Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: 5IuVawzx8KSCBZcAWZHVff2oBJD7pAZQAQl4IZzeX9g=
Subject key identifier: 3F:BF:DC:05:06:C1:0D:D4:C7:9E:AB:6E:78:63:EA:41:A0:59:E3:C8
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 019773765FB1744697954AA25E84DE9E7819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 060C
Signing time: Sun 15 Jun 2025 12:00:26 +0000
Manifest this update: Sun 15 Jun 2025 12:00:26 +0000
Manifest next update: Mon 16 Jun 2025 12:00:26 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: asDP/EmmVHZZ5+RvVOpJnDTSxVuCU3M1E4H82e9dTR8=)
2: stpDfm6iNdDYaLxAEW54ErOGA3g.roa (hash: 0TvfMldTzQqqOzNlOoBnIsJUFfnXCRYAaac2mQAq9jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:5f:b1:74:46:97:95:4a:a2:5e:84:de:9e:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Jun 15 12:00:26 2025 GMT
Not After : Jun 16 12:00:26 2025 GMT
Subject: CN=3fbfdc0506c10dd4c79eab6e7863ea41a059e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:87:cc:24:99:91:3e:34:b2:8c:21:54:b4:
b9:69:2a:f1:a8:a5:0a:fd:d0:d1:63:a5:99:9b:0c:
69:b7:68:4d:e9:07:15:d2:1e:e0:11:8e:53:89:9c:
37:92:7a:59:b3:56:9d:90:4f:48:91:49:e8:cd:cc:
1c:51:cd:59:8e:bf:61:f5:18:d3:f6:f4:f6:38:e3:
d5:9c:d6:0c:2b:b3:3d:ba:e8:79:d7:49:ce:d5:b2:
ff:e4:cd:e1:98:cc:16:36:e2:42:c3:00:42:e3:bc:
fa:da:9a:e5:d6:5a:a7:cf:49:80:8c:53:11:ca:f2:
60:e6:81:96:16:d4:af:91:b1:77:82:67:0f:ed:df:
d4:b6:09:06:14:49:a6:f0:8a:72:f9:09:bb:b1:f3:
d1:11:22:a8:3f:b0:57:b9:c5:0a:7f:d2:e0:60:0f:
86:f5:89:21:fd:bd:e5:47:73:72:b9:78:85:6a:69:
f5:5a:6d:82:82:ba:b0:0f:5d:f9:68:3f:e4:ca:ca:
15:2b:98:b9:14:fa:80:68:39:10:a7:05:87:f8:9a:
8d:e8:dd:1e:60:26:0b:1c:dd:42:23:e9:0e:9f:76:
08:5c:32:5a:88:7b:4c:90:f3:65:a1:0a:f3:a2:7d:
fd:0d:f5:1d:2b:66:8a:9b:aa:35:c6:99:f1:2f:5d:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BF:DC:05:06:C1:0D:D4:C7:9E:AB:6E:78:63:EA:41:A0:59:E3:C8
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:bf:a6:27:40:e8:2c:2c:af:c5:d9:3e:d8:70:8d:3d:46:
85:1d:86:2d:46:27:f2:0c:38:50:f8:ee:6d:47:c2:8a:ea:32:
bb:bd:26:0e:db:06:99:f4:2d:b8:8c:84:ac:c6:21:1b:29:a4:
c7:45:fa:42:eb:bf:33:7f:60:50:de:17:9e:26:66:26:20:22:
c2:25:81:42:32:28:49:9a:75:79:b3:99:b9:2a:96:80:e8:4a:
cc:94:87:50:3b:6b:f2:f8:1d:89:bd:8e:ee:66:24:22:2c:8e:
0b:8d:40:bc:37:7a:e1:92:1b:19:c7:db:f1:24:34:fa:d7:96:
f7:38:4d:1a:56:06:26:4f:82:6e:0a:54:4e:a1:22:8b:4a:b8:
ba:38:2e:98:49:cc:8b:ff:96:4b:e7:9b:13:81:71:29:83:e8:
be:36:9a:b5:c5:6a:b2:34:90:9f:df:73:72:96:77:42:cc:97:
b9:b5:78:d0:94:7e:a0:cb:09:cc:8a:2f:17:5e:00:27:0d:c9:
82:f7:96:d6:c6:2e:e4:5c:a7:18:30:f6:61:b6:b7:e8:83:db:
d2:b7:c2:95:85:8d:2a:5a:17:39:d4:7d:24:bb:f1:16:2e:38:
6a:a3:24:df:6d:e5:bb:2c:8c:44:7a:0c:01:55:64:24:eb:be:
ff:27:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:01:53 2025 by rpki-client