Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: aaf87RBePVnRiXd4h1siIlZqbBxIvkkXGT1I594xFp8=
Subject key identifier: 14:AF:54:28:4C:0B:B1:A4:31:E3:1C:4E:EC:B7:B6:07:03:21:A5:CF
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 0198D583C2FA5F75A84E547BEA80674D5A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 161E
Signing time: Sat 23 Aug 2025 06:00:38 +0000
Manifest this update: Sat 23 Aug 2025 06:00:38 +0000
Manifest next update: Sun 24 Aug 2025 06:00:38 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: 1QASettyYCHaFrId5JXkI5ESgl5lqpgsDLz67rLH3Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c2:fa:5f:75:a8:4e:54:7b:ea:80:67:4d:5a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Aug 23 06:00:38 2025 GMT
Not After : Aug 24 06:00:38 2025 GMT
Subject: CN=14af54284c0bb1a431e31c4eecb7b6070321a5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:37:d7:98:b1:8f:78:05:c8:8d:10:0d:d7:
44:5b:86:b7:cd:c5:8f:00:bb:e3:1b:f0:69:a8:05:
ff:c4:af:43:94:31:a7:6d:c3:ab:57:28:9b:5e:cd:
e5:bb:a4:52:46:2f:0e:4d:a3:11:8b:f3:62:7c:8c:
90:7f:7e:3c:d0:db:f7:ad:50:e8:99:57:92:d7:9c:
b8:f6:6e:91:b2:f4:fe:0a:7d:a4:03:6b:eb:72:05:
e9:bc:5f:5d:b7:bd:7e:57:29:e8:63:ed:97:d7:62:
6e:dc:77:e6:39:77:30:8a:02:a5:f2:bb:16:88:19:
71:70:04:a1:9a:ca:7a:4b:b2:5c:4c:1f:58:75:a6:
12:5c:d0:64:8a:97:42:fb:47:4a:f0:10:e2:43:31:
77:dd:1a:7e:0f:6b:4d:67:4c:24:3c:7f:ae:5e:98:
14:56:4b:5e:ad:f4:a1:9a:07:90:c1:61:23:48:d8:
d7:8d:fe:35:c4:96:b4:51:4a:88:ac:71:7f:8f:86:
64:2f:74:12:1d:b9:78:ea:7b:d3:2c:a7:f9:3a:1c:
07:d6:9f:66:d3:d2:10:8d:f2:23:4c:62:0d:94:3b:
97:89:bf:c5:6f:fe:5d:a0:cd:66:dc:77:4c:e3:72:
52:f4:0a:b9:6f:0c:c2:00:43:90:e7:47:87:53:8b:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:54:28:4C:0B:B1:A4:31:E3:1C:4E:EC:B7:B6:07:03:21:A5:CF
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:74:79:c3:91:fa:31:b3:55:68:18:7b:fe:64:f2:fd:05:2e:
c2:9e:62:d4:32:77:06:90:64:87:7d:5a:03:f4:97:89:c3:b8:
51:70:11:8f:a3:57:bd:7d:77:d6:4b:91:09:60:06:1a:33:1a:
a9:e6:48:83:f6:2e:65:fc:9f:8d:50:4b:77:72:ac:44:e3:46:
6c:31:3d:b9:de:c7:db:5f:1f:37:d7:ce:24:98:b2:33:22:b9:
a8:51:78:86:fe:de:d2:93:a3:f6:85:cc:0e:6d:83:53:70:e8:
ac:55:7b:37:f0:8f:a1:1e:4c:1a:c8:10:8e:cc:8e:78:fc:cb:
34:d0:f4:00:dd:bc:a7:ba:bb:85:45:ea:14:23:95:ad:ff:7f:
42:0a:44:1b:f8:66:87:71:4b:86:91:99:5a:7a:47:5b:6b:2b:
71:56:24:25:55:43:cb:7c:68:53:02:97:e8:e3:8f:7c:f0:39:
1e:cc:fb:a4:d9:b6:0f:f9:a4:ac:a9:1d:0f:cd:f0:7e:bd:15:
f4:a9:97:67:0f:e6:af:b1:c1:b7:93:2a:94:83:ef:51:e2:d6:
cf:59:fb:0c:ba:bb:a1:15:9f:e0:e9:a2:7f:85:5b:5b:e1:3c:
ba:d5:5c:5a:90:a8:5e:d4:c6:6a:ec:2f:31:f4:0e:7d:8d:9b:
b7:64:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:09 2025 by rpki-client