier: UPgJ0KPBL2yMSwWX75WJrq2FbdgQeyhyb5Xgu8HKk5I=
Subject key identifier: B3:6C:1B:E3:DA:33:F9:4E:56:E6:02:53:6F:2E:69:39:BF:F2:C3:EB
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 01976E508A0BEC7B10172FB70365782EE7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
Manifest number: 0610
Signing time: Sat 14 Jun 2025 12:01:01 +0000
Manifest this update: Sat 14 Jun 2025 12:01:01 +0000
Manifest next update: Sun 15 Jun 2025 12:01:01 +0000
Files and hashes: 1: Kw49QnoalcUIwGD7L_UCEBnFzUk.roa (hash: 5nS3wTYqHyzRyVlDkHb3qPe9ElMZpDyRT50Au3dlMjE=)
2: TYiDdMg7jFYESVHenYkZA0H7wJM.roa (hash: nVrivhjrdRI0cWTmcIVa/wHRsP8sZBjo+02UhnnNCZw=)
3: bAtdqWOn7XIMZb40RJnvw-dOPu0.roa (hash: ajLP5I+MW9lN2Pm4hOADp3bTpGVbkghpKs5apJzZVDw=)
4: hESS25y7Cg62v2nCXIaWH0kYPJs.crl (hash: /2YS94GGhcIUqL4MLBNOPrrqrPHDagVBCg1q7+RuS2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:8a:0b:ec:7b:10:17:2f:b7:03:65:78:2e:e7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jun 14 12:01:01 2025 GMT
Not After : Jun 15 12:01:01 2025 GMT
Subject: CN=b36c1be3da33f94e56e602536f2e6939bff2c3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:7f:4e:4b:11:ed:f4:9c:ae:56:e9:f8:0d:
13:6e:45:2a:0d:99:64:bd:75:32:33:b9:08:2d:95:
06:bb:d5:66:b6:78:56:d4:53:a9:3f:42:9f:6b:65:
b9:66:ef:2e:d6:b9:da:6c:52:1a:67:ec:d7:c8:9b:
51:04:5d:01:d0:73:1b:c0:f9:99:d4:74:01:3e:75:
ed:9c:c8:c1:50:da:a9:3f:7a:8a:90:92:f5:10:70:
c1:fd:e4:9c:f5:00:3b:78:9b:2b:bf:73:cd:74:3d:
55:2f:5b:86:b9:6a:f1:4e:5a:1f:9b:e3:75:a8:0f:
a6:fb:07:b9:91:5c:10:4a:68:8a:20:78:f2:0e:ea:
b4:4b:c1:c3:22:63:6f:3c:d5:f2:be:ac:5f:41:6f:
8a:5c:05:b8:ed:28:0f:74:84:70:66:52:9b:21:30:
49:c4:54:59:03:da:96:2f:eb:a8:d1:ca:a8:a8:c5:
42:c7:a7:84:37:95:1f:f9:a0:36:11:cc:9f:cf:2a:
13:15:a8:af:a8:69:6b:ee:92:d8:a4:ad:84:2a:97:
ff:c6:ef:83:e2:44:56:56:38:3e:73:15:86:50:71:
4b:be:22:a8:f4:0b:8f:d0:a3:cd:b6:8b:aa:0e:59:
b1:db:96:22:f8:5a:95:90:e3:53:d3:05:04:43:9f:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:1B:E3:DA:33:F9:4E:56:E6:02:53:6F:2E:69:39:BF:F2:C3:EB
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3e:41:4c:4d:84:1d:f1:98:21:64:0b:e1:5f:92:f4:4d:7b:
10:cc:eb:5a:01:f5:b0:7e:9c:0b:0c:e1:ad:ff:74:66:b6:e6:
02:c1:f3:21:e8:0f:e4:ce:b3:ea:35:d2:2e:19:f7:b0:4d:ec:
fd:05:c5:d5:fd:45:6e:b1:7a:fe:c7:c2:bc:2e:d5:f1:c5:d5:
6e:f3:83:96:9e:5b:39:30:8e:17:94:2c:d0:8a:1c:5d:4a:c6:
b2:82:e0:97:b4:48:3d:e4:ad:5f:bc:c0:06:b1:7e:e1:6f:e3:
04:be:58:cd:d2:ed:17:a6:8a:e7:0c:e4:16:28:2c:bd:57:e9:
51:39:3c:3d:9f:02:69:ce:4a:6f:ad:4d:e2:a9:34:33:60:6e:
17:d8:b9:47:68:76:a8:c1:c0:01:84:18:d0:8b:8c:f2:62:b4:
c8:7d:08:a9:64:6a:d8:5a:87:3c:73:b7:ef:f8:c1:09:45:32:
2c:0b:3a:bd:04:f4:6d:f5:3e:4e:73:17:a0:69:a5:49:83:2b:
41:ac:cf:84:cc:f5:65:f4:a9:c9:cf:f1:de:04:f9:d8:79:21:
84:b6:4b:dd:42:1d:56:72:a6:9b:18:7a:34:c4:29:f9:06:79:
9f:3b:e6:67:aa:df:72:02:6d:3b:fe:36:50:ff:3c:47:76:fd:
51:af:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:30 2025 by rpki-client