Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: tTmNfIBhK3wXy0KUKfDDj8mpox94Ao0MaS7N5HyBC10=
Subject key identifier: A7:EB:EA:7F:62:E5:8A:67:8E:08:6F:CF:C6:F3:DB:68:A3:A0:00:84
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 01976D3E3877FB322D8CF05AA32ACB76C370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0B97
Signing time: Sat 14 Jun 2025 07:01:23 +0000
Manifest this update: Sat 14 Jun 2025 07:01:23 +0000
Manifest next update: Sun 15 Jun 2025 07:01:23 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: b3BjchMgCjsphoAvkHpHbE15CRFXgYNc7+5tsB1wgQg=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:38:77:fb:32:2d:8c:f0:5a:a3:2a:cb:76:c3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Jun 14 07:01:23 2025 GMT
Not After : Jun 15 07:01:23 2025 GMT
Subject: CN=a7ebea7f62e58a678e086fcfc6f3db68a3a00084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:52:14:23:c6:44:3e:35:e3:dd:83:6a:c6:
12:47:18:20:69:99:a2:8c:bf:1f:a5:fe:30:64:7a:
48:48:7b:1e:31:7b:75:b0:f4:e2:27:e8:61:38:7d:
09:c0:b7:2a:1b:e2:97:a2:ec:7a:4d:d7:ab:c0:8d:
94:14:16:75:b6:72:7f:1a:65:ea:20:31:17:b6:4c:
8b:71:2c:c7:9d:90:45:7e:5e:49:ca:dc:6e:99:63:
e7:77:0d:c9:8c:9e:aa:45:f5:e9:c0:00:a4:47:fa:
27:7d:ff:a6:74:2f:e9:4e:09:0a:25:0b:b9:67:6c:
2a:94:34:9e:b5:0d:35:69:55:8c:f1:21:df:dc:5e:
6c:9d:f7:78:0d:46:89:bd:13:0b:4a:3b:ac:f6:13:
e4:84:24:80:8e:d1:12:7c:01:68:1e:85:fb:3b:04:
11:bf:84:7b:3a:58:83:86:f7:f8:83:ac:2a:85:cd:
c1:62:19:48:f3:28:e9:f4:36:88:d1:38:bf:5b:44:
ca:a0:30:b3:9a:66:05:da:b8:d4:22:0b:6b:d8:d2:
f0:31:ff:8a:4b:02:2e:1e:e7:a0:fc:a4:2c:6c:de:
71:f0:4e:f7:4e:d0:1b:88:c6:ff:24:e7:07:01:a8:
e3:84:b4:0a:13:aa:31:f6:e2:a0:0b:0c:82:98:dd:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:EA:7F:62:E5:8A:67:8E:08:6F:CF:C6:F3:DB:68:A3:A0:00:84
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:72:44:28:e1:34:3c:27:74:6d:ab:0b:3c:de:1d:83:68:af:
a1:76:ca:57:83:87:0e:30:32:e2:be:2a:3a:84:ff:d2:6b:ad:
59:21:65:84:20:a7:9f:26:97:60:71:82:b8:28:e9:97:1a:13:
16:e6:e0:7b:a4:fd:7a:0a:9d:9e:6f:ef:89:99:c4:76:2a:04:
ab:eb:16:31:91:ef:4f:b3:e4:df:69:0e:5a:b0:5a:08:3f:0d:
19:fc:64:04:3f:93:7b:ad:23:07:e9:cd:d6:79:7b:f8:61:7d:
0a:a3:d3:f0:62:b2:b0:32:10:14:43:d1:9e:23:89:9f:3f:76:
89:b0:2c:2c:3f:48:72:bf:46:64:25:7f:88:41:87:a4:df:23:
12:31:69:77:38:a4:54:b6:d0:8b:1d:70:41:aa:e9:a3:57:52:
13:49:00:bd:80:8c:92:04:00:96:9a:aa:b1:de:2b:94:ed:0f:
7f:b4:34:e5:16:3d:04:8e:cc:9e:e9:6c:77:95:7d:fc:2d:aa:
e2:0b:de:44:7f:54:4a:f5:03:b7:a3:fb:e9:17:bb:8a:5c:a6:
34:dd:70:96:25:68:62:4d:16:b9:50:c3:fd:af:2a:27:96:f9:
7f:2a:09:e5:67:1a:8d:05:26:31:e0:ac:f9:9f:45:bc:6e:8e:
bb:7a:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:33 2025 by rpki-client