Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: SAqcXlMNAz/3jGofCWleKULsmnRQV8k9AKrXTjU4LdE=
Subject key identifier: 8E:F1:29:43:D4:04:22:47:32:22:9E:EE:04:55:5E:75:8A:F3:B3:D8
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 01976EF4EC10CD656BE65F8EECA2750FDF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 14F4
Signing time: Sat 14 Jun 2025 15:00:34 +0000
Manifest this update: Sat 14 Jun 2025 15:00:34 +0000
Manifest next update: Sun 15 Jun 2025 15:00:34 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: 6TuKE5d5xkOtmW3+bV09TyoilgC8KAVSbJnjxAqZHg4=)
2: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:ec:10:cd:65:6b:e6:5f:8e:ec:a2:75:0f:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Jun 14 15:00:34 2025 GMT
Not After : Jun 15 15:00:34 2025 GMT
Subject: CN=8ef12943d404224732229eee04555e758af3b3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:29:16:39:8c:d7:77:00:e8:d6:f5:0e:05:
a1:a1:58:f2:40:0d:49:ef:c0:b2:d2:f6:d7:1f:ff:
cc:f8:33:45:9a:de:37:cd:b3:aa:d5:9b:35:e6:11:
b5:81:9a:bc:f6:da:e9:74:31:8f:71:80:69:3a:14:
91:2b:92:d6:15:4a:8c:43:50:9b:56:a4:ce:37:b4:
b3:87:30:3f:43:ab:c7:6b:40:36:9c:38:51:8b:31:
ed:8b:2c:b6:09:dd:41:61:a8:a9:ac:48:ff:86:ab:
3d:ed:13:a7:dc:f5:64:76:f8:02:44:a4:24:33:0b:
d2:7e:20:8e:a4:bc:34:9e:fb:4e:0f:67:e5:3a:5a:
11:c8:34:20:94:0d:56:1e:a2:6e:6f:b6:7c:81:ea:
b6:ed:7c:4b:71:58:8c:76:e6:24:60:c4:6b:f5:35:
bc:fa:65:c2:f3:d6:ea:2e:2c:ae:d0:57:c8:71:68:
16:c0:ef:ad:aa:97:06:fc:52:26:7e:8e:b0:a8:86:
bb:63:b1:b4:43:6b:d5:2f:e6:91:2d:5f:cc:af:57:
df:20:7d:28:ec:af:2d:33:b3:53:44:4f:53:36:67:
09:04:d1:29:cb:04:4c:bc:bf:6c:03:33:89:2e:e2:
67:f9:20:3a:89:1f:1a:77:82:08:42:bd:d9:66:be:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F1:29:43:D4:04:22:47:32:22:9E:EE:04:55:5E:75:8A:F3:B3:D8
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:3d:85:4f:b8:67:92:6d:23:6c:83:fb:c1:ae:7d:59:16:
ed:82:a5:34:fe:07:64:77:de:37:c5:62:59:89:61:38:09:57:
e3:77:f9:3c:73:86:ad:56:45:7e:51:de:a3:84:2c:96:30:8a:
b7:5a:37:c2:9e:59:e6:8b:d9:01:5d:65:7f:14:0f:9b:04:3a:
ea:21:25:7d:cb:8c:ec:fb:07:8f:ca:d9:35:e9:19:59:18:ba:
2b:7b:13:98:83:23:80:9c:ef:74:59:3f:3b:d1:78:44:b2:fb:
21:a7:a7:5a:60:70:3d:11:d7:9d:ef:e9:b3:8c:80:f9:31:77:
c5:98:07:18:35:4b:fc:de:f0:9b:af:0d:36:8e:82:71:87:dc:
b0:37:53:5d:6d:6f:9b:d8:a0:ff:28:cb:ef:97:4b:4a:4e:92:
0e:2f:af:da:b9:a7:40:34:d0:8e:88:f3:c3:68:f6:aa:0d:e9:
cb:85:1b:a5:42:78:a4:52:fe:bf:4e:59:36:4c:eb:e8:8a:dd:
ee:f2:e7:fa:57:86:97:29:2f:01:c3:f5:1b:a8:53:f8:cc:a8:
ea:06:2f:12:45:ae:54:82:6a:dc:8f:3d:87:ce:88:69:60:28:
4e:1a:2f:79:69:5d:7f:0c:e2:d4:5a:d9:fb:53:2e:48:71:64:
7d:e4:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:26 2025 by rpki-client