Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: Q/Qsnm2NtUZYMQ9Cg4/vIN3Fdi4S9dsUl+2ETx9HOdc=
Subject key identifier: 01:96:8F:B6:DF:B9:3D:8E:BD:FC:7B:A2:F2:79:C0:AD:D3:B2:E7:4D
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 0198D54E671017880F715CD624D7EA88DA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 12FF
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: pTpqEk7/EsxGRmWmTzCweGS4arJGbItFBe5DEnkJAMA=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:67:10:17:88:0f:71:5c:d6:24:d7:ea:88:da:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=01968fb6dfb93d8ebdfc7ba2f279c0add3b2e74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:ce:70:cf:79:f9:9e:64:09:f7:40:1d:c9:
80:c5:6c:1e:33:ed:b9:88:8b:0b:3e:89:62:53:fd:
ad:10:e6:15:c0:4a:1a:40:e2:f3:2c:63:96:cb:7c:
91:2c:13:7d:09:10:09:fd:c5:fe:a8:64:61:b3:cf:
fc:57:8d:39:ce:61:90:37:5b:9c:25:5c:9a:4f:b7:
d6:65:ed:08:8c:cd:16:c8:f6:60:37:b4:ce:9e:40:
31:d8:6e:19:d7:7c:2a:89:b9:0f:2b:03:7a:ce:99:
cd:8a:b9:04:e8:92:4b:f0:d2:7c:ad:cb:49:f7:97:
0c:f3:31:66:de:05:93:1a:51:b5:8e:68:05:4e:c0:
25:3b:aa:a1:bb:0f:cd:86:3c:12:c1:f6:b6:3e:1b:
ae:8a:c8:ba:53:ff:fe:b9:7e:39:a2:ea:b6:d4:89:
c7:7d:1a:03:99:51:74:0a:82:1e:1e:2a:ce:24:30:
00:c6:d4:b5:70:fd:a7:f3:e9:2a:cb:c3:cc:e6:cf:
1c:b3:15:fe:64:80:6a:51:9c:d1:24:01:16:a0:b9:
21:c4:26:93:b3:0f:5f:04:8a:e9:33:11:10:85:7a:
1d:77:5b:b8:b0:90:ed:e6:62:8c:71:4d:f6:27:92:
33:73:e3:4e:d6:f0:e4:d9:7f:e7:6d:7f:62:e8:75:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:8F:B6:DF:B9:3D:8E:BD:FC:7B:A2:F2:79:C0:AD:D3:B2:E7:4D
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b9:84:17:4e:6c:62:86:a2:2d:cb:2e:06:08:f9:3c:85:72:
8f:8e:b8:0d:0d:d0:c7:bc:bd:a9:37:52:af:ca:40:20:4a:75:
50:73:2c:8f:ad:09:d3:90:e0:1f:ed:cd:05:fe:28:aa:f9:11:
71:98:46:e1:16:e4:14:89:8f:4b:46:7f:1f:d8:c7:e7:24:2a:
54:3b:04:06:74:72:4c:0e:a6:de:52:de:f3:e0:ae:0a:9d:34:
cd:d0:3f:b3:e1:f3:ac:bc:31:6b:a4:6c:77:4f:00:ef:05:e2:
c4:da:82:32:8e:68:a6:3d:cb:bd:3d:56:c5:39:e1:70:db:0a:
a8:56:4f:4a:c7:e8:ac:7f:cb:20:37:b4:4c:b6:1e:39:a3:dd:
ae:0b:a9:23:28:c0:55:0e:db:bd:30:fd:69:b8:63:70:b6:e1:
f5:4c:fd:17:23:28:a5:14:25:2a:18:76:6d:30:57:34:8b:55:
5d:fb:a5:8a:ba:0f:7f:85:95:06:48:f4:4d:7f:8e:4d:a5:81:
f6:2e:70:21:ff:a3:fc:bb:dc:6f:92:35:99:fa:45:93:dc:9d:
44:dc:b8:12:ea:38:10:89:03:d1:b1:e2:9a:32:9b:90:03:94:
38:49:50:55:49:07:4c:c5:42:9c:50:6f:65:6b:d6:3e:b0:8e:
55:d9:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:31 2025 by rpki-client