Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: q7AqaOQKqlSuKV7z85zVHjUvUAY3K3+KzSHwFbowBJc=
Subject key identifier: DF:DF:5C:21:17:C7:31:7D:BC:1A:3E:78:50:B5:6D:DE:77:F1:A7:CB
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 0197778A4186DE2A6E397373BAFB1EB92BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 09CB
Signing time: Mon 16 Jun 2025 07:00:38 +0000
Manifest this update: Mon 16 Jun 2025 07:00:38 +0000
Manifest next update: Tue 17 Jun 2025 07:00:38 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: tsW2TA08cL+7g1wq7+op0NrnCAjehc8Is7fA5+aP4ec=)
2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:41:86:de:2a:6e:39:73:73:ba:fb:1e:b9:2b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Jun 16 07:00:38 2025 GMT
Not After : Jun 17 07:00:38 2025 GMT
Subject: CN=dfdf5c2117c7317dbc1a3e7850b56dde77f1a7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:5f:5f:dd:57:68:6b:32:19:e5:f9:49:2f:
5a:9c:05:10:90:54:6d:2b:41:cb:56:ff:fa:2b:55:
ce:68:cd:a6:c9:3a:24:f3:f0:51:0a:43:b5:03:b8:
a8:b6:4f:e4:26:80:12:d1:a1:69:cc:75:8e:c8:30:
52:ae:c8:ce:ca:89:e0:44:e1:3e:bc:9e:1f:e4:9a:
24:c9:42:3e:79:a6:b9:87:61:d3:a8:df:0e:48:04:
c3:6c:66:c6:23:c9:16:12:e7:18:50:d2:15:18:2e:
1b:69:76:63:90:52:0c:68:96:ff:f9:3d:8a:ff:40:
93:28:f6:59:c0:c5:8c:fe:2d:4a:0f:55:1e:ee:83:
a7:98:24:fc:71:3b:f6:88:66:e8:ee:d3:a6:dc:87:
9b:d8:b7:58:a2:57:84:45:3b:a5:5d:9f:10:3f:3d:
90:b2:4f:fb:6b:d8:05:01:ba:36:78:0f:ca:dc:15:
a4:59:21:d1:82:4c:7c:ef:07:1f:2e:ac:ae:41:91:
4d:ed:18:8e:54:6a:0c:5c:92:12:35:0a:f8:30:1b:
fe:4b:38:d2:a2:18:fc:07:43:84:1e:d9:9f:28:44:
6a:4b:66:94:21:68:57:cf:1e:a1:3b:fb:dc:1b:e2:
97:75:3d:83:b6:52:e9:95:ea:b8:df:f0:a7:90:04:
ab:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DF:5C:21:17:C7:31:7D:BC:1A:3E:78:50:B5:6D:DE:77:F1:A7:CB
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6c:a1:70:d5:cb:79:5c:ec:b5:41:b9:d4:bc:c2:91:92:d8:
7d:37:d9:04:95:ef:ae:6c:2a:28:cf:9d:86:cc:a8:6a:c4:e7:
ce:e2:43:8e:a6:d0:b8:be:00:09:d7:20:0b:40:ac:85:fd:2d:
93:c2:6d:74:91:cd:8e:75:c8:75:ae:ce:0b:f4:3d:08:5b:c6:
a2:9b:6e:8e:02:6b:f4:9d:8d:14:56:fb:ce:3b:ac:06:17:d8:
c4:14:9d:f6:be:7d:85:29:70:ed:7e:16:3d:13:e1:35:a3:54:
cc:63:82:25:90:62:e1:b7:f7:d2:4e:5b:87:4f:af:cf:28:78:
4d:22:88:32:ba:22:1e:ed:90:8f:2f:cd:19:a1:fa:3f:74:5d:
de:fb:e5:50:23:27:96:33:77:3c:9b:50:0c:fd:72:76:ea:8e:
89:c0:df:6e:06:a9:dd:89:40:e7:20:53:9c:28:30:da:e8:32:
76:cb:72:32:0a:8b:2c:92:a7:8f:ea:3b:46:b8:19:52:05:01:
51:1f:a9:e7:9a:2d:1c:d9:35:6e:9d:a8:da:14:33:2d:79:b7:
3a:6a:cb:b7:9e:ab:22:03:2d:b1:91:41:ec:54:02:5e:fa:ba:
0f:a5:43:5d:df:75:39:a7:73:a6:f0:36:52:d3:00:96:69:30:
21:a5:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:55:29 2025 by rpki-client