Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
File: hXosdK9aRNmq5HoLiUJfpPf8fBk.mft (raw, json)
Hash identifier: UoF0bmRQyx7OPg8ehqyjL6LA9W4Xyrm3+SjVezs5lEc=
Subject key identifier: 7C:13:A4:96:F5:52:CD:9D:1A:9B:97:81:D9:7A:F5:8F:3F:6C:96:FD
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 01976EF501A245072A7D52312BBC1C5115E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 15:00:39 +0000
Manifest this update: Sat 14 Jun 2025 15:00:39 +0000
Manifest next update: Sun 15 Jun 2025 15:00:39 +0000
Files and hashes: 1: 2ocBNxmBQmUkoRPjhlhWgOYgiMs.roa (hash: vHBT5RZYwMgp/JaFcd7djyz4ta6PJ5W0BzdunzoRb3k=)
2: GLrf-4476lN-mWAGatfWehKzDpo.roa (hash: UBhmVRo+40lzdmL/jOTwvI0uo4yogaRRq+nqy+WHQ4s=)
3: bAf4pYlPQH01VJAbtj0tnC5SXTs.roa (hash: Is6byuQI/ji+q5pWZ94ZQraf9joydkFIunAau5zwEaA=)
4: hXosdK9aRNmq5HoLiUJfpPf8fBk.crl (hash: rWViJdb7Hsr7xFUHhnk2zVZqlQMlIkkJRhihYt7Aw5M=)
5: t7q0gRp_Rjm1TKofQQJGVXRxiQ4.roa (hash: 8i0M18hNbssP3r3dcfAr+F0zW7Rf4keL31Nq8c6T/TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:01:a2:45:07:2a:7d:52:31:2b:bc:1c:51:15:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Jun 14 15:00:39 2025 GMT
Not After : Jun 15 15:00:39 2025 GMT
Subject: CN=7c13a496f552cd9d1a9b9781d97af58f3f6c96fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:2e:33:21:6d:ae:c9:5a:54:a0:9b:2e:21:
d2:77:99:90:ad:d2:1f:6f:2c:19:54:01:63:df:4c:
ef:af:f3:22:8f:8f:10:d3:81:25:35:e5:81:d5:a6:
8f:db:eb:5e:de:c8:f2:ad:8a:07:25:28:d1:43:c0:
51:be:0f:d0:87:3c:c6:a5:f3:08:34:6b:13:ab:3c:
ba:6d:0a:63:cc:ec:12:6b:6d:41:88:0d:a7:99:50:
fe:d0:b6:c2:da:60:45:47:09:4a:55:72:90:af:4e:
18:d4:c4:f3:74:7a:27:c6:fb:de:7d:68:a7:8e:fa:
a1:86:a8:42:2f:2a:17:ee:57:cd:c2:f3:7a:40:f1:
8c:35:ef:71:5e:6e:8d:91:0e:cd:79:a8:a0:38:65:
48:66:50:55:f6:6f:0e:04:39:b2:8c:f6:c5:bf:0f:
66:f9:1a:21:d4:f2:fe:fe:1c:4a:b5:b9:38:8f:8d:
9b:74:d8:f9:0e:9f:4c:60:4c:c9:6e:c1:fd:9c:60:
72:5f:66:8b:b9:42:26:21:77:6e:a1:1d:2a:b9:1c:
b7:27:85:38:8a:af:ef:51:98:81:a9:f6:f8:d1:ce:
e6:e8:f2:62:ec:8a:be:43:f2:74:58:96:45:95:c6:
d2:66:2c:9c:b5:d5:fb:cd:c8:65:23:76:93:df:ba:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:A4:96:F5:52:CD:9D:1A:9B:97:81:D9:7A:F5:8F:3F:6C:96:FD
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:60:0d:24:ae:26:8a:1f:07:e7:42:ce:eb:4b:b5:6e:92:92:
d6:2b:1b:37:4d:40:4b:9f:21:b8:a0:b4:c0:6e:1f:25:d5:bc:
d6:f0:f0:f8:9b:00:08:da:66:4b:f2:be:55:1f:8c:17:63:bf:
46:ec:7b:a7:08:8b:b5:bb:15:81:20:7d:40:5c:38:8a:c7:65:
9e:f2:8c:2e:36:cb:e4:0c:bf:c1:0c:9a:14:94:2a:37:9c:37:
fc:19:6e:1c:6c:a8:ca:e8:e3:52:88:fb:e2:59:a7:67:9a:7d:
8e:cc:ec:db:82:52:ff:c8:7a:7a:67:c4:df:19:0d:95:ad:68:
72:f4:3c:27:a4:2a:fc:42:a1:83:13:b6:7b:af:84:8e:e9:88:
e8:1f:62:2e:82:dd:08:ef:f9:0f:53:c4:e8:d2:65:88:7b:41:
19:3f:63:38:68:27:b5:44:aa:19:88:d2:ea:8e:0e:88:da:ff:
c2:c8:da:03:a8:5f:f7:22:f2:fe:ca:ad:4c:56:b0:26:ab:3d:
78:8a:89:4a:5a:e2:f0:d5:77:ce:5a:93:0c:27:83:11:e2:61:
5f:5d:7b:8a:c1:01:0b:b1:be:78:ad:ca:cf:51:ef:66:76:fc:
bf:f1:51:e9:21:15:ec:7a:bd:d9:6e:26:5b:48:d7:d4:1b:63:
54:3f:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:53:00 2025 by rpki-client