Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: wcrrzkD4+aUerkKwq4ksR/zrn9vKyG3s+kAKVn1+d0Q=
Subject key identifier: A7:9D:F5:91:FD:49:0F:5A:03:AF:16:BF:62:EB:BC:B9:EF:44:6E:FA
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 01976F630F32D72560D4D9BFCA3B78630BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 09E9
Signing time: Sat 14 Jun 2025 17:00:52 +0000
Manifest this update: Sat 14 Jun 2025 17:00:52 +0000
Manifest next update: Sun 15 Jun 2025 17:00:52 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: h16+/9fcGITma3rJo9oC/dEcovm1XPVX85QGEddz9Ac=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:0f:32:d7:25:60:d4:d9:bf:ca:3b:78:63:0b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jun 14 17:00:52 2025 GMT
Not After : Jun 15 17:00:52 2025 GMT
Subject: CN=a79df591fd490f5a03af16bf62ebbcb9ef446efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:93:3d:64:38:ff:a3:3e:e9:26:e2:26:e4:b1:
7c:47:01:c3:14:af:90:36:b5:8e:1c:04:e0:86:b8:
c1:9f:76:ed:4f:79:d2:53:3e:50:04:39:65:25:10:
58:8f:a5:70:1d:b5:58:ce:e0:47:78:ab:0d:67:62:
d0:60:62:2d:17:3e:15:95:4f:23:d0:ed:ed:49:2d:
08:7a:16:e8:67:f2:a1:d6:f8:58:f3:50:a5:fc:34:
8a:52:17:af:ad:02:86:8a:8a:bd:08:c4:22:fb:63:
27:06:65:9a:ed:c4:e9:4b:0f:01:b9:5f:14:ba:c1:
a4:f2:da:e8:57:75:22:ad:1d:35:0a:cc:de:e4:6c:
19:75:5a:78:26:d6:36:60:00:f0:76:4d:33:46:7c:
d9:5a:1b:3a:82:0c:43:32:1c:6a:27:8d:ee:a9:48:
bf:92:5f:8a:e0:e0:10:e2:17:30:cd:c8:44:b3:3e:
a0:1b:28:cf:a1:f2:65:12:70:dd:cb:f6:3f:60:cb:
0f:ad:6d:04:c0:bc:1b:4f:e0:fe:87:4f:c6:f9:4d:
f2:d3:47:54:38:fd:be:6f:95:86:9c:d4:f0:74:5b:
10:3d:d3:a4:50:42:81:a7:94:d5:5a:dc:4e:2d:1a:
1b:07:de:4b:11:fe:98:13:8c:fe:41:06:22:c2:ce:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:F5:91:FD:49:0F:5A:03:AF:16:BF:62:EB:BC:B9:EF:44:6E:FA
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bd:a2:b6:34:23:ef:01:ad:a1:45:bd:a8:2c:0d:27:97:be:
8c:ef:f5:17:1b:7f:0d:98:0f:11:48:ca:49:f6:9a:ea:ad:0b:
80:94:43:73:1e:e1:3c:7f:d8:52:62:fb:ab:61:0c:15:af:3b:
ff:a2:0f:bb:e7:c8:05:7f:9b:99:af:08:a2:1a:8f:04:a0:16:
2a:15:de:b4:e7:a2:09:d4:ab:38:1b:0c:92:50:6f:33:8f:3a:
fa:97:8d:6b:c7:4b:e5:e9:5c:83:e8:ba:c8:ba:aa:c6:4b:f4:
3e:73:0c:fe:84:97:43:44:df:9c:a2:d0:03:26:c6:b2:a2:44:
ae:0c:60:08:a2:f3:46:3f:1a:c7:42:be:fa:9b:ea:b7:e1:e5:
60:e6:90:b5:ea:78:49:73:9e:43:20:e0:5e:8d:2a:10:3f:5a:
74:83:f8:66:39:50:1f:72:8b:4f:0b:24:f3:40:fa:07:0c:31:
94:53:07:bf:b3:e8:43:74:96:18:ec:bb:5c:af:0b:54:68:e6:
a5:ff:c7:fe:78:0c:10:1f:69:fe:e2:02:58:2c:30:14:37:56:
ef:a5:0c:98:2f:54:54:00:bb:bb:8f:cc:b9:51:6a:cd:a8:9e:
db:56:4f:24:f0:0f:52:21:34:01:2d:23:93:fb:d4:92:c7:47:
97:a5:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:07:24 2025 by rpki-client