Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: 9BBv5LyBCfDL5/Xsx8Uy5qN4hrQ2feuUUQ4j/ABY8EQ=
Subject key identifier: 30:E0:F0:8B:E8:A0:B4:AD:9C:E1:65:7D:A6:0B:DC:43:5C:4C:08:88
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 0198D5BB98C9CFD8288D5BEDEB249A6D5F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: AZiQRWkntBoCw9+h2nU4dW901wAzcORn2MAXtpDLC/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:98:c9:cf:d8:28:8d:5b:ed:eb:24:9a:6d:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=30e0f08be8a0b4ad9ce1657da60bdc435c4c0888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:33:e3:a5:73:4c:e1:53:7e:3d:28:52:cf:
e1:79:34:73:3a:ac:0b:14:e7:21:ef:a7:09:f2:1a:
18:4f:2f:a1:2a:c5:94:c9:6a:94:b5:3e:75:27:9c:
92:6b:34:03:1f:fd:69:eb:8a:59:bc:33:a9:5f:88:
b2:14:68:07:e0:6a:02:a7:b3:99:96:57:28:37:57:
44:48:54:43:ed:64:6e:ad:94:0f:bd:b3:13:8a:83:
b3:9d:22:bd:23:5c:fa:80:2d:44:b8:26:9a:e1:e1:
46:ad:d9:3b:c3:3f:5d:c9:b6:39:66:d9:b4:96:0a:
14:14:aa:9d:7d:cd:42:e1:a9:28:14:e8:ca:09:67:
40:cf:b7:ab:48:d1:48:1b:d8:b5:6a:45:55:db:63:
13:f8:9a:0a:8e:8d:0c:94:ef:5c:b0:c9:98:9e:65:
f9:04:52:d3:90:82:8e:f0:15:13:ce:01:7c:f6:16:
51:4c:b0:89:50:35:0d:fb:86:23:12:ba:a2:6f:cc:
75:fa:66:1a:f8:2a:4c:8e:51:94:89:da:c3:b4:22:
10:83:d0:64:89:cb:cb:26:98:56:2d:9e:57:2e:27:
00:c9:dc:62:d7:1c:ba:02:d2:7b:f5:d5:08:6d:25:
ca:b9:08:67:7f:25:aa:f8:94:b3:cc:d4:a6:68:d3:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E0:F0:8B:E8:A0:B4:AD:9C:E1:65:7D:A6:0B:DC:43:5C:4C:08:88
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:fc:31:be:50:5e:64:68:47:69:7c:56:3f:fe:63:77:39:
38:64:7d:55:b4:19:4e:09:2f:60:1f:f5:84:a2:16:ac:b0:b7:
9b:94:55:cd:82:5d:bb:ea:11:13:71:87:a1:32:9b:70:f7:a1:
66:24:40:e2:e8:cc:96:7b:c8:2e:e8:d0:0f:63:39:fa:f2:fa:
65:5c:ab:26:dc:d7:13:67:a0:83:73:93:6c:a3:90:4e:88:9a:
0d:a4:af:44:cc:7b:9b:1b:13:ff:8c:48:d9:07:16:e2:77:f4:
3f:65:be:53:41:a7:30:50:1a:ce:b3:04:a2:5b:18:ce:e7:49:
53:29:b4:77:48:b1:38:49:1b:fb:01:20:a3:75:3b:e8:5a:f1:
a3:e8:1a:24:6a:81:9b:11:c1:8a:5a:dd:b6:39:cf:e5:ee:8b:
d2:e1:a7:20:dd:90:69:cb:8d:bc:88:78:7b:1c:ec:f8:e0:f2:
c3:30:5f:6f:ca:5a:5a:36:d3:90:02:55:2f:91:a1:c3:6c:fa:
8e:5b:a0:d6:74:21:99:ec:e4:c2:fc:95:1c:06:c5:88:5d:f2:
14:42:07:ec:d9:2d:2f:45:fd:57:24:b3:31:29:26:24:b4:ae:
65:9b:2d:e1:61:16:68:63:71:2a:e9:71:53:ad:55:77:56:db:
bf:be:1b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:39 2025 by rpki-client