Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: /Ka+WDiKQdQhfPl1wzRxfJi1o1LYKxvY7nLzRACZm2E=
Subject key identifier: 8F:41:02:11:A9:43:5D:ED:F6:DF:F4:E9:7D:28:28:79:50:DF:CF:FD
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 0197711B2746B2B7A43B1BE62FC19F21AEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 0F6F
Signing time: Sun 15 Jun 2025 01:01:34 +0000
Manifest this update: Sun 15 Jun 2025 01:01:34 +0000
Manifest next update: Mon 16 Jun 2025 01:01:34 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: KNBizO9ti8ChNGqz5zAP8lQBGyQk8VYQjEEPfgzI27s=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:27:46:b2:b7:a4:3b:1b:e6:2f:c1:9f:21:ae:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Jun 15 01:01:34 2025 GMT
Not After : Jun 16 01:01:34 2025 GMT
Subject: CN=8f410211a9435dedf6dff4e97d28287950dfcffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:fe:27:88:d3:b2:c6:da:fc:d9:29:6f:f7:
4e:6f:ab:c7:7b:71:af:98:ac:08:c2:02:71:0e:dd:
ba:cd:b4:27:e0:50:22:44:70:38:75:69:f1:80:77:
24:6b:58:ba:1e:f7:81:b6:40:6d:f7:23:ba:f7:16:
4f:5e:f1:a0:67:a9:4a:58:f5:87:d9:66:88:18:7c:
c4:4d:c4:66:e4:8e:6b:58:84:46:79:7c:48:49:88:
95:0d:05:7c:44:e2:d5:91:d5:4f:30:32:94:c1:2b:
f0:1c:3c:7c:53:8c:b1:7f:d7:8f:0d:0d:ec:c2:e5:
b4:ca:b1:a0:16:16:91:54:ac:f4:44:e0:5b:c4:96:
22:81:96:aa:40:6d:3d:cf:05:36:d4:65:b1:e6:16:
ae:4a:91:ec:74:c7:a9:a7:19:45:fe:38:15:d3:00:
62:24:d9:fe:1f:66:f8:84:06:89:06:49:ed:6f:49:
8d:ab:3f:20:ab:a1:b2:e9:5d:66:2d:cd:cd:2f:b4:
4c:3d:29:93:5f:c7:81:23:f6:49:0a:2c:fd:80:d8:
8f:fa:93:7b:f5:ce:aa:15:53:ce:d3:41:12:8d:dc:
31:75:a1:20:ee:8c:78:5b:94:1d:f6:93:d8:5e:93:
ad:eb:77:7c:d9:c5:47:99:1e:dc:0a:69:bb:19:e9:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:41:02:11:A9:43:5D:ED:F6:DF:F4:E9:7D:28:28:79:50:DF:CF:FD
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:34:72:60:88:19:35:42:a0:1e:82:32:d8:ce:43:dd:c9:4a:
19:14:a2:9c:28:39:d0:b3:d8:59:68:ad:f7:44:f7:ac:f2:33:
5b:d6:33:ca:03:99:fa:8d:5a:a9:b3:46:db:b5:77:4f:3f:60:
fb:d1:2d:43:b3:56:ac:cc:3b:70:2f:0f:eb:9c:af:8d:b1:88:
c9:aa:54:0d:37:d3:58:bd:b2:74:2d:16:21:6f:51:a1:56:e4:
5e:99:da:a8:05:d9:0a:a1:ec:87:03:3d:32:17:10:cc:1a:e5:
27:73:da:0d:d1:3c:21:5a:cc:b6:a2:c5:c7:cf:8c:04:15:c4:
33:a0:72:88:8e:b8:18:ca:f7:a0:71:ba:c9:da:8c:87:13:36:
a8:8d:9f:61:d4:36:56:84:d0:b6:2d:84:48:75:e3:83:17:06:
72:a7:ee:8e:6b:de:93:59:60:c5:ca:7a:31:c7:f2:44:e1:fd:
9f:9d:dc:df:de:07:7a:13:7e:55:0a:c3:be:05:b6:fe:5a:f5:
76:df:e5:c7:11:d9:7e:5b:89:7b:07:29:f1:5b:df:53:93:59:
df:37:ea:f4:23:67:87:37:05:a1:01:e5:84:e5:5b:95:1f:d7:
98:ab:12:6e:39:bd:27:f3:d6:4e:79:61:2f:a0:8a:aa:fc:e0:
51:96:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:56 2025 by rpki-client