Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: sZE6EwJLUnLmlgVyIuzmkh4Kz5QVXztvq7eW0g7dauQ=
Subject key identifier: AE:60:1C:6D:FB:63:86:73:E5:9A:7C:BC:A0:24:17:EC:EB:03:42:E9
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019775D2F4A3F50B6BA98A0ED4FFBD1528DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 153D
Signing time: Sun 15 Jun 2025 23:00:48 +0000
Manifest this update: Sun 15 Jun 2025 23:00:48 +0000
Manifest next update: Mon 16 Jun 2025 23:00:48 +0000
Files and hashes: 1: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=)
2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: /P2YUm7mT4wHZ/6a5isJZkQAUMJTivQjignGzhL4MpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:f4:a3:f5:0b:6b:a9:8a:0e:d4:ff:bd:15:28:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Jun 15 23:00:48 2025 GMT
Not After : Jun 16 23:00:48 2025 GMT
Subject: CN=ae601c6dfb638673e59a7cbca02417eceb0342e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:1d:2b:85:5f:89:e8:ae:33:39:7e:af:35:
35:21:47:e5:ec:a8:d0:8c:72:60:9e:64:e9:f0:2c:
dd:ae:6a:44:f6:9f:4f:c0:34:03:f0:8a:0d:aa:ae:
10:92:6a:56:89:b6:f9:99:26:10:19:11:a6:5e:67:
0f:41:ca:c4:ee:21:fa:58:ac:77:bc:1a:9f:2e:1b:
a3:1c:87:73:3f:9d:e0:c9:79:cc:59:d9:f9:af:be:
71:ae:5e:90:98:24:5d:0a:71:c9:26:d4:54:de:0f:
dd:f3:2e:e5:5e:39:c6:0e:28:92:70:dd:43:a9:c8:
5b:29:1a:3e:3f:51:bd:3b:62:8a:03:09:1f:5e:65:
f7:2c:47:18:5c:eb:5b:a5:a3:64:ba:1f:06:06:b8:
1f:b0:d0:14:3c:7f:e9:31:c3:26:52:4c:fc:52:94:
49:fd:7c:0b:98:c0:62:0d:f4:e7:98:06:63:9b:2e:
1e:70:35:b7:21:ae:c1:3a:53:e6:10:15:2e:7e:a0:
32:4d:a3:c1:af:b2:1a:af:73:d5:eb:60:f0:cc:21:
07:ba:6f:7e:83:af:b6:b9:ae:62:55:c8:10:26:78:
1c:4e:b2:27:af:10:d1:2c:ce:04:e0:9c:9f:b1:50:
1a:3d:f8:40:8c:fc:4b:dd:c0:93:bc:b8:12:73:90:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:60:1C:6D:FB:63:86:73:E5:9A:7C:BC:A0:24:17:EC:EB:03:42:E9
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0e:ee:ca:ca:9a:3f:c9:91:7a:6a:fb:e6:99:95:fd:34:87:
a7:c3:b1:a0:4e:00:c9:02:6e:22:21:b2:87:47:9c:01:df:57:
25:e3:f5:41:80:5a:00:58:8c:c5:9e:64:72:fe:8a:78:be:85:
a0:de:a0:3a:fe:0a:6e:aa:2c:9a:2f:dc:f9:fe:65:e1:24:7a:
06:c8:86:b7:cf:ae:78:00:ba:ce:31:08:f8:26:89:14:10:27:
df:65:77:b4:0f:4e:1e:92:11:f3:ce:34:78:4f:56:d4:56:da:
75:b9:ae:c7:eb:03:92:52:fb:4b:e2:9f:32:ea:e8:da:14:98:
4c:af:d6:cc:4d:22:7e:35:24:16:81:5f:cc:6a:76:22:75:0f:
95:92:3e:42:eb:95:50:c5:12:0c:4e:be:3f:2c:6d:d2:62:11:
79:25:8b:e4:a0:7b:05:77:61:e4:9b:3d:5e:fd:d2:bd:2e:80:
f1:3d:52:d9:60:a7:17:21:79:e9:ac:1a:40:63:96:2d:ad:ab:
ed:2d:20:d6:27:2c:70:9f:e4:9f:82:b8:42:e2:61:2f:35:2d:
c9:3f:17:e1:50:a6:0b:21:c6:53:39:37:12:56:13:7b:6d:bf:
5a:b0:fe:66:0d:c2:eb:f3:06:06:1c:99:54:8c:7e:3b:90:da:
a1:43:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:41:56 2025 by rpki-client