Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: Q1ZJ2ZPgAGrQjleBrMVs/7Ao4KPq5duBUbsHbjYc8Jw=
Subject key identifier: 0C:A6:79:55:04:5D:F3:49:55:24:E6:54:CC:55:A0:7A:F8:94:B7:8A
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 01976C98E72788D4C6BF94E9E6C2DB2E1536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:49 +0000
Manifest this update: Sat 14 Jun 2025 04:00:49 +0000
Manifest next update: Sun 15 Jun 2025 04:00:49 +0000
Files and hashes: 1: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=)
2: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: IsTHqgjJC0mxjoszrEpCCVznY66DCL20xmNqhSLjLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:e7:27:88:d4:c6:bf:94:e9:e6:c2:db:2e:15:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jun 14 04:00:49 2025 GMT
Not After : Jun 15 04:00:49 2025 GMT
Subject: CN=0ca67955045df3495524e654cc55a07af894b78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:ab:96:fc:52:0b:f1:26:80:7b:0b:53:65:
82:1f:f0:73:be:01:0b:23:c3:eb:ff:86:b4:12:84:
b8:34:d0:c6:55:48:db:3a:d7:99:82:08:b6:f0:8c:
32:bb:d0:c4:b1:ac:45:e4:3f:88:a4:03:d1:3c:31:
b4:c7:56:6e:27:ba:c7:c9:8a:4c:23:8e:dc:cb:bf:
59:cc:ff:78:3b:fc:46:1a:be:77:67:ff:7d:df:aa:
37:d1:0d:6e:f8:d9:be:75:aa:94:a4:5d:80:03:d0:
73:ae:6a:73:83:65:e6:15:7e:c9:b0:4a:13:cc:0b:
b8:4f:d5:54:ef:06:2a:16:26:ba:a9:67:91:40:6b:
12:1b:7d:40:47:45:98:17:c8:0d:cf:22:af:67:9a:
79:77:0c:cf:25:69:fd:1d:d3:dc:89:d9:cb:a1:1e:
f4:63:4f:3b:de:fb:62:a9:40:2d:75:82:86:ef:12:
ce:4c:a8:c9:08:9e:15:69:3b:70:38:b4:2a:1e:02:
8d:1b:4d:21:33:03:cb:73:27:01:6f:d0:d6:3c:b5:
1b:ba:bb:bf:3f:19:73:a8:b5:eb:4f:ee:0e:fa:f2:
e9:a1:b6:2a:c3:e5:33:eb:47:86:2d:5a:40:ad:f0:
8b:87:af:74:f2:ce:2c:58:c5:f1:5f:a4:e2:83:57:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A6:79:55:04:5D:F3:49:55:24:E6:54:CC:55:A0:7A:F8:94:B7:8A
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:94:2e:7f:64:70:89:50:03:3b:15:1d:2b:8e:29:c9:54:80:
f0:b1:e4:9c:ca:48:e8:9e:56:ef:1d:40:f2:77:41:fc:e6:34:
f1:a5:9c:28:c3:95:d2:4b:4a:d1:b4:af:77:93:0e:d7:c9:9f:
ed:47:a7:0f:fd:5d:2c:e8:ee:c7:a0:47:4f:67:72:93:a5:34:
2e:87:d7:f0:c3:ef:67:c3:52:a2:34:56:d7:09:b2:63:14:4f:
78:7f:6e:99:ab:c6:85:81:b2:9f:54:dc:c4:4f:0a:5a:08:03:
eb:58:62:f3:1c:0c:0a:5c:8c:e7:69:3a:d8:4c:62:85:b6:09:
6f:57:ba:51:fb:cf:44:a0:2d:0c:f0:aa:c2:4e:51:46:3c:80:
bc:50:10:d7:31:b5:f1:e0:6e:55:0c:3a:f0:57:db:f1:7d:89:
d3:a2:c5:e5:3e:2c:a2:5f:53:76:23:8b:74:79:07:68:cd:b2:
13:99:7b:0f:61:53:3a:c3:36:f8:57:fe:2e:fe:fb:28:9c:ce:
74:bc:7d:c7:f4:c5:1d:c9:a9:53:e6:13:5a:63:85:fd:6e:8a:
6d:50:dd:b0:ec:56:a0:40:6c:84:ca:c9:35:a6:1f:2b:00:df:
c3:2b:bf:66:31:90:f2:e5:1b:a5:56:28:8c:03:b5:ba:e6:2b:
8d:e9:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:40 2025 by rpki-client