Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: bUhqlPC5vKeGGlSd/PhKvxOb+pE0oyRmejGWbpdxGNQ=
Subject key identifier: 56:B7:EB:0F:2C:15:8A:12:B2:45:01:82:49:E9:8D:30:70:37:C3:37
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 019769CE740314E1DF56A09405678FB0510A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 015A
Signing time: Fri 13 Jun 2025 15:00:27 +0000
Manifest this update: Fri 13 Jun 2025 15:00:27 +0000
Manifest next update: Sat 14 Jun 2025 15:00:27 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: k80hDJJTOVnzCFmC9ydr8Iw9PE3N2w/7n4b8e68UCDI=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:74:03:14:e1:df:56:a0:94:05:67:8f:b0:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Jun 13 15:00:27 2025 GMT
Not After : Jun 14 15:00:27 2025 GMT
Subject: CN=56b7eb0f2c158a12b245018249e98d307037c337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:fd:57:e3:df:eb:06:54:8d:0e:cd:56:d9:
e8:6b:bc:37:56:d1:6f:99:eb:9e:51:f0:a4:e9:88:
a9:25:fd:89:51:8d:4a:27:39:0d:ae:c9:39:78:f0:
dc:0a:3b:a2:1a:95:10:20:67:be:b9:57:d9:e7:af:
8f:97:72:7b:52:0e:b0:8a:2e:33:8c:b8:1d:07:6c:
77:a1:1e:f2:21:c0:70:38:d1:36:c0:17:76:62:e7:
56:a7:84:ae:66:6a:88:ae:b7:50:3e:03:89:ca:d8:
48:4b:03:e5:dc:9a:af:7d:c2:dd:28:90:11:e8:c1:
e2:78:f6:e4:ae:4c:fb:6d:12:2b:d4:9f:0f:51:91:
8d:d7:17:fb:33:ee:60:ee:65:8c:9f:e3:c3:06:1c:
f5:b0:4a:fd:11:8e:53:bb:52:d5:ca:4a:da:42:38:
9a:1c:f3:44:d4:26:9e:c7:ba:d4:fd:3d:2a:df:63:
f7:7d:6d:f5:38:9d:96:ae:27:45:93:13:9a:f6:1f:
ee:2f:01:f1:b3:28:d4:8e:54:db:88:d0:82:60:3f:
54:fc:2f:35:6d:62:c9:c4:80:a2:ec:55:76:36:31:
24:59:fb:97:de:d0:fb:66:a8:f4:43:fe:89:87:54:
6d:51:25:6b:c4:5c:46:bc:c4:e9:f0:33:62:04:36:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:EB:0F:2C:15:8A:12:B2:45:01:82:49:E9:8D:30:70:37:C3:37
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b3:c8:d6:31:c3:2c:41:c2:5e:dc:d3:ea:ca:e0:2e:16:cf:
27:44:0e:e3:69:3e:b1:5f:ea:a0:fd:98:ed:8f:47:b3:61:16:
2d:79:98:ff:b9:c6:09:3b:83:1e:29:1a:1a:74:1f:61:23:e3:
8f:1f:82:e2:d4:ad:31:cf:87:0a:af:bc:ed:f5:7e:e7:3d:76:
7b:8e:9a:4f:57:11:61:60:36:2a:c8:d2:e3:3d:fe:0e:69:65:
32:7a:3e:2d:c8:29:d6:a2:1c:b3:e7:92:8b:f6:79:5c:b7:16:
e0:85:0c:52:0d:88:91:d1:5e:12:ce:ad:44:1a:bd:db:2e:c9:
0d:1e:4d:2e:36:62:69:7a:3d:e4:a4:db:0d:cd:18:69:03:b9:
86:db:a5:5e:77:a9:0b:5a:4f:72:dd:ff:83:7d:45:81:68:d2:
3c:f1:94:aa:cd:57:51:86:2c:24:48:fd:ed:4c:56:2c:5e:3e:
d1:ae:fb:44:bd:e4:11:57:40:26:04:8c:6e:50:98:14:06:49:
ef:b9:61:29:a0:c8:28:14:a9:04:c2:e1:5f:23:27:fe:dd:3c:
e5:36:79:89:9e:cb:b4:33:97:b7:d4:78:a6:27:08:52:58:78:
98:f3:ec:4a:13:e1:84:66:b3:1d:4c:f0:7c:28:e5:a0:db:f2:
f1:c4:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:49 2025 by rpki-client