Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: YFItGrG/p07gMegIce1snccBcgSbrN9Gawld8Bb8iYQ=
Subject key identifier: 35:2C:42:48:BE:52:7B:31:BF:31:7D:7D:9E:41:54:A6:F3:03:1D:2C
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 01976EBE338AE82A35DF16E0151C51790C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 1455
Signing time: Sat 14 Jun 2025 14:00:48 +0000
Manifest this update: Sat 14 Jun 2025 14:00:48 +0000
Manifest next update: Sun 15 Jun 2025 14:00:48 +0000
Files and hashes: 1: U-9gs6-HPp-63tFVTgK5YJ7Vtx0.roa (hash: is1qZnviSeshx9o2Nm8hFCS4enc7GdrzL/0sgsJwTiY=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: xsRm5JTqeQGzMOGiRHrHE7iYYvN4CIMk1cInAAByHDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:33:8a:e8:2a:35:df:16:e0:15:1c:51:79:0c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jun 14 14:00:48 2025 GMT
Not After : Jun 15 14:00:48 2025 GMT
Subject: CN=352c4248be527b31bf317d7d9e4154a6f3031d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:06:3e:43:c6:35:18:52:bf:fa:28:5c:27:
91:ba:15:e2:d0:b9:b8:35:3c:83:04:35:a0:ea:27:
c5:81:cb:a4:5d:13:10:fb:2e:25:6b:1a:ed:1f:3c:
0c:e1:22:9d:30:05:19:c3:14:88:ae:d6:fc:91:4c:
b9:4f:33:5d:bf:4c:07:bc:f9:91:49:41:9e:1b:a2:
82:eb:1f:c9:01:b8:56:08:38:f7:f5:34:eb:3d:af:
78:a5:1d:0a:ff:49:93:bb:84:4a:2c:97:bd:d0:36:
6a:0d:2f:f2:72:0e:2a:13:1d:ad:a8:47:ea:a1:56:
77:7e:be:69:fa:76:59:91:9c:a4:ee:e8:bf:1d:08:
f4:e4:ff:0a:b5:ed:13:46:fc:4f:72:4e:97:85:71:
2f:d7:53:a1:3f:ba:55:42:a3:35:8e:ed:59:6b:d6:
f5:19:14:38:ef:b6:1c:b4:9d:6e:64:8e:b7:1c:63:
c1:25:aa:64:d1:e5:72:73:2d:27:ba:b7:44:fa:5c:
2d:74:d7:60:d5:71:e2:3d:ff:4d:f2:32:3d:38:49:
36:9c:f8:07:70:08:8b:3c:15:77:f4:b0:8f:5f:4f:
26:0e:05:a8:26:b0:f3:59:a2:07:5f:69:9e:03:00:
47:22:ea:b1:9a:7a:1e:25:47:10:26:0e:5e:c0:fb:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2C:42:48:BE:52:7B:31:BF:31:7D:7D:9E:41:54:A6:F3:03:1D:2C
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:6e:d7:c8:ea:7b:f8:e1:d0:ab:5b:24:ed:77:06:55:2e:
1c:7e:11:7c:90:b4:b9:77:97:ee:a2:e0:92:f2:d3:3f:fe:30:
7b:0f:7a:04:be:26:c0:a5:84:9d:db:09:fd:0c:1f:c0:76:e4:
3f:64:1a:08:cd:19:c1:03:f6:1a:ad:c3:98:59:6e:4c:32:ef:
f2:81:7a:1c:29:12:03:6f:45:ce:c7:d0:25:bb:bf:f1:37:1c:
c8:4a:c1:a0:2a:24:45:83:59:c4:2b:3d:d2:a4:74:30:d8:a9:
18:18:28:0f:5a:98:f5:1b:c3:83:5a:d8:e5:9e:60:ad:fc:a7:
e6:69:ca:d6:9f:6d:db:0a:6d:57:fd:e5:c9:e7:5c:10:18:15:
3f:83:b1:c5:90:7b:a0:5d:06:1f:d3:44:1f:ef:fb:55:ea:b1:
fe:6c:88:42:31:a8:a6:a0:11:40:ca:a8:da:6b:7f:b9:3f:77:
15:fb:76:6c:d8:0a:a7:5d:84:47:ca:5c:91:20:c1:a6:66:9c:
fb:7d:7c:70:ac:85:22:43:88:42:62:71:f8:73:39:53:f7:ba:
a8:0c:99:91:22:7e:40:c3:78:e7:4d:3e:92:bc:d4:88:c6:24:
73:42:39:fa:67:ee:37:1f:e7:95:6b:24:28:1c:a5:a5:91:f6:
5a:1e:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:15 2025 by rpki-client