Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: fWpgrk+24MQX0uiooWq1jOnqXo7SmPKUQkDbyZWmP2A=
Subject key identifier: F8:B0:F3:28:5A:B0:75:A9:96:61:AF:5B:CA:82:6C:BD:31:8B:0F:D8
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 0198D4DFD87A391032A596EA681A13C715C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0A5A
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: b5FS8ophU6ivZ89PPCM1clhi5DhjXrdR4Cp3fgcx7G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d8:7a:39:10:32:a5:96:ea:68:1a:13:c7:15:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=f8b0f3285ab075a99661af5bca826cbd318b0fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:44:cc:96:24:08:73:a9:38:64:8f:5d:7d:
8c:e3:74:4a:9d:cd:c6:33:7d:8c:4d:cd:1f:6d:7f:
e9:ad:9d:98:e1:35:7b:01:af:50:dd:f5:d2:c1:61:
b8:4c:ee:80:5c:c2:c2:83:7e:f0:01:94:79:60:b1:
04:36:e4:81:0b:e4:ef:98:6d:76:4a:1f:4e:04:2c:
bd:2f:33:0e:35:60:b0:bc:1c:92:bb:09:68:8b:ed:
51:80:66:80:6e:39:43:b9:f8:4e:74:51:50:9e:d2:
81:93:cd:a2:d3:ba:f0:c5:94:00:0f:e8:d2:0f:cd:
ab:25:ff:2e:57:87:c0:bb:ff:26:df:1a:1e:94:2d:
2e:c2:84:f9:dd:6f:c1:8c:bd:93:bd:75:28:9b:07:
2e:20:b0:79:d9:7a:39:10:b9:7a:7f:34:09:6a:aa:
6e:7e:f3:53:2d:74:25:4c:8f:b1:1e:2f:bc:d7:95:
fe:90:bf:9a:c7:23:66:15:1c:77:4f:86:e1:ac:a2:
45:b1:0a:57:a3:5c:bd:f8:52:d9:0d:b7:de:49:95:
88:e3:4d:9f:92:c7:9f:49:76:a4:b5:8e:a0:b2:2d:
63:29:de:b7:47:ea:c9:df:f3:50:b1:26:16:a1:20:
6f:99:11:da:51:2d:ff:b0:08:79:0e:d4:17:9f:4b:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:F3:28:5A:B0:75:A9:96:61:AF:5B:CA:82:6C:BD:31:8B:0F:D8
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:25:11:53:b8:2d:78:77:7d:48:f1:69:32:fc:b7:fe:75:b1:
27:97:03:8a:8e:c1:b8:26:a2:3d:95:dc:36:b3:72:cc:45:6b:
2f:cd:38:16:12:2f:c9:ef:a9:f3:db:d4:2d:ae:30:e6:63:61:
f6:14:89:11:5d:3a:34:52:46:f1:df:93:ca:82:a2:91:c2:f8:
fc:fb:7b:7e:d1:54:5d:19:8c:12:99:f1:0b:40:dd:6f:ba:08:
52:91:da:08:f7:2e:ff:a4:77:f7:ff:15:63:e6:5d:a7:6b:0e:
a9:a1:cd:3a:0a:b3:a2:f4:3c:72:e0:91:c3:76:c3:b8:f5:e6:
b8:ee:b7:8f:48:a6:3f:20:79:2f:e1:31:fd:e5:50:ed:da:23:
db:c9:69:dc:1d:fc:a9:57:0f:32:4c:98:52:1b:86:f1:a0:ab:
0b:83:ba:5b:77:06:65:80:59:3d:2c:4d:bc:4b:39:36:18:e2:
17:48:51:8c:4d:59:e1:1f:6e:15:b9:5f:06:e5:e7:d8:aa:5b:
53:45:30:f3:59:4f:7d:78:f6:f1:af:48:21:d7:f2:1e:db:9f:
df:a4:7d:dd:d9:d0:51:30:68:f6:d8:eb:d7:56:b0:b4:11:8b:
af:b5:08:cf:7e:8a:55:c8:06:28:8d:5c:3b:e0:d7:83:ef:c4:
d7:83:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:38 2025 by rpki-client