Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: sZA5K3YIMyw/5EtnT0hQFkr4pjpcvCldEz7UOPnzg2I=
Subject key identifier: A7:BE:47:86:3B:5A:3A:D5:D4:60:84:36:01:FC:DC:29:11:A5:F2:7D
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01976C62203E50B1D55A39B30BCA2FE59EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 05DD
Signing time: Sat 14 Jun 2025 03:00:59 +0000
Manifest this update: Sat 14 Jun 2025 03:00:59 +0000
Manifest next update: Sun 15 Jun 2025 03:00:59 +0000
Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: tpoUPK/4N7bZGL860ottWHpf23o86k9Y9A2+8QcjwDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:20:3e:50:b1:d5:5a:39:b3:0b:ca:2f:e5:9e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jun 14 03:00:59 2025 GMT
Not After : Jun 15 03:00:59 2025 GMT
Subject: CN=a7be47863b5a3ad5d460843601fcdc2911a5f27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:95:7a:1d:91:54:5d:37:8b:e5:fc:8c:a8:
7a:9b:e0:04:38:00:10:da:75:2f:7b:15:6b:07:66:
eb:d0:12:59:f2:bf:5d:7d:af:91:63:ba:ba:6e:de:
7b:2f:e9:93:87:e9:57:f1:dc:0c:22:74:a5:58:72:
a9:20:0a:f9:fb:96:5b:79:f5:f4:09:26:60:93:21:
9a:65:64:2c:fa:cf:67:fb:31:dd:97:57:fa:3c:a8:
26:b8:6c:c2:1c:4f:41:41:22:21:0b:d8:35:43:4b:
b9:ca:92:72:5e:9d:f2:36:f7:1a:97:e0:0b:e0:0d:
65:b8:71:8a:26:92:77:ad:40:f6:30:88:37:84:ab:
ca:33:4c:da:cd:c8:1b:d1:eb:27:a2:6c:ce:3c:eb:
b6:ea:b9:e6:35:93:0a:a6:e8:32:5b:3e:a2:44:90:
fc:06:6d:31:12:5c:81:f6:bc:cd:c3:a4:a9:bd:a6:
5d:8f:90:07:e9:9b:5e:e0:86:52:b3:53:24:dd:0f:
37:66:ab:75:a5:ce:fb:ff:af:bf:b2:53:5c:c9:d6:
e2:57:73:8e:93:ff:73:ca:82:9d:df:74:fa:3d:33:
0c:0c:82:af:d6:da:bc:fd:d4:0f:2a:fa:ad:aa:f7:
08:92:30:aa:b2:74:67:12:f1:8c:21:9d:90:9e:ea:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BE:47:86:3B:5A:3A:D5:D4:60:84:36:01:FC:DC:29:11:A5:F2:7D
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:01:b0:f2:b8:57:d2:ae:aa:ad:ce:aa:b8:bd:b7:e8:c1:ee:
d8:19:6a:39:dd:14:01:5e:13:34:3b:c4:a3:48:fb:6d:56:34:
0c:b9:ed:aa:ca:65:4d:1f:a0:f0:b7:b4:19:64:bb:96:03:19:
82:f3:be:2e:7d:61:85:de:ab:41:cb:76:78:05:c9:e9:c3:6a:
a3:bc:11:ba:7e:80:ce:23:a6:90:34:c9:96:14:9c:c6:45:18:
c6:d8:47:a9:3f:0b:9b:3a:e4:11:b5:3a:f0:c3:1a:03:a1:fb:
15:2f:3d:06:bb:12:72:9d:c0:ea:cf:40:1f:1c:a9:6b:22:e6:
86:b7:72:b9:20:0d:50:ab:9e:5c:75:54:d1:79:e5:8d:c5:37:
2a:b9:72:89:ab:23:af:84:06:55:2d:e2:29:fa:5a:2f:c3:76:
c5:38:4e:7d:7a:59:93:3d:a4:11:9f:68:e3:b2:6f:3b:ee:29:
88:0f:bb:89:a0:01:1f:70:85:45:f5:68:42:18:12:09:52:2c:
3a:2d:5f:a0:0e:3b:32:78:5d:39:0a:4c:db:22:b1:04:ef:5b:
fc:71:c4:be:85:5f:37:96:55:e8:1f:f4:13:39:0e:7a:08:32:
4e:97:fe:4a:bf:73:0b:98:9b:fd:28:e1:e2:76:82:56:77:74:
e4:a4:fa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:11 2025 by rpki-client