Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: oWX5cE+GTG1vAhFS0XK0kmH0eawk8xUX1FyepBg4dVI=
Subject key identifier: 7F:34:45:A6:5A:37:59:FC:E1:71:50:51:2D:75:02:5E:27:ED:37:2B
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 01976D06E2B0DBFC73C47894C8EA8BA20156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:57 +0000
Manifest this update: Sat 14 Jun 2025 06:00:57 +0000
Manifest next update: Sun 15 Jun 2025 06:00:57 +0000
Files and hashes: 1: P7kra4ub5VF3YEJjz3ym8CwbAXA.roa (hash: AJEYR0xnzVy6utllNh8R4LIoanjGY6stnMXm+hMmUEo=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: Gu/iPA3tipZv72uMb8p8lr0f6us+YSXPxM8vGTcBu0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e2:b0:db:fc:73:c4:78:94:c8:ea:8b:a2:01:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Jun 14 06:00:57 2025 GMT
Not After : Jun 15 06:00:57 2025 GMT
Subject: CN=7f3445a65a3759fce17150512d75025e27ed372b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:ad:b4:04:fd:70:11:74:b8:fd:e3:73:c1:
d8:37:0b:84:60:3e:c4:c5:fe:0a:5b:6b:7a:63:8f:
16:57:fa:f4:4f:df:4c:9a:41:03:10:58:96:09:a6:
2c:9c:e0:69:78:a7:47:c9:d8:85:10:26:3c:20:27:
44:08:b8:cb:c2:12:af:ed:29:37:49:3f:3d:cb:a1:
36:02:94:4f:39:f3:d0:cb:94:e1:97:ce:e3:fa:2f:
81:46:af:7a:f6:15:8d:9a:78:e0:c7:ea:a8:8a:60:
52:51:96:76:4c:43:8a:68:0c:78:57:ed:93:02:df:
48:df:ce:6e:39:9e:ed:13:3e:c4:a2:2c:7c:88:75:
fe:ac:a9:28:09:e7:a4:79:6e:b5:58:13:df:7a:a2:
76:7b:68:2f:2a:25:bb:eb:27:ad:27:3b:ac:8a:a3:
a8:e0:eb:ff:69:4d:db:0c:52:37:43:17:ce:ea:f7:
35:e0:81:e3:88:ca:af:a6:f8:6e:d8:74:9a:fd:88:
83:d1:2d:f5:a4:4e:23:c1:cb:2f:69:96:1d:6c:ee:
cc:c8:b0:ba:9b:13:24:46:7a:c3:4a:4c:a1:06:91:
ba:af:7b:d1:e2:ce:6c:2e:de:b6:c0:5d:da:cb:9c:
3c:72:ea:92:f0:fb:4b:35:cd:52:3d:25:b1:ba:4f:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:45:A6:5A:37:59:FC:E1:71:50:51:2D:75:02:5E:27:ED:37:2B
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:98:11:f9:81:b4:4a:d3:11:f8:bd:9f:81:62:7f:fe:d6:7c:
99:f7:9a:ed:a9:90:c4:f7:18:85:8c:3e:66:e9:1c:9e:43:b5:
77:69:61:ed:b6:bc:8a:f0:79:70:e5:87:55:f2:77:2d:c0:b5:
9e:aa:ab:1b:1b:b3:a7:ea:4e:9a:9b:b0:fb:da:b3:ff:f3:6b:
57:5b:d3:ba:0f:e0:1f:5e:46:27:75:fb:2a:ac:b1:6a:a9:a7:
02:45:13:30:99:b0:d5:59:ad:52:a3:b3:10:f3:d4:b8:70:12:
ab:90:bd:05:e5:61:9a:a7:b0:78:dd:f1:cb:33:01:3b:e1:a1:
d8:fd:a1:69:81:f7:34:a4:44:53:46:8f:c0:f6:91:7e:07:af:
1c:50:74:b0:0b:bb:d6:07:52:54:ea:5c:80:c7:b8:c8:be:c1:
e1:ca:84:3b:81:4c:72:89:23:6a:54:5f:c4:9b:01:3d:19:d3:
2c:8c:4a:02:2a:f6:b5:fa:6d:31:d1:94:a5:33:15:76:e3:4c:
08:64:58:31:b1:52:f7:e6:ce:b7:7a:f6:f4:9a:57:22:14:72:
e5:8f:9a:c3:44:c1:36:03:0b:b0:06:9c:c5:fe:8f:99:cf:2f:
f3:5a:46:e8:cb:83:1c:f0:d9:37:5a:9c:70:72:a8:44:49:1d:
d3:53:b7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:49 2025 by rpki-client