Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: mYsJArM4wb6AhkiauKrgndEki2dPx3f5zfyFY97HR04=
Subject key identifier: 6A:43:A2:BF:F5:48:67:55:49:2C:E4:97:8B:66:6A:4F:9E:EA:A4:C5
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 019788B4AB9D18DCE09ED12784D20146D465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 15:00:31 +0000
Manifest this update: Thu 19 Jun 2025 15:00:31 +0000
Manifest next update: Fri 20 Jun 2025 15:00:31 +0000
Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=)
2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: ehBi7ZAcV4i9N/IVxamG6wFvquxS+l7rv3/XlDE25f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b4:ab:9d:18:dc:e0:9e:d1:27:84:d2:01:46:d4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Jun 19 15:00:31 2025 GMT
Not After : Jun 20 15:00:31 2025 GMT
Subject: CN=6a43a2bff5486755492ce4978b666a4f9eeaa4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:ce:ad:56:aa:f0:e3:5f:6f:18:dc:47:bb:
c6:be:46:62:02:eb:1c:b9:83:e0:07:f3:41:19:8b:
34:65:59:cf:c1:21:fa:76:97:0d:d2:65:18:01:ed:
0f:b1:82:b0:76:2a:30:9d:e1:13:a3:5b:f7:b7:5b:
5b:80:89:c8:e0:f1:d3:eb:d3:13:a6:b4:79:04:53:
b3:28:1f:c1:5a:d2:13:20:19:96:6a:0f:6b:22:0b:
1b:e1:6e:1e:77:72:f9:23:3a:83:48:a7:df:c8:51:
36:2d:8b:cd:2b:d4:26:03:1a:e6:dc:96:dd:8f:d1:
d3:9e:7f:c8:67:97:7c:bc:dc:0e:b7:ad:52:24:46:
00:34:d5:cf:a7:98:6e:07:e9:b1:4a:ad:49:9b:fc:
52:39:c6:2f:f0:ba:13:2f:4c:3c:fd:72:98:a7:63:
d8:13:4a:7e:89:24:0d:7a:42:44:ba:77:91:66:8a:
f3:3e:80:07:75:6a:59:07:72:61:75:cd:d7:1d:58:
fd:3f:47:2d:45:f4:57:27:25:68:1f:9a:6e:c9:50:
ef:8c:42:64:da:d6:dd:29:4c:ab:ea:65:e5:fd:ab:
ea:15:b1:a4:f0:a0:4f:42:b9:0b:bf:31:89:9b:49:
31:2e:33:2f:5e:50:29:a6:b5:3e:16:d1:4d:59:ae:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:A2:BF:F5:48:67:55:49:2C:E4:97:8B:66:6A:4F:9E:EA:A4:C5
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:15:fd:19:2f:31:12:42:8b:9b:ce:1b:4d:7a:ca:3c:3d:8c:
3b:62:79:81:14:ef:52:b3:85:f5:d1:88:ba:10:75:91:75:66:
9b:7e:41:6b:4a:a1:57:89:bf:9d:be:da:99:dd:c8:c0:07:05:
0b:2f:38:86:29:03:ca:15:b3:84:fb:23:0a:3f:a6:c8:13:bd:
af:69:ee:45:bd:2d:17:8f:bb:3d:5f:ea:8f:78:4e:d7:3e:35:
db:23:a5:7f:52:f9:38:9d:73:06:97:26:95:fb:09:36:a7:c4:
03:fa:75:7b:06:f0:2f:78:25:91:73:be:b1:7e:f6:0a:a6:de:
a8:05:5d:db:6f:d6:96:e8:a0:8e:0e:98:1c:70:e1:7d:62:18:
a1:a5:ec:8e:c6:43:49:b3:a5:23:54:7b:79:dd:99:79:d2:c3:
f6:8d:bb:21:25:fb:2e:42:d8:bb:4e:51:4b:6c:20:8e:de:04:
b8:e0:b5:1e:10:39:6c:7a:87:82:d9:5c:b5:a3:8e:cf:37:f7:
b7:61:45:86:8b:41:75:17:b7:e3:6f:05:10:39:29:21:dd:a7:
7b:8a:c0:7d:13:3e:0b:31:5d:16:3a:0d:05:b4:5b:e9:14:f3:
73:58:c4:04:e1:ee:b5:ae:31:b7:0a:fd:16:18:79:5b:e8:46:
92:d9:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:39:12 2025 by rpki-client