Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: GINdHxbjQOZ+TrjATlkWXPVE/iQxCWLVU8AjuJNx0MQ=
Subject key identifier: B6:F9:FD:A2:50:9F:A6:8B:9B:36:D2:1B:F2:2D:FF:57:E8:2A:34:D8
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 0197827BEC11A7732FA4E5894A09CD50DCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 152F
Signing time: Wed 18 Jun 2025 10:00:48 +0000
Manifest this update: Wed 18 Jun 2025 10:00:48 +0000
Manifest next update: Thu 19 Jun 2025 10:00:48 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: Ln+M3oLd+I2Pj4QrV4UhVdcEjRGy6dAmLFHXwXeRdqI=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7b:ec:11:a7:73:2f:a4:e5:89:4a:09:cd:50:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Jun 18 10:00:48 2025 GMT
Not After : Jun 19 10:00:48 2025 GMT
Subject: CN=b6f9fda2509fa68b9b36d21bf22dff57e82a34d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:46:e8:73:d6:94:c6:69:17:e3:3a:18:3d:
83:57:9c:29:83:ca:a4:7c:d4:58:c6:bd:59:0c:33:
05:91:fd:50:bd:2d:7f:89:b4:9c:2a:57:09:91:64:
5d:e7:b9:23:c8:7b:d5:a1:b9:c8:a4:89:c6:41:e4:
be:cd:54:79:d9:41:43:dc:c3:10:34:43:08:25:6a:
98:20:80:33:e2:aa:6e:88:64:0f:ec:05:ce:53:8d:
9d:3f:ff:f6:bf:c9:52:5a:ed:2e:4c:5c:2a:be:8d:
8b:44:a3:3f:48:13:ce:5e:42:d1:c9:f5:6b:12:7f:
05:45:76:23:b7:b8:0c:fc:6b:be:54:67:d5:b8:df:
d2:63:a1:82:7b:85:05:82:24:5c:3e:e2:23:06:8e:
8d:56:bb:66:99:05:b3:0d:b5:94:96:5a:1e:21:5c:
a9:74:24:fa:41:3b:70:5c:9e:d7:ab:39:af:b0:54:
f2:e6:cc:1f:44:93:d6:f3:b2:ac:8e:9c:1d:5a:ef:
77:0e:34:b8:5b:17:c4:dd:a2:f2:4f:83:b5:a9:e8:
df:04:e2:2b:46:ef:45:94:3c:ee:23:66:1b:61:9a:
3f:c2:ba:1e:48:3e:32:98:05:64:d9:58:09:f2:38:
9d:45:3f:88:12:9b:b9:d8:c6:ed:1b:f9:1f:aa:f8:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:FD:A2:50:9F:A6:8B:9B:36:D2:1B:F2:2D:FF:57:E8:2A:34:D8
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e9:34:7a:7a:4a:a1:5d:cf:d3:f8:c4:f4:55:cf:05:0d:42:
9d:cc:bf:7c:96:c3:7d:8d:17:79:04:40:70:46:5a:a1:56:0d:
ac:20:96:c7:48:61:73:fa:1e:6a:5f:e7:91:98:51:64:07:f6:
93:6f:3d:89:64:ce:b0:ab:5a:8e:13:54:63:05:5c:5b:c0:ea:
c1:e8:79:ce:8f:e5:01:e7:2b:b8:43:ff:bf:87:24:09:5b:0a:
c0:bc:e1:6b:ee:dd:e2:e0:58:16:e8:fb:28:42:c8:15:4c:64:
48:b8:78:01:20:09:7f:a9:52:b1:55:81:e2:11:95:86:e7:ad:
6e:56:58:43:4c:e8:4b:e2:a7:e1:e1:ac:2f:ba:35:30:42:cd:
45:45:49:aa:39:a5:22:1d:27:15:1b:23:0a:de:d3:c1:a3:cf:
6b:dd:07:f8:12:9b:18:75:0f:85:9a:97:5c:1d:6d:10:26:c8:
63:6c:a7:27:29:b1:97:6c:40:c4:2c:50:c2:34:b2:f5:a8:69:
6a:40:a3:38:75:0d:00:dd:53:2b:52:84:c8:2a:e1:8e:85:8f:
b6:fe:12:b5:b6:09:e1:7d:00:f1:f3:44:22:e9:9d:6a:9a:01:
90:e9:53:92:39:eb:4b:59:8a:7a:c6:5d:82:a3:7f:ba:28:24:
9d:6e:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:15:41 2025 by rpki-client