Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: mnmnJStkW5QS5FvpvAKaPM90WmdUBJ9mStjCQscdBec=
Subject key identifier: 4F:E5:27:B7:EF:59:E0:F9:A0:7A:79:05:95:CF:9C:57:5F:F3:1E:5E
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0197643ABE7E5CCFCBF1AA2E5695C807C091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 15A6
Signing time: Thu 12 Jun 2025 13:01:00 +0000
Manifest this update: Thu 12 Jun 2025 13:01:00 +0000
Manifest next update: Fri 13 Jun 2025 13:01:00 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: nBiy2fGrnEsOdIA79j4c50d4hDdxwXDFzWDF8c8LNjU=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:be:7e:5c:cf:cb:f1:aa:2e:56:95:c8:07:c0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Jun 12 13:01:00 2025 GMT
Not After : Jun 13 13:01:00 2025 GMT
Subject: CN=4fe527b7ef59e0f9a07a790595cf9c575ff31e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:bc:17:37:0c:bc:b6:c9:60:87:f8:b3:d9:
db:2d:0e:1b:f7:d8:10:68:e1:99:ab:a6:38:2a:e8:
56:3d:d6:2d:a2:e4:6e:53:53:71:3b:2c:52:50:d1:
f7:17:f0:98:6f:51:46:39:f1:2a:da:e5:a5:bf:99:
a2:ef:0a:e0:b6:ae:6a:bc:4e:f1:53:1d:a4:8d:9f:
42:5e:4e:a8:a9:db:e8:6a:65:a3:47:76:2e:84:d0:
c0:e6:9f:d5:e0:53:fd:65:33:81:92:c5:fb:55:9d:
38:85:ec:fe:45:1f:16:64:21:c8:7c:93:e4:c9:20:
28:3b:92:88:e9:81:37:40:9a:9d:db:54:c0:44:20:
33:f3:50:15:d8:c8:f3:9e:a5:dc:33:2b:0a:77:f3:
32:8b:29:a6:ec:2e:dc:08:b2:ae:d8:9d:65:86:98:
81:40:b6:2f:53:89:9f:02:1a:cf:31:a1:93:ff:f8:
af:29:55:2b:80:bc:02:6c:37:3c:7e:91:10:57:d6:
5a:53:43:74:e5:80:19:69:ba:d3:5b:2d:4c:8d:0f:
bf:af:b7:12:24:12:1b:46:29:61:73:bb:2b:88:92:
bc:fa:13:bb:f6:36:ef:92:fd:31:9c:93:8a:29:7a:
dc:9d:b1:59:fb:bc:24:b8:e0:e2:86:44:62:59:9d:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:27:B7:EF:59:E0:F9:A0:7A:79:05:95:CF:9C:57:5F:F3:1E:5E
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:30:04:1a:35:b0:cc:74:c0:33:3d:7f:78:5c:72:c6:d6:48:
21:e8:b4:d8:32:41:5e:eb:e3:29:0a:76:8f:06:e3:17:b6:a8:
c2:0f:f4:67:54:68:ed:22:d8:52:8f:08:59:d5:de:49:1a:91:
18:12:4c:72:e4:31:8a:1d:52:04:0a:e4:4f:bd:d8:c2:42:e3:
d9:4a:73:6d:89:31:8a:0a:cd:71:60:73:46:42:a1:f9:b7:5d:
f5:16:7c:60:2a:85:32:65:3d:70:dd:08:99:35:0c:e5:f8:66:
07:2b:fe:5c:5b:d8:b2:19:4c:20:51:27:94:d8:f3:36:36:dd:
47:11:b6:77:93:05:01:b5:7d:9c:07:bc:49:fe:92:7a:d7:66:
e0:72:3f:96:42:52:4d:42:d9:a4:d4:12:c4:1c:07:10:33:26:
35:33:99:94:f6:37:bc:ea:3a:a3:ab:f4:76:d5:1a:3f:b2:d5:
a0:d5:71:97:e6:0d:b7:8b:54:ba:2d:ea:59:b2:bb:93:0d:e1:
6c:a4:4e:a0:37:57:63:db:60:3d:d4:12:38:4a:b8:51:f2:15:
22:0c:34:97:22:56:52:88:aa:5a:1d:f3:04:12:06:ed:d4:2f:
06:9e:c9:df:6c:05:6b:fa:ae:a3:ad:3f:d3:64:2a:94:85:00:
67:d3:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:54:08 2025 by rpki-client