Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: lGUUakIuQNjAbHQgzD+ArYHx/yeJxakKzO0j5xRxfew=
Subject key identifier: E0:1D:4E:41:08:4E:63:98:72:44:C4:5F:CB:86:8B:7C:78:02:D8:5A
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 0197711A37C9026B8B6A4E20789A971CC344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 01:00:32 +0000
Manifest this update: Sun 15 Jun 2025 01:00:32 +0000
Manifest next update: Mon 16 Jun 2025 01:00:32 +0000
Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: wndcLPbNLMFCYQl+hhG0EwJtg138M1OcvEbMymdo5VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:37:c9:02:6b:8b:6a:4e:20:78:9a:97:1c:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Jun 15 01:00:32 2025 GMT
Not After : Jun 16 01:00:32 2025 GMT
Subject: CN=e01d4e41084e63987244c45fcb868b7c7802d85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:33:f6:f7:80:6f:9a:6f:cf:cf:1c:b9:73:
ce:34:2a:66:dd:3c:4f:ba:2c:21:c8:d9:5f:c3:f1:
5c:f2:7b:79:2f:b5:dc:81:f8:cb:3f:07:2d:e7:fc:
60:6e:5a:e7:c7:05:4b:00:0a:09:fc:b3:da:60:ba:
0d:48:7a:c7:e9:4c:da:cd:60:4c:da:eb:c8:0e:ea:
33:53:f2:a9:63:88:96:e0:5e:41:93:c3:57:f7:f0:
74:a3:fd:06:18:06:76:83:d4:60:17:c7:a6:8d:3c:
f1:b4:7f:ce:cf:ed:63:08:a4:16:43:3b:f6:f3:cb:
21:87:a4:77:1a:5d:2b:4c:1a:f7:29:3b:68:23:43:
aa:f3:38:dc:55:17:02:d8:ae:5d:17:18:be:56:66:
9d:60:53:af:c1:9d:c8:70:e0:c9:67:45:c0:63:c0:
5f:76:aa:b1:c3:d2:95:ca:3f:2d:dc:bd:0c:b5:86:
0e:27:a6:28:cf:57:a3:e5:7e:a9:97:1f:94:f8:4d:
10:e6:c0:ca:f0:6f:fb:6f:04:2c:dd:fe:73:40:6e:
f1:29:25:16:c3:a4:7c:da:47:3d:55:17:1c:39:cb:
7a:37:2c:2f:7f:96:ab:39:1c:08:03:35:94:2c:db:
7c:7a:53:5e:70:e5:33:bd:7c:ad:4d:29:53:50:14:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1D:4E:41:08:4E:63:98:72:44:C4:5F:CB:86:8B:7C:78:02:D8:5A
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a0:ab:d7:8c:44:00:16:b9:88:29:31:67:ad:f0:b1:91:32:
fc:33:5f:84:d1:b8:00:5e:ba:a3:20:01:43:35:d3:1d:04:05:
f3:63:04:46:cf:26:dd:b3:4a:df:1a:21:90:c5:b8:95:f6:75:
1f:da:c8:7a:23:aa:63:96:50:7b:05:12:52:85:2a:e4:3c:36:
2c:de:87:e3:54:06:e5:82:e6:3a:2f:cd:64:96:1d:bb:f3:51:
fa:d9:8a:01:52:ea:c4:4e:33:e4:67:81:20:21:7c:e5:d1:37:
08:e0:19:9e:5b:48:20:30:52:24:63:93:82:58:d9:84:0a:a3:
c2:ab:64:d4:d8:75:f1:a2:5b:e8:7c:4e:60:c0:43:7e:64:3f:
de:27:8b:1c:94:cf:16:3c:2f:31:60:2f:fb:c7:d4:bf:e1:0b:
fc:9c:cf:cc:40:13:5e:81:81:1c:96:d3:80:31:78:3e:a5:d1:
3c:a1:12:e3:76:71:88:2b:19:16:77:08:59:f9:91:e4:88:cd:
78:a2:49:32:d6:58:4a:0d:3e:80:a2:11:6a:21:62:8a:6a:63:
ce:63:f8:2f:60:ab:b9:2e:d4:de:b0:1f:a1:01:57:8c:af:7d:
1f:25:45:bd:96:81:07:61:3b:54:1b:55:4a:41:e1:39:99:db:
77:cd:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:58 2025 by rpki-client