Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: gfHqETPJ6p5dnxIXXc9o5/ErdDCCWh4mRciy67A459Q=
Subject key identifier: 6C:17:20:43:DD:F7:E6:9C:D4:76:37:12:D2:BB:58:A7:A2:4F:70:DB
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01977C79F7A542ABC32DF814C85CAC136767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 111C
Signing time: Tue 17 Jun 2025 06:00:57 +0000
Manifest this update: Tue 17 Jun 2025 06:00:57 +0000
Manifest next update: Wed 18 Jun 2025 06:00:57 +0000
Files and hashes: 1: N2KDrXsXfLoSK2ut42Tlf6Gqknk.roa (hash: o+7zLi+nAqreLIrK7jetd34lwzrF5To+yT8AikGoh0g=)
2: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: nP4gKlPSOYLNAcmj0AtdkMxgCfsXNFvydmczsquJi+s=)
3: pBDB5dEoNoGI5z6b0bPqttsFG_4.roa (hash: 5Z8Z9vYKFLWRSaHZB0Lf5gl087k9mD/pQXqsfiZQPco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:f7:a5:42:ab:c3:2d:f8:14:c8:5c:ac:13:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jun 17 06:00:57 2025 GMT
Not After : Jun 18 06:00:57 2025 GMT
Subject: CN=6c172043ddf7e69cd4763712d2bb58a7a24f70db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:2d:6d:48:f0:ee:15:31:3b:f9:e9:24:8e:58:
7a:da:05:23:9a:9d:f4:4c:c4:e2:d9:88:c3:08:cb:
7c:56:8f:e1:64:dd:40:92:26:9f:cf:cd:69:3c:90:
7b:84:88:e7:6d:5f:9b:01:d0:cc:5e:af:73:cb:0e:
4b:65:8d:38:08:39:f4:26:0d:94:67:49:a6:ac:8a:
ed:dc:46:ab:77:70:41:82:46:0b:d5:92:c9:8f:6c:
a2:b1:4e:30:5b:da:01:d4:9c:7c:95:64:fa:8d:c4:
b8:a6:a2:72:03:12:61:20:6f:e0:40:52:b1:b7:d3:
e9:7f:7d:17:f3:4e:51:1e:00:09:f8:59:f7:a4:64:
99:7f:83:09:f5:64:4b:e3:2f:f9:6b:b7:be:ef:86:
ca:89:ce:4f:60:d7:c6:b3:b2:6a:c2:7a:f1:0e:48:
ad:83:17:85:1e:32:de:c7:49:1f:fa:dd:2f:3c:c9:
b8:8a:d3:89:7d:ce:e3:74:ef:03:1f:8f:03:e9:37:
0a:91:d8:a8:e0:8b:b9:e6:67:3e:8b:40:e0:ba:b8:
3e:3e:ed:c7:91:2f:4d:03:7b:32:49:05:5f:2f:ad:
37:c4:5d:43:bd:1b:81:c9:44:61:0a:a5:78:77:13:
49:49:63:58:39:c8:80:a6:34:6a:8d:85:18:97:d7:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:17:20:43:DD:F7:E6:9C:D4:76:37:12:D2:BB:58:A7:A2:4F:70:DB
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:07:53:71:19:09:5f:26:88:45:e7:30:43:38:d8:1d:98:a0:
b5:f2:c2:ce:99:ed:33:c8:ac:13:1c:73:1d:17:86:e0:05:7e:
50:8d:d8:5f:98:6a:d9:c3:67:fb:03:1f:a3:38:4f:a0:21:d3:
03:80:b7:3b:5e:8d:4b:aa:52:3c:d7:9a:51:31:48:4c:b9:d2:
6c:1d:8e:43:ac:c2:e1:20:9e:e3:8d:37:bf:23:82:52:8d:8d:
63:d0:c2:87:92:fa:ac:07:f7:67:45:ab:8e:fc:07:17:b8:98:
cc:8b:6c:a8:ad:ff:96:9f:09:25:78:33:4a:79:6c:a1:b9:09:
67:40:74:e1:70:d1:5e:66:75:43:73:14:85:9d:be:a9:f3:83:
91:11:8b:23:10:0d:65:72:61:5f:26:a5:58:7a:1d:c7:c7:e8:
70:40:06:f9:eb:34:86:d6:2c:29:8d:cd:b9:24:8b:0e:48:b2:
7c:e6:70:c9:39:20:58:1a:f5:db:f4:46:c4:9c:3a:7a:57:2f:
31:77:c2:ff:9c:a6:6e:4f:4c:22:d5:22:be:91:ae:0e:e6:21:
53:a9:36:fe:80:5d:39:e0:22:ca:8c:f0:28:33:97:2d:97:53:
5d:62:32:36:41:2d:2c:ed:01:44:90:66:e5:88:36:8a:93:7e:
05:f5:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:31:31 2025 by rpki-client