Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: amOTi3k8L7CFT5zKYMqH9du0kGPAL1jN1xfZTsKgAs4=
Subject key identifier: 2F:A7:2D:3A:D7:EE:13:3B:03:A2:1D:71:85:EA:C5:7C:F6:9E:BD:5D
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 0198D54E3E002614104011937AC0BF713130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 09A7
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: NUwlhkt0DMM9XGYtXwgIzGUNFRzojhB9j2sQkK893zs=)
2: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (hash: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3e:00:26:14:10:40:11:93:7a:c0:bf:71:31:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=2fa72d3ad7ee133b03a21d7185eac57cf69ebd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:2c:23:54:0f:c4:56:80:d1:d5:8e:89:b3:
0a:44:04:52:1d:61:cb:b8:4d:db:d3:60:94:37:6b:
99:da:37:2b:ee:8a:08:42:61:49:4d:ab:e8:e9:e8:
37:36:8a:98:a7:a4:ab:3c:e4:eb:d0:af:2c:a1:db:
f4:88:b5:6c:6d:6c:89:70:dc:9e:33:be:37:8b:c6:
30:0f:10:0f:4c:15:fd:a0:45:d3:09:39:0f:8f:2a:
94:f6:a9:07:7d:f5:a8:03:26:95:4d:21:8e:ea:85:
44:22:dd:30:0d:0d:d5:1e:ff:0e:1e:20:12:be:33:
6b:31:3d:56:99:6f:97:d9:2c:19:8f:17:0b:3d:a8:
7f:53:91:5c:8a:b8:60:10:09:f0:c6:08:9f:f8:6e:
0b:36:4a:8b:f2:55:59:01:ff:47:61:4e:d5:2d:75:
4a:db:f7:35:f2:28:dd:a0:07:f6:36:ba:e2:32:c7:
94:e9:90:12:0d:79:97:4c:fc:b6:5b:29:ac:e9:f4:
b3:fe:36:1d:13:f5:dd:06:1d:3c:1d:68:71:c3:db:
3a:33:b8:bf:49:30:69:f7:dd:46:6c:b4:60:88:2d:
ba:d1:c3:a4:e9:79:2f:35:4b:4f:62:d7:54:6d:07:
83:a9:4b:57:09:55:2b:a8:50:c5:7e:7e:f9:6c:b0:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:2D:3A:D7:EE:13:3B:03:A2:1D:71:85:EA:C5:7C:F6:9E:BD:5D
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8b:19:a6:1c:f6:0b:2b:b8:5e:7c:c2:c1:5e:d0:13:f9:4c:
7c:ef:19:fb:f0:3f:b3:6c:6e:23:7e:14:e1:a1:b6:d9:89:22:
d7:58:27:d0:15:31:0c:50:da:9f:60:ee:48:ff:34:ae:5f:0c:
2d:a2:ac:85:03:22:27:21:04:48:dd:f9:5e:0f:39:0e:e8:b4:
eb:ac:a9:87:97:23:c1:14:79:62:2b:23:62:a0:2c:12:d5:c3:
d3:af:8b:7b:70:60:16:c0:1b:03:2e:b5:01:d2:2b:dc:10:d1:
67:11:ed:7d:cd:ad:07:46:8a:72:82:5d:cc:75:f2:a8:b9:21:
9b:90:54:a0:d4:8a:e5:7c:0d:fc:0f:4e:56:c1:ce:9f:f1:90:
95:62:4c:ad:a9:78:e8:3c:95:58:95:23:c3:35:0f:83:9d:53:
76:af:56:a2:5c:a0:b2:d6:d6:9e:7c:1c:ca:1f:4d:34:17:db:
19:8a:81:3a:f5:99:49:be:6d:41:bf:f0:a9:93:93:86:d4:f5:
c0:f9:c0:11:3f:7d:d4:35:27:40:87:54:c2:a7:c6:dd:ea:42:
21:bf:fb:f5:49:ef:fc:c0:9e:7a:fe:09:94:b0:39:9c:46:8b:
09:d2:45:8b:cd:4a:ad:bf:8c:e5:68:16:d1:1c:15:6f:ec:20:
f5:f3:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:19 2025 by rpki-client