Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: sm2//nUJJb+/bH/td+d8s12qILakSN/yFQPF50OzeqE=
Subject key identifier: D5:18:E9:B7:86:82:0C:6A:7C:7C:39:89:AD:0C:01:B9:B8:B3:31:A1
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 01977188A67BBDACFCF484EEF9DC28E2CBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0270
Signing time: Sun 15 Jun 2025 03:01:10 +0000
Manifest this update: Sun 15 Jun 2025 03:01:10 +0000
Manifest next update: Mon 16 Jun 2025 03:01:10 +0000
Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: WYrW3RLGu+CRqppKIpvyE5WkXRvW1fWG2eZw7+6B6Ag=)
2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=)
3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:a6:7b:bd:ac:fc:f4:84:ee:f9:dc:28:e2:cb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Jun 15 03:01:10 2025 GMT
Not After : Jun 16 03:01:10 2025 GMT
Subject: CN=d518e9b786820c6a7c7c3989ad0c01b9b8b331a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:60:39:8b:68:0c:ba:cf:fa:51:72:98:2a:
61:06:58:e0:55:eb:70:fd:05:96:1e:b2:82:84:ca:
9a:a9:b2:10:61:bf:0d:14:4d:8f:f7:6b:aa:8b:05:
55:4e:d4:f8:d3:51:43:7a:b1:46:25:7a:68:b0:9a:
3a:38:5a:99:8c:3b:a2:68:e3:c9:cf:b1:53:8f:b1:
8e:44:91:d2:0e:17:ad:b8:f4:40:51:d7:18:f6:39:
fb:84:0b:5f:07:7a:5c:00:f9:e0:5b:8a:db:55:4c:
bf:54:6d:5c:83:9b:47:ef:82:09:88:7f:55:da:a1:
3b:f3:29:83:5e:bf:d6:2d:9a:f4:be:6e:67:7a:8e:
fe:8e:99:87:b5:a7:d8:25:a9:67:dc:a7:3d:2d:22:
e5:9e:1d:8b:31:b4:27:7f:fa:b3:95:01:33:a3:ef:
d5:3f:80:44:e5:d9:bf:c3:0f:eb:07:5b:ab:00:ff:
ce:93:5a:13:cd:77:9f:87:d3:19:a7:8e:f0:4e:e2:
19:95:19:ff:74:42:4e:e6:66:02:89:0b:1b:7a:09:
0e:20:00:e3:5f:63:7c:eb:5a:14:46:46:f8:6e:c8:
42:f9:a8:fd:72:33:60:0d:71:89:28:de:d5:ee:34:
14:fe:bc:25:16:33:60:c2:b2:ca:69:26:78:55:33:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:18:E9:B7:86:82:0C:6A:7C:7C:39:89:AD:0C:01:B9:B8:B3:31:A1
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1c:75:d3:1b:3e:58:6e:f9:21:5a:9f:8d:53:3c:0f:c0:25:
e0:7a:8b:a3:80:ad:94:7f:d5:b4:85:2f:a5:a6:7a:3e:ca:06:
8f:ce:65:00:00:5e:21:cc:bf:3e:8e:c7:e4:64:70:b7:14:d2:
f2:f8:e8:bd:eb:40:be:85:e4:2a:db:79:9f:65:de:a9:6e:d2:
33:bf:0c:10:7b:0a:02:db:b4:ab:86:45:96:f3:cd:c4:6f:65:
15:83:89:a4:8a:79:4a:89:17:34:2d:7b:4e:b2:7b:bc:fb:c7:
bf:d1:19:4b:15:af:40:64:c8:1a:8e:2e:0f:5b:0f:e8:61:9e:
44:11:ee:a1:18:23:41:38:7a:fc:4a:41:3a:db:46:7d:7b:92:
a4:df:31:6d:64:ab:c9:67:fb:38:9a:19:84:bf:8b:12:2b:41:
8f:b3:38:de:73:5f:26:ff:97:e0:1b:c8:5d:8c:25:32:20:40:
f8:b3:53:a0:57:28:0b:30:03:48:81:61:6e:c8:e0:d3:24:72:
ee:0e:b4:78:8c:13:32:0e:a2:f3:02:2c:39:b4:c8:94:40:48:
9a:cb:2f:f7:f6:b5:08:bb:8b:b6:c9:c3:c0:57:ba:12:98:7e:
4f:42:85:f3:13:d2:7a:09:24:96:9d:04:54:f8:82:3d:17:d3:
9d:8b:78:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:52 2025 by rpki-client