Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: KQXC92nAg35lZQD8q+X6ECEcGNCvHPFrkCHOuOKlGA4=
Subject key identifier: 8E:85:6D:1F:21:78:99:C4:CA:F6:4D:16:68:22:FC:3A:96:07:99:09
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 0197CC83F529CB6C31E613CB019D1DF18E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 010C
Signing time: Wed 02 Jul 2025 19:01:29 +0000
Manifest this update: Wed 02 Jul 2025 19:01:29 +0000
Manifest next update: Thu 03 Jul 2025 19:01:29 +0000
Files and hashes: 1: O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa (hash: 3xRQqmBaiPMEC6+BvwWE12p1a9per8d/4WLoxHZdLwY=)
2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: ohSCWefZPyAC9/KiqXXfzBpP9smLiA1RmJqP63dp0SI=)
3: hs1Ttmuuy8oKm2rJqVYgyDXaPIw.roa (hash: Byo6rO4TnKOVrKw6LlKH8flPLRHULJLiFuZMsf82Wv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:f5:29:cb:6c:31:e6:13:cb:01:9d:1d:f1:8e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Jul 2 19:01:29 2025 GMT
Not After : Jul 3 19:01:29 2025 GMT
Subject: CN=8e856d1f217899c4caf64d166822fc3a96079909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:bf:dc:1c:59:7b:73:c1:be:80:30:f0:28:
12:3f:bb:e7:95:f5:c1:70:c3:ac:ce:61:d8:e1:24:
1f:fd:3b:27:55:c9:12:98:08:de:56:35:22:34:dd:
cf:37:f6:c0:27:ca:bc:d9:cc:d1:a1:b8:d5:e2:1a:
67:5f:a9:46:6f:fc:dc:8c:f6:e9:d7:0c:61:13:2a:
df:82:ed:cf:eb:03:ea:60:18:9b:a5:96:be:04:3f:
0e:c3:d8:74:03:62:5a:37:ff:cd:c1:25:88:7c:89:
f2:06:cb:3a:f8:8e:5c:d3:d3:a0:26:a4:95:41:0b:
ae:c2:a8:e7:28:7e:c9:d8:99:14:4a:7b:4d:c9:6e:
fb:6d:d1:4b:d3:12:49:c7:3c:f5:26:85:61:ca:35:
05:38:45:68:03:ed:b5:2d:6a:67:41:8d:e7:93:e7:
6d:7c:d4:8d:94:00:f6:2c:cd:2d:8e:85:d8:26:7d:
41:23:07:a4:8b:95:d0:7e:8a:cb:8d:b1:c0:d3:f3:
d8:a4:68:c9:6a:c0:03:34:7a:1c:d8:3a:75:e4:d6:
c4:de:95:64:fb:8b:b2:ce:2e:06:cf:c5:27:f3:04:
ca:4f:fc:d6:95:f0:f9:12:e2:8a:65:08:70:62:db:
0e:5b:ba:cf:21:3a:b5:fd:85:51:14:e6:cd:af:c8:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:6D:1F:21:78:99:C4:CA:F6:4D:16:68:22:FC:3A:96:07:99:09
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:46:26:db:24:98:21:c6:91:d1:c2:23:42:67:b7:fa:7e:
07:39:b6:8c:2d:d5:b7:2e:14:a5:b1:27:db:a8:ec:c0:2d:c8:
b1:76:13:7f:91:ff:af:37:86:d7:8c:4f:2e:15:52:88:58:38:
8e:0e:fc:b2:45:90:12:28:16:1f:a2:13:a8:68:55:b5:69:57:
7f:ea:a9:90:9f:16:9b:05:3e:b2:39:78:b8:81:37:90:c8:36:
52:5c:ce:50:bd:37:c5:50:18:db:c6:00:43:98:7d:67:1b:79:
59:42:a9:25:df:b6:4b:14:ee:b5:d2:1a:ff:54:b7:be:5e:df:
c9:02:c8:59:c9:8e:90:98:30:4d:83:57:59:da:fc:8e:a9:70:
92:73:fb:b4:9f:ac:b0:f8:0e:23:21:5e:ed:63:da:cd:e7:76:
47:6e:ec:80:c8:33:99:49:d8:6f:47:f0:8f:61:d0:a2:7e:7d:
a3:d4:71:00:bf:2e:7c:c1:58:b1:39:ef:58:3e:1e:62:1e:3c:
06:7d:f1:a6:9a:5c:48:95:4c:aa:6a:8c:5b:a0:ee:2d:4d:14:
6b:05:f9:38:4c:c4:dd:f7:5e:d2:71:5c:4a:b5:22:b8:46:27:
61:4c:5d:fb:ac:44:17:4d:f8:a0:57:b4:c7:11:05:31:42:2f:
e2:0e:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:57:38 2025 by rpki-client