Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: Vl2HcRIyFyFf+kFFWUcaoYWXSI3gp0LBt8zGoH1b/L4=
Subject key identifier: 8C:96:E7:22:32:3B:3D:83:AB:48:E4:A7:62:ED:D1:35:89:A6:67:D4
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 0197722CF5F897D20E874A85A664355BE379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 06:00:38 +0000
Manifest this update: Sun 15 Jun 2025 06:00:38 +0000
Manifest next update: Mon 16 Jun 2025 06:00:38 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: SpqtAHEF+0lGYTwy8sO4I/ds4SmMfRT4RNWRUl/a+3Y=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:f5:f8:97:d2:0e:87:4a:85:a6:64:35:5b:e3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Jun 15 06:00:38 2025 GMT
Not After : Jun 16 06:00:38 2025 GMT
Subject: CN=8c96e722323b3d83ab48e4a762edd13589a667d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:72:3e:d5:87:2d:cb:e2:6b:94:59:6f:c3:
c7:3f:14:0a:5e:23:49:1a:47:ba:ec:9e:1b:fa:ee:
47:32:c8:2a:0e:9e:6b:bc:f6:0f:e9:de:07:27:af:
73:da:44:e9:37:5c:5e:99:f6:e8:6d:a5:da:b1:a1:
1e:de:28:8f:81:28:7e:dd:e6:8d:c7:b8:44:ab:e2:
fc:48:76:17:23:ae:1e:e8:eb:e7:24:c3:89:1d:dc:
18:76:40:2c:31:c3:4b:87:fb:d1:5f:7d:84:14:4b:
97:2e:08:10:37:19:a1:6d:7b:2e:e0:c7:70:3d:7f:
32:21:a8:94:d8:26:97:3f:c8:8a:53:5f:b3:9d:e3:
b6:3e:5c:c8:08:cd:01:87:9e:6c:a8:b0:eb:a6:4f:
65:20:82:f1:8d:9c:13:b2:c1:33:d9:0c:9f:6f:f3:
23:b3:a6:53:67:45:4d:cc:91:c6:1a:47:06:e2:ff:
99:e9:a6:56:99:3e:c1:5c:a1:e9:31:ce:a2:e1:3e:
f0:8c:ed:8a:ef:e1:c0:91:a6:c6:da:7e:c0:1d:d1:
e6:f4:33:50:65:bf:f7:56:b7:64:e3:38:2d:09:7b:
87:77:a2:68:b4:f8:9c:b3:05:62:ad:fb:a2:d2:00:
59:e1:4c:bb:67:a4:45:e5:94:e2:59:78:7a:68:94:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:E7:22:32:3B:3D:83:AB:48:E4:A7:62:ED:D1:35:89:A6:67:D4
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c9:7e:e7:ee:98:28:d8:12:32:6b:da:3d:25:a9:57:81:1d:
fa:70:5a:2c:9c:bf:1f:2e:ba:8b:eb:63:79:8f:99:5c:35:9e:
2f:9b:6b:b9:1c:6e:d8:61:a0:c7:e6:cc:84:26:18:ab:58:74:
00:b7:2f:84:da:62:b6:eb:c8:9d:c2:6e:28:c7:2e:0d:9f:35:
f6:71:7b:60:ab:42:f0:d1:c6:ca:44:76:e0:22:9d:df:aa:bc:
dd:80:7e:23:43:45:82:4d:87:74:7e:fc:7a:45:32:04:7b:08:
25:08:ab:94:d5:fd:fb:0b:a6:fa:98:ce:71:2d:d0:f0:6c:86:
9c:f1:14:2d:d0:b4:c5:a2:99:22:c4:80:de:4b:81:f9:cf:f5:
ef:08:54:2d:31:3a:6f:8e:be:73:a5:e2:32:2c:8b:ad:18:21:
8f:bf:a4:14:12:d6:c1:c8:e3:e5:33:8f:00:82:85:d0:5f:b8:
74:e2:ef:02:d2:73:b9:f0:ee:8e:6a:a2:d0:b1:df:f0:ef:03:
89:14:fc:50:e8:2e:2f:43:c2:5b:0c:54:c9:7b:8a:30:f2:ba:
fc:f5:bd:9a:19:f9:23:b0:9d:3f:59:01:02:4a:44:82:af:67:
d0:c5:8c:1b:fa:90:c6:1b:6c:b2:9d:00:5c:c2:37:9d:e7:5d:
0b:af:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:38 2025 by rpki-client