Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: o6XFWtmkjfS3GpuKL/fFQGiBNJO8DMhOi1OoRdnr+CE=
Subject key identifier: 19:D3:1D:C7:0B:E4:88:69:39:F2:4D:E1:39:1C:10:44:02:AA:BB:8E
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 0198D5F13ADDA506874A449F4A67D9FC6089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 07F7
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: OcE95sxRRbEl8pUARGtqtDMw8ZWcV2UPOJ0xaO9oCfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3a:dd:a5:06:87:4a:44:9f:4a:67:d9:fc:60:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=19d31dc70be4886939f24de1391c104402aabb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:27:3c:82:0d:b5:48:78:c8:98:28:a8:1b:
f0:6a:e5:b2:fe:1d:b1:0f:11:ff:6c:33:07:59:f1:
31:0d:1c:3a:8e:b1:e8:09:e4:df:86:cb:32:fe:23:
2e:f8:4e:ce:1c:92:ee:fd:f8:34:8f:b7:83:98:71:
91:fc:c5:38:d6:ac:68:6e:2f:cd:3d:3e:7f:df:73:
81:88:6b:94:d2:43:f1:6d:4f:65:d0:de:55:da:e0:
c9:31:62:92:ba:14:00:a2:c2:70:c0:3c:20:21:dc:
22:5a:d1:55:32:ae:ac:00:ef:65:5b:0b:b9:07:7c:
4a:0c:db:e3:27:99:e4:dd:fc:29:4e:28:d8:06:aa:
b0:0c:ab:2d:d1:57:85:4a:1c:b0:8f:64:13:09:8f:
46:68:78:bf:19:60:b7:db:5e:1c:62:f5:d6:4d:74:
ed:89:2f:0f:45:e9:eb:b5:87:2b:b1:67:cd:af:f1:
1c:66:a6:34:20:9e:a1:80:82:71:23:c1:00:36:0d:
62:60:20:9f:4e:5d:a0:5e:a8:90:af:71:e9:b4:f1:
85:a4:c2:30:ed:78:15:80:c4:54:29:ee:6f:aa:21:
60:0d:80:22:aa:e4:e4:f6:08:43:b3:71:1b:2a:04:
da:80:9c:ae:5b:14:33:9a:c3:64:ea:1a:db:69:76:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D3:1D:C7:0B:E4:88:69:39:F2:4D:E1:39:1C:10:44:02:AA:BB:8E
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:77:f4:e3:e7:48:7c:f7:4d:62:07:10:df:a6:b2:6d:03:5a:
f7:45:1c:fa:ed:9f:cb:65:12:18:5c:65:48:0a:a7:93:60:67:
bc:93:79:92:58:61:4d:40:00:8d:87:f8:f3:8a:30:0e:bf:de:
b2:6f:18:3c:6a:15:e4:4b:af:43:dd:0a:bf:fe:e6:e2:13:e9:
7b:5a:03:d3:78:2e:41:82:ef:42:f3:df:d2:94:9b:fa:3b:ee:
00:58:e3:7e:d5:48:c9:ec:b5:5b:2a:a3:fe:d7:cf:3d:a8:3d:
13:88:6e:3b:61:ec:e7:d6:d0:f2:af:34:c0:4f:f8:28:85:3f:
54:cc:cd:82:f8:92:62:81:02:db:c5:bb:de:1d:d7:0d:60:92:
36:26:05:34:92:76:ad:9d:49:a8:ef:82:39:5e:7b:05:0d:99:
18:55:f1:c0:c0:b3:c0:e3:03:ce:2d:68:29:5c:4b:c1:f6:8b:
51:cb:57:af:20:45:55:10:8d:70:79:dd:b5:f8:70:aa:74:5e:
57:1f:11:bd:37:1c:97:81:9a:3b:8b:60:98:e7:84:18:ba:e8:
9a:6f:d0:7d:b2:3d:ef:df:5e:b3:28:e1:59:d3:a2:af:86:39:
26:ea:c9:59:49:82:b1:34:65:40:d5:6a:df:aa:90:52:5f:e5:
9e:9b:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:39 2025 by rpki-client