Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: NqysVwlxEwB/a9gEowNJyYrKKNsyDaK0+0vFVL0YKoU=
Subject key identifier: 25:D0:46:52:7C:98:A8:08:8C:08:3E:6B:6A:9F:22:05:8D:A3:66:85
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 01976C623BAB8670F3899B789B60B227C267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 07F0
Signing time: Sat 14 Jun 2025 03:01:06 +0000
Manifest this update: Sat 14 Jun 2025 03:01:06 +0000
Manifest next update: Sun 15 Jun 2025 03:01:06 +0000
Files and hashes: 1: ET2huy81m3aucqPbuMYcz_TF2tw.roa (hash: E/ipcayMB6DPjVGiBr8hCFyBMlmTehPjlv7rgttgSjU=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: vSblef/yQzLRc3EZ/V1MjvT41d2FgH1oHq6l/YzkB/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:3b:ab:86:70:f3:89:9b:78:9b:60:b2:27:c2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Jun 14 03:01:06 2025 GMT
Not After : Jun 15 03:01:06 2025 GMT
Subject: CN=25d046527c98a8088c083e6b6a9f22058da36685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:15:ff:6a:51:23:9c:98:65:1f:8e:8f:9f:
e5:be:48:a7:a4:17:84:94:10:a0:d0:7e:7e:2a:73:
c5:34:85:4d:39:25:f9:42:71:88:27:32:4e:8d:26:
d1:dc:d8:c7:93:c9:fd:54:32:11:64:58:03:8d:67:
f1:a3:8e:b8:0c:f1:24:40:2e:37:e9:58:57:98:7f:
dc:81:21:fb:97:fa:b0:c5:ad:8c:21:ba:48:62:4d:
33:27:43:32:fe:46:62:b6:e2:9c:64:4e:41:0d:3e:
76:c8:76:7d:6d:9c:8b:44:53:eb:a7:6b:a2:8d:9a:
ac:8d:09:88:95:93:d9:ab:f8:3a:50:69:5c:af:4e:
39:bf:5a:f1:cd:35:dd:d2:15:1f:f6:26:7f:d6:4a:
b5:a6:8c:85:84:f5:ae:f2:d2:3e:48:ac:72:46:a2:
89:15:dd:60:c4:10:7a:c9:5e:4d:ba:61:cb:8b:cb:
d1:5a:cb:c8:80:95:0e:e2:93:64:75:b0:78:cb:dd:
1c:f8:3d:7d:be:78:30:fb:37:09:be:50:d6:c5:00:
13:6a:3f:38:8c:5f:e4:2b:f7:44:61:f1:70:a5:b5:
6c:9f:88:88:94:8f:bf:62:4d:f9:3d:27:8d:f7:83:
b1:13:d0:e5:c6:5c:54:36:2f:48:96:a5:46:5a:71:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:46:52:7C:98:A8:08:8C:08:3E:6B:6A:9F:22:05:8D:A3:66:85
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:37:9b:fa:ed:eb:9a:80:64:96:d9:19:e4:93:09:16:5b:1b:
c9:a9:c4:36:6f:37:e6:52:e9:45:96:c2:90:0b:18:99:16:4b:
44:f9:d6:b0:35:c3:68:da:f9:f6:7e:91:43:a0:d5:5f:20:f9:
a8:ca:e4:03:50:bd:ec:9a:59:60:0b:6e:53:03:84:4c:fc:f1:
43:73:07:0e:4a:8e:67:ea:bd:33:b0:84:fd:7d:22:db:25:f1:
ba:0f:d4:bc:24:68:06:48:d6:7c:a7:47:dd:a4:9d:f2:83:48:
4f:83:d1:e4:d6:02:0d:67:be:a3:d4:ac:4f:1b:ed:e8:a7:bc:
c3:d9:b6:51:a6:3e:b0:7a:4f:5f:6d:0d:f9:a0:9e:1a:e3:99:
97:1f:58:05:11:95:d0:f9:81:51:47:b4:70:06:28:d1:30:34:
3a:e3:78:8c:1f:0c:fc:4d:71:c0:f7:38:c5:9c:d5:d9:a0:80:
ab:2a:0f:9e:25:36:d2:06:4a:78:02:66:23:55:18:3a:44:44:
04:2b:7d:ef:5a:8c:41:a5:6c:8d:68:e6:40:28:01:77:4b:85:
35:16:5a:15:da:d7:e0:2a:75:4d:86:73:94:11:a6:a5:fe:fa:
a6:a1:b9:68:1e:fa:fe:30:dd:49:e8:88:13:7e:06:ee:9c:9f:
71:b9:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:05:13 2025 by rpki-client