Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: DYhZKZYF9y7zBTbgzXszcZ2R9uQKH1VHswm4hXoM5Wo=
Subject key identifier: 3F:DA:4A:0F:6F:F2:76:9C:9B:51:B5:AF:3D:25:DF:F5:BA:A3:92:F7
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 01976A05E53EA968F25E41CD3FB483678DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 06B5
Signing time: Fri 13 Jun 2025 16:01:00 +0000
Manifest this update: Fri 13 Jun 2025 16:01:00 +0000
Manifest next update: Sat 14 Jun 2025 16:01:00 +0000
Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: e6KwHV1cTzGXfLjKAWVl3gmIXDFM+jEOv/oU8jO2ZTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:e5:3e:a9:68:f2:5e:41:cd:3f:b4:83:67:8d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Jun 13 16:01:00 2025 GMT
Not After : Jun 14 16:01:00 2025 GMT
Subject: CN=3fda4a0f6ff2769c9b51b5af3d25dff5baa392f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:88:89:1a:29:4d:09:39:e4:9d:21:39:1e:
6e:b2:08:c2:aa:31:bf:50:38:7d:5c:11:b9:d7:30:
35:56:40:4e:0d:b9:4d:17:4d:bd:dd:c5:ae:52:3a:
3c:e1:4d:ef:9d:04:47:c3:15:db:08:bb:5c:19:ba:
45:82:06:51:88:a2:dc:e7:a6:cd:60:2d:dc:ec:8d:
ef:4d:76:1f:2b:23:cd:45:43:22:9e:01:48:5e:c1:
79:27:8c:39:39:c9:48:95:91:b9:2d:46:20:92:d8:
37:46:a4:cd:64:37:bf:67:48:cb:52:92:e0:9c:c7:
54:e3:3f:fd:8a:b5:f1:f1:68:87:29:9f:42:38:d8:
10:29:0a:25:b6:0c:55:03:87:49:76:fd:af:01:7c:
5d:25:8b:36:09:22:4b:ee:f8:35:8f:85:50:cc:9f:
79:cd:76:5d:7b:8b:d6:4c:a8:44:7e:27:0c:d7:23:
4d:02:45:45:c0:88:32:1a:39:d1:1c:17:3b:a4:d5:
af:d5:1a:ee:c0:0e:4c:d2:33:e2:c1:76:e1:c8:0e:
54:61:ec:04:5f:5d:8b:56:d6:e0:27:96:8b:fb:2e:
56:16:e8:be:3b:df:5d:d0:d6:cf:5a:c9:fa:40:7f:
f6:ea:33:7a:aa:e4:84:60:98:53:69:e1:f2:13:80:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DA:4A:0F:6F:F2:76:9C:9B:51:B5:AF:3D:25:DF:F5:BA:A3:92:F7
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:64:b5:32:bb:f5:3a:77:73:58:75:f6:55:93:02:41:bd:2a:
39:b4:50:0f:f2:35:24:88:fd:4e:e3:e6:9e:62:26:01:d8:60:
74:7b:99:f3:a5:b5:dc:93:1c:bc:40:57:93:33:a6:c2:1c:67:
7d:56:47:b6:a5:05:b7:d5:39:2d:11:a8:a5:bc:ea:b7:c9:3f:
9c:1e:6b:14:70:78:15:c6:d1:b1:ce:28:b8:07:63:b0:c2:3f:
a1:58:be:c9:47:b9:87:42:87:bf:6d:5d:8f:eb:e6:7d:3c:18:
ab:65:71:98:10:39:47:45:d9:8b:a2:3e:cc:16:75:db:d0:7d:
ca:80:45:68:e5:b3:ac:0d:f3:d6:1a:7f:6a:e9:66:03:e6:44:
1f:f6:66:95:39:82:4c:e0:9c:f7:d9:84:ba:5f:e4:05:74:e7:
3b:14:c8:38:f5:10:7c:17:fa:bb:bc:08:08:48:56:1d:51:98:
bf:79:80:cc:8a:f7:d7:23:5b:fb:8e:25:bb:98:44:40:01:ba:
f6:96:c9:c4:22:40:60:8b:76:af:e4:c2:47:c0:12:3c:0f:50:
6f:a7:04:79:11:7e:6c:23:1d:d9:b2:5b:e2:4c:16:76:42:64:
fb:3a:9b:1b:5d:38:3b:98:d3:0d:f6:9e:35:fc:db:d6:34:a0:
aa:25:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:40 2025 by rpki-client