Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: Lq/P0pj03te9EUdAPf+eGNWrGD1x/jHWNE6GNP0Kx4c=
Subject key identifier: 3E:1B:DF:5C:67:6F:E6:72:D0:CA:FA:A4:50:DE:61:DC:96:52:C0:64
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 019785EAAC2CC138109367CC02DF9C6EFF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 152D
Signing time: Thu 19 Jun 2025 02:00:38 +0000
Manifest this update: Thu 19 Jun 2025 02:00:38 +0000
Manifest next update: Fri 20 Jun 2025 02:00:38 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: b+5rho04F8uKnQCuQjOW/7P/mg+nhKdwnal/BKABV9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:ea:ac:2c:c1:38:10:93:67:cc:02:df:9c:6e:ff:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Jun 19 02:00:38 2025 GMT
Not After : Jun 20 02:00:38 2025 GMT
Subject: CN=3e1bdf5c676fe672d0cafaa450de61dc9652c064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:f6:20:d4:ad:89:f8:e1:af:b3:2f:d2:ef:
cf:36:13:1a:9d:aa:ee:f2:bb:d8:28:f2:79:7d:01:
c1:1a:79:5b:f4:80:ab:36:b5:52:83:69:40:1e:fb:
d3:53:dc:73:fb:b5:0b:41:c8:bd:19:72:c5:17:cb:
1f:8b:52:0f:01:c9:b6:9e:fe:42:3a:da:bc:a6:ad:
7b:68:63:9c:30:af:81:8a:ff:e2:98:5a:db:b3:91:
a7:72:25:e9:10:f7:cf:6c:44:65:ca:d9:8b:e7:4f:
8b:bb:9e:19:ab:c6:cf:91:b2:16:5c:d7:60:8c:35:
06:64:dc:5f:65:5d:6f:4f:f0:e4:24:00:4d:b8:88:
a7:69:ea:1d:14:8c:31:e6:7d:0c:71:a3:3f:9b:16:
7f:08:fc:0e:b7:dc:bc:8e:96:e5:66:32:22:87:13:
07:f5:5a:9f:ae:88:33:8f:38:87:02:f9:12:f3:7b:
d3:38:7a:65:ea:db:01:a1:9a:f4:e4:47:0e:f1:74:
57:04:60:42:ac:66:da:24:59:68:e5:4c:95:2e:77:
1d:0d:e6:6d:06:21:ef:53:9b:78:66:a7:ca:c8:b4:
b7:c4:3f:d7:16:39:12:5c:4c:29:a0:a9:1e:7a:7d:
bb:78:27:bb:90:80:ee:af:b0:25:a8:6d:56:06:28:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:DF:5C:67:6F:E6:72:D0:CA:FA:A4:50:DE:61:DC:96:52:C0:64
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e2:a7:eb:03:aa:ea:13:ac:b3:cf:be:50:27:12:b2:89:25:
eb:4a:da:86:51:0f:02:1e:52:09:dd:24:18:09:ae:bb:e5:aa:
9f:36:5f:77:17:62:92:a2:d0:05:a6:eb:a4:14:29:b5:05:4c:
d5:27:ea:0e:94:54:33:07:7c:94:7b:cb:04:70:b9:56:46:d7:
4b:15:44:a6:fc:b9:42:3a:72:e5:1b:0a:00:58:53:52:89:00:
8c:2c:93:9f:8b:ad:4d:f5:77:a8:2a:67:68:b1:22:16:44:6c:
05:5e:0e:da:2f:ff:cf:fe:5a:11:16:7c:69:da:3f:f5:cb:ec:
bd:f9:11:9e:5c:e9:4d:1d:35:0f:0e:51:26:b3:22:25:c2:f9:
28:26:8e:bc:a8:6e:8f:fc:d7:80:01:13:f9:f9:10:53:64:36:
02:01:1f:f7:0c:37:46:28:e9:6a:88:ea:c6:c2:e6:74:6f:35:
85:c3:e2:c6:8e:24:4a:4c:3e:93:20:cf:be:02:7c:fd:90:f4:
13:bf:e8:b9:10:5a:c8:36:29:f7:34:b7:96:4a:c2:ef:2f:56:
7c:f7:b2:ec:d8:f7:10:55:0c:22:19:e7:b2:8d:a1:22:2d:68:
da:4a:63:1f:15:b7:4a:5e:ef:95:20:22:d6:f8:ca:2c:60:d7:
b8:be:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:38:35 2025 by rpki-client