Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: UYsT1RBCoHnXk5rkw6G0htTCMBh+kMh9KnQrteds7FE=
Subject key identifier: 9E:CC:9D:CD:C9:48:1D:35:07:AE:2F:CE:D8:C7:C7:23:8D:43:4F:3D
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01976884E240EB03274FED62F862500324EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1220
Signing time: Fri 13 Jun 2025 09:00:28 +0000
Manifest this update: Fri 13 Jun 2025 09:00:28 +0000
Manifest next update: Sat 14 Jun 2025 09:00:28 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: 4msU95SgaO1b61ExZ45bWhFETsdpR/Q+t19JjANIeiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:e2:40:eb:03:27:4f:ed:62:f8:62:50:03:24:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jun 13 09:00:28 2025 GMT
Not After : Jun 14 09:00:28 2025 GMT
Subject: CN=9ecc9dcdc9481d3507ae2fced8c7c7238d434f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:a4:f3:83:f0:63:74:98:e1:77:61:0e:6e:
c1:56:f7:52:bf:2c:3f:96:44:ae:6e:be:18:bd:c6:
1b:71:72:dc:5f:32:30:28:bd:d7:2e:56:34:5d:ac:
96:17:f8:0e:ac:b2:7f:a3:26:4b:25:58:8c:6a:41:
6a:e0:7d:fa:e5:ad:c0:4f:ec:11:f2:a1:8b:57:c5:
59:08:33:df:3a:35:f0:db:10:ba:0e:64:01:81:64:
03:79:76:20:30:00:29:0a:88:1e:cf:ce:8f:9b:95:
16:66:c2:22:d7:6e:f0:83:44:57:4b:70:35:0e:ba:
50:bc:43:3f:e4:6c:b4:90:e1:3c:a4:fa:8c:35:f4:
9d:3a:fd:38:fb:a4:6d:6e:4b:e4:45:b4:57:06:d9:
42:82:31:8c:30:ee:6b:8d:cc:76:80:b6:41:21:29:
a0:0d:25:ea:81:27:b3:58:93:dd:45:2b:ea:0c:31:
e3:3a:83:d0:46:2c:ce:4c:02:db:20:c1:5e:10:a6:
d3:33:97:73:a8:3c:02:00:82:29:a9:d5:58:8a:f8:
dc:64:9c:1d:96:15:ce:c1:6d:91:d2:a4:b3:af:2d:
04:2d:cd:b4:a0:50:b3:5c:f0:e1:9d:48:d6:1d:16:
25:21:a4:df:36:0e:65:ae:2f:1d:5e:76:38:ee:d7:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:9D:CD:C9:48:1D:35:07:AE:2F:CE:D8:C7:C7:23:8D:43:4F:3D
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:0e:dd:6f:9c:70:89:9f:78:23:57:2f:3c:4a:63:ac:1f:4e:
1b:bf:57:2a:1f:9c:9e:7f:bf:e8:8d:ee:80:e5:42:68:3a:88:
20:9c:0e:ee:7c:06:b6:88:ac:c9:65:1c:cc:55:d2:10:3b:53:
05:90:d5:58:c5:cc:23:37:1d:06:f6:fc:4f:93:1e:41:1f:10:
a2:4c:b0:c6:f3:de:cb:f8:7a:b8:cf:72:ba:8c:01:2e:3e:ac:
5d:45:26:56:08:df:c0:07:47:91:de:8d:6c:85:18:58:16:e9:
90:04:96:96:00:3e:24:b2:56:f0:70:90:41:22:40:81:c0:a1:
f2:68:73:98:84:2f:95:2c:55:c0:3c:43:2d:f3:ed:40:dd:5c:
4b:3e:3d:3c:91:93:55:e3:f8:d7:92:88:06:70:7b:58:57:2c:
0c:da:2f:3b:6d:f4:f0:3e:94:8c:9f:15:9e:ae:dd:d0:6a:51:
4a:c1:b3:57:7a:ff:c2:5d:29:5d:3e:22:69:11:21:05:0e:73:
9b:ce:4e:49:e7:df:b4:e1:c3:4d:0b:9f:b2:3a:84:0e:24:3f:
57:fa:37:ed:9a:00:0f:fb:c0:fb:06:35:2b:99:f3:37:2f:12:
dc:f0:bd:73:86:6e:ae:f6:58:0f:32:ee:72:79:b3:ee:69:c7:
8c:45:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:51 2025 by rpki-client