Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: xljJoiEMBhl19ywFGZxGtgMWH6jvqZflSOeuuBlgVok=
Subject key identifier: BD:15:E4:1C:7C:40:63:98:9D:6A:F4:B3:36:DA:63:61:A6:30:0A:B4
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 01976FD120F1309010BD0BDB38326331C66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 19:01:05 +0000
Manifest this update: Sat 14 Jun 2025 19:01:05 +0000
Manifest next update: Sun 15 Jun 2025 19:01:05 +0000
Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: rrejcj1SA+cekbwavpR7eLInLj7eMxg7OyNQ7YpospU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:20:f1:30:90:10:bd:0b:db:38:32:63:31:c6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Jun 14 19:01:05 2025 GMT
Not After : Jun 15 19:01:05 2025 GMT
Subject: CN=bd15e41c7c4063989d6af4b336da6361a6300ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:10:49:0d:b4:85:c3:09:dc:6c:5b:69:99:
c9:99:cb:b0:53:70:7f:fe:47:e9:d3:3c:7c:bf:36:
93:ac:27:83:ae:21:6c:3d:57:01:54:02:44:ef:d9:
b0:09:6f:92:ae:66:6a:0a:77:ba:8e:90:63:27:30:
cf:c3:8e:c2:1b:c5:7e:7a:d4:17:6f:ef:36:d2:f0:
ad:a0:b5:9f:e3:7e:6a:ac:45:d3:25:32:28:50:6a:
8f:f0:c6:77:96:9c:8a:c2:da:b0:42:29:ee:76:ad:
a1:56:e8:c5:2a:5a:9b:8a:a4:05:5b:4a:9e:ed:05:
c4:9b:16:cb:35:74:36:a4:b2:cc:0d:d1:94:18:77:
32:8a:53:22:c6:23:2a:19:0e:21:23:5d:0d:5b:a4:
da:9a:d4:f3:13:2a:7b:a8:9f:e0:81:76:85:e3:d3:
42:61:8b:1f:62:06:d8:c5:20:eb:73:bd:b2:7a:5e:
8f:c8:ea:ab:24:f5:f5:ec:28:de:c7:fa:0a:03:eb:
6b:ea:25:b9:c6:91:a7:e3:a5:b6:97:c5:12:4f:26:
d9:ef:7f:95:4e:2c:ff:7a:cd:8c:67:a6:25:b1:48:
18:16:9b:d7:ea:bc:56:42:d0:05:7c:2a:4d:d5:2f:
ed:fd:8d:06:3e:a7:7c:ee:03:30:86:ff:6c:5e:eb:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:E4:1C:7C:40:63:98:9D:6A:F4:B3:36:DA:63:61:A6:30:0A:B4
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9a:fe:3b:39:cd:d0:3b:d5:1c:ab:bf:62:d9:be:0b:bf:c8:
fb:ae:77:22:6a:4c:41:65:26:ec:19:16:bf:86:f9:e3:ce:95:
4d:fb:41:8e:dd:98:c8:08:44:52:66:64:c0:2e:fd:14:76:b1:
66:7a:66:bf:57:b5:ba:18:36:fa:c3:7e:fa:ac:cc:19:ab:bf:
68:69:0c:30:b9:38:3a:76:2c:7a:12:e6:93:a2:1b:91:4c:e7:
c4:c7:76:e7:7f:30:a1:ce:56:54:90:03:f8:b2:f9:a5:21:55:
af:82:7e:cb:f0:f2:e7:be:a5:bd:5b:f5:4a:d2:df:ee:14:60:
8f:4b:dc:98:cb:a4:15:5e:9d:d2:1f:2c:f4:72:de:f4:6a:f0:
42:bc:28:04:17:84:61:dd:46:80:6f:c0:c0:08:9b:02:e3:cc:
5d:77:83:3c:1e:78:34:49:73:27:ce:56:d9:ee:f7:ce:08:bd:
11:2b:39:ad:99:e9:26:65:45:c9:2f:0a:14:3e:01:37:fd:a0:
42:0a:1a:cc:db:fe:4f:a8:92:c6:0d:5f:fe:7c:52:43:e5:bd:
cc:c6:b5:83:65:69:62:26:d6:a3:dd:93:de:f5:56:13:e5:e9:
88:cc:95:a6:73:e6:db:c8:b0:7f:4f:e9:50:c3:ca:ec:af:4a:
94:5f:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:46:45 2025 by rpki-client