Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: K7U1ywsNWRCzwGQPh9AV/o+8GrpcSJzlq4p+OBatdus=
Subject key identifier: 09:80:EB:1F:A4:61:E1:70:A0:02:C8:D9:55:BF:25:53:60:62:7C:69
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 01977E3155AF173DE9F070C08A4EC8AF5496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 1236
Signing time: Tue 17 Jun 2025 14:00:51 +0000
Manifest this update: Tue 17 Jun 2025 14:00:51 +0000
Manifest next update: Wed 18 Jun 2025 14:00:51 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: eZnMOOZWeY+bvy7BCrTr8arS9/cijXuM2Wa9ONOMCQs=)
2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:55:af:17:3d:e9:f0:70:c0:8a:4e:c8:af:54:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Jun 17 14:00:51 2025 GMT
Not After : Jun 18 14:00:51 2025 GMT
Subject: CN=0980eb1fa461e170a002c8d955bf255360627c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:64:15:6b:15:2b:6e:eb:ef:bc:01:1d:b1:
a2:44:ca:8f:e5:54:da:4e:42:8d:21:bf:7c:c4:ea:
ef:50:53:85:c2:77:06:13:e1:b5:80:49:94:5e:9d:
a2:9f:e0:69:0b:6b:3d:87:99:91:11:6d:28:13:a4:
dd:f5:93:e7:33:00:00:fa:45:6d:d5:9f:96:0b:0b:
41:92:5c:1b:3e:77:4d:73:54:f7:f6:ca:d6:be:26:
dd:c8:dd:38:df:9b:84:6a:2c:00:a9:b2:a4:bb:57:
3d:f6:f8:05:72:8c:69:57:c9:fa:79:33:f0:47:8b:
c9:da:76:eb:01:e7:d3:a2:3d:03:b4:ee:79:97:0a:
9f:c7:c0:20:a9:c2:af:ae:20:8e:4a:7c:35:f7:51:
66:dc:8e:88:93:d0:37:6d:1f:93:26:0a:23:82:e3:
62:39:96:64:26:04:f1:92:de:44:ff:ed:9b:d0:f0:
d7:24:ac:ea:c2:0d:07:a5:6d:cc:e0:0f:77:68:63:
f3:0a:37:e3:dd:dc:50:66:15:7f:44:2a:67:8e:66:
ef:2d:90:a6:03:3f:18:4f:18:ef:ed:84:94:c9:68:
49:d8:52:de:ab:23:ea:b9:a7:2a:b8:f9:b4:50:6d:
3c:47:54:de:58:9a:9d:e5:a3:d9:22:66:ad:20:3c:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:EB:1F:A4:61:E1:70:A0:02:C8:D9:55:BF:25:53:60:62:7C:69
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:80:7e:cc:f4:f5:d7:43:b8:ff:27:4b:e6:49:1c:d4:a1:26:
7e:6c:c3:00:f1:bc:30:65:73:5d:44:4e:a5:13:13:30:81:89:
33:30:c0:90:2d:e6:47:2e:b3:c8:d5:30:a1:a3:e7:5f:60:5f:
70:0b:b1:ee:11:bd:d6:3a:9b:c2:35:87:70:74:c3:17:ed:06:
91:88:01:bf:20:f7:5b:bb:99:2b:dc:3c:9e:f8:f7:83:57:17:
69:8e:1c:5b:0c:ba:f8:4c:57:8f:60:d2:32:ef:3b:26:ff:39:
2c:36:20:9a:55:18:ed:3f:cd:b6:6f:82:70:69:7b:27:7b:45:
1f:a0:55:a0:54:01:6c:9e:fb:7e:a6:ce:6b:cd:a4:a9:12:66:
33:75:87:d3:ec:8d:cf:d9:9a:f7:07:c3:71:85:55:d0:51:f2:
88:90:0d:73:94:9c:eb:b8:79:db:7f:af:71:82:9c:9b:fa:d8:
55:0c:24:01:d0:3f:19:a0:ab:6d:e1:3a:e0:cb:25:86:97:97:
03:0d:af:3c:7d:9d:42:8a:cb:47:0b:e9:95:c9:2a:b5:23:7e:
6a:63:c3:18:64:ac:30:34:c4:ee:ab:14:9c:ac:d0:65:13:8a:
46:f1:3c:38:6c:14:fe:c6:63:57:fb:be:e5:98:fd:0b:9f:82:
c7:d6:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:21:12 2025 by rpki-client