Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: Xo2m8SnO7rNZs0dRloU0VuLbDY3+yhojNXR3L5aDnnY=
Subject key identifier: 33:FE:B0:39:7A:29:4E:62:DA:4F:98:77:7E:A6:51:8B:BA:85:C6:5F
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 019779E63BCABA22BBEB30E6122C7490971D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 0E17
Signing time: Mon 16 Jun 2025 18:00:20 +0000
Manifest this update: Mon 16 Jun 2025 18:00:20 +0000
Manifest next update: Tue 17 Jun 2025 18:00:20 +0000
Files and hashes: 1: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: Cgqg537wT5B/hjxvchn3TvB8xiR3KcoQN8IPGRzMPZE=)
2: pkoA1nbX0r8lwiVwxbfu80R8kOU.roa (hash: dAPrEkvaKQk5s5Z7WHpV1G3F1Sw4lOg/QTiasC7ZX1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:3b:ca:ba:22:bb:eb:30:e6:12:2c:74:90:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Jun 16 18:00:20 2025 GMT
Not After : Jun 17 18:00:20 2025 GMT
Subject: CN=33feb0397a294e62da4f98777ea6518bba85c65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:5b:e0:82:d1:4d:f0:c5:3f:64:1c:4c:71:
a7:a0:8c:92:84:c5:fa:91:ae:75:6b:f9:17:87:3d:
06:17:86:55:50:56:ae:a3:85:20:9d:19:8e:c3:69:
e1:76:ec:5a:62:76:5b:ae:c1:71:2c:82:b9:6c:4e:
0e:17:38:db:7a:9a:07:5f:cb:d7:09:50:22:25:32:
03:32:9a:e3:0e:b4:92:90:c8:7e:7f:4c:c6:e5:de:
b8:36:93:48:43:8e:7a:74:1c:9c:76:90:db:46:c0:
fd:47:9f:d5:d1:b6:31:93:97:64:32:26:cd:95:69:
f3:ab:10:f6:08:70:06:2a:45:a1:74:e2:b8:10:c0:
b8:fb:5c:80:9f:d3:69:05:92:7d:ee:55:0f:1f:6b:
c6:98:ff:db:0a:ea:4d:ce:cf:db:c0:2e:0e:70:64:
e3:68:97:cd:db:3e:28:46:80:b0:5a:c1:a1:2b:27:
a3:ca:6a:43:c6:47:92:d9:75:fe:2b:7d:a8:48:2e:
6f:7a:a6:24:06:43:e0:85:8d:85:0f:46:81:1f:01:
ea:20:4d:f0:3f:e0:30:18:03:20:fb:f9:b0:07:e4:
6a:c9:a9:0a:ec:47:25:05:94:34:c4:e1:77:8c:1a:
d9:e5:4a:e6:69:40:e9:e8:ed:65:38:0b:19:c9:30:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:B0:39:7A:29:4E:62:DA:4F:98:77:7E:A6:51:8B:BA:85:C6:5F
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:a2:50:73:1a:8c:cc:5d:3a:7b:0e:9c:13:6b:83:26:92:
93:cf:e3:49:65:a6:0b:22:46:94:84:2f:1d:85:57:3e:b0:df:
0c:9d:f2:76:55:8b:09:ad:de:cc:47:8c:79:1e:58:57:35:74:
c8:a0:ff:ef:6e:b4:65:11:7c:09:b4:78:80:b0:ea:a8:59:82:
2f:4b:a8:f6:9d:4c:a4:e3:57:c4:77:2c:21:61:83:2d:2c:92:
a7:4b:26:d1:e7:65:ce:3c:05:4a:42:8e:c5:d7:9e:69:9e:43:
08:f7:f1:f0:b5:84:cd:22:69:0f:d8:dc:5e:b9:31:f4:1b:63:
e8:12:09:1c:6d:42:68:f3:29:d7:6b:77:d0:2b:7c:78:fd:a4:
7c:d0:97:48:41:6d:a2:43:9d:e9:4c:f3:89:62:04:ae:1d:7a:
0c:07:b9:bb:99:86:b9:5f:11:bb:40:8d:e3:2d:eb:a3:e7:ba:
9d:bc:62:1d:1b:e6:6c:79:19:06:6c:5e:c6:f9:b2:fa:c8:f6:
b0:1e:dc:38:e3:a0:60:2a:4c:87:17:80:e1:ad:db:31:09:4f:
44:c0:01:d3:bf:ac:72:a2:c3:3b:f7:22:6c:f1:0e:7d:81:4f:
e4:80:ed:28:07:cf:d8:91:40:64:9d:4b:ee:5c:13:9e:04:f4:
ca:e8:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:56:33 2025 by rpki-client