Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: KeAD98c53Lyp//NSonSYYUcxV80LkFXQtl1SgQTfuag=
Subject key identifier: 59:7D:1D:98:00:2F:C8:E6:19:98:6F:64:2A:D1:97:76:EA:A1:E3:C3
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 01976CCF782C22C809FB01E9E3DDC1AA1582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 05:00:25 +0000
Manifest this update: Sat 14 Jun 2025 05:00:25 +0000
Manifest next update: Sun 15 Jun 2025 05:00:25 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: /K5QHezNBJKjAWK57NmZP8vBDgumg2aBtq2di6M3uMI=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:78:2c:22:c8:09:fb:01:e9:e3:dd:c1:aa:15:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Jun 14 05:00:25 2025 GMT
Not After : Jun 15 05:00:25 2025 GMT
Subject: CN=597d1d98002fc8e619986f642ad19776eaa1e3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:6b:91:9e:16:05:df:6c:0e:e8:b2:eb:51:
43:6f:8e:76:1e:61:5a:dc:d7:54:e1:56:8a:dc:e9:
47:d3:1f:39:02:14:e2:3c:d8:72:9c:4b:c4:cf:22:
03:36:41:9f:f7:1b:f2:4f:1e:a3:8e:f9:61:74:b9:
1c:7c:e3:56:f0:76:45:4a:61:60:c7:02:32:c8:51:
a4:9a:3c:ee:a8:60:8e:c9:53:87:5b:3a:01:12:3d:
4c:e0:d2:28:10:56:b9:0f:bd:31:9e:61:4c:19:a2:
58:7f:e3:43:17:bf:ce:0f:89:a6:53:06:e7:35:aa:
4b:69:e1:e7:23:ea:48:97:88:17:48:11:e3:4b:0f:
92:54:69:21:59:82:3d:b1:0b:e2:0e:e1:1f:bf:87:
49:db:9e:60:f7:56:19:a6:24:52:7b:bd:7d:de:2b:
e7:cc:2d:ce:f3:a7:07:07:1f:50:6f:b5:4f:3a:e9:
c3:3b:4a:3e:0e:21:0d:29:3e:e9:b8:21:59:3a:9f:
58:c7:d9:8d:fc:2f:8f:20:56:eb:f2:a3:bb:b1:b8:
c5:9c:b9:26:db:c8:42:fd:ea:c9:25:56:df:47:45:
60:52:46:ac:95:51:c0:ff:d3:ac:10:b6:df:95:78:
bb:32:a3:7a:bf:f2:56:cc:94:1f:6f:17:aa:7d:d9:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:1D:98:00:2F:C8:E6:19:98:6F:64:2A:D1:97:76:EA:A1:E3:C3
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7a:cb:4b:33:4a:54:12:35:62:d9:69:c8:78:f2:7f:da:d8:
bf:41:2e:00:f4:66:b8:af:51:61:d5:86:4b:b0:de:20:2d:f7:
f7:49:7c:25:82:8c:04:81:f8:96:a5:a1:78:d4:60:57:eb:49:
c2:5b:38:4b:44:ad:43:e5:c4:85:30:d0:d5:21:76:e0:e7:17:
1e:0c:28:38:70:8d:eb:8c:29:51:f9:13:eb:24:2c:ae:32:51:
f5:8e:43:4c:de:96:dc:ba:5b:83:a3:fe:3d:7e:b5:85:05:9f:
67:01:7b:78:7f:f7:fb:90:91:38:3b:42:50:a2:e9:15:6c:a7:
b8:07:9f:65:10:ea:53:8e:d4:2d:da:02:30:52:11:d9:79:59:
60:93:e0:ee:18:34:8a:c6:48:43:51:0b:17:4f:40:ff:cb:65:
be:7a:27:b5:a0:26:4b:ea:f3:14:0e:da:7d:df:94:1f:07:a6:
57:63:46:76:a4:2c:bb:e3:73:f9:82:3c:6e:a7:80:4c:85:29:
67:54:24:42:d3:c2:5f:f7:75:c8:99:90:00:86:2f:dc:fe:4c:
d7:ec:23:e2:54:f5:ae:ac:76:57:5f:00:e1:99:ff:62:9b:41:
57:98:4e:49:1c:65:da:85:9f:fe:2b:42:3a:8a:5e:f4:91:19:
c2:c6:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:42 2025 by rpki-client