Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: 7JRwDM0m7/CtZPTKwTqYhdkemYtvYk7PenhAbVnJ1sU=
Subject key identifier: 0C:56:23:79:16:C0:F8:19:D8:B2:A7:B5:DE:26:49:98:2B:CA:0C:1A
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 0198D7E11ED26D17A62C4A9EE5F8A0C7F0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1689
Signing time: Sat 23 Aug 2025 17:01:51 +0000
Manifest this update: Sat 23 Aug 2025 17:01:51 +0000
Manifest next update: Sun 24 Aug 2025 17:01:51 +0000
Files and hashes: 1: 1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa (hash: AFl9DeBDP0dSG/OK6zMhaGWYU/Hi58NsW+5Sbk8Zc2c=)
2: 6N4n07cpVsvDfcO3eEPVPOVbfQg.roa (hash: nhZwGT39i2nPsTiPGKrLhdrJBmLcv3M5z0QYlPKdUVs=)
3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: JZF3tPARx94CFE7ed+JzIiOevi9YlUBuw1UQjJwx4pY=)
4: jZDFfglCAVXqMiHQiNaCS_ykt5c.roa (hash: Z9pj0iwTHPQ+PmAz+kp9u4GZKNWWC8RI/dko3M2WedQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:1e:d2:6d:17:a6:2c:4a:9e:e5:f8:a0:c7:f0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Aug 23 17:01:51 2025 GMT
Not After : Aug 24 17:01:51 2025 GMT
Subject: CN=0c56237916c0f819d8b2a7b5de2649982bca0c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:9f:0d:b0:e3:3f:6b:f9:b9:20:ad:d3:4f:
d2:06:91:0c:02:cb:06:5e:4f:8a:c6:63:f0:31:3b:
75:a4:1d:60:2c:fd:99:46:ab:b2:7f:ef:01:20:2c:
21:fb:c6:9d:38:b4:0f:72:f4:95:09:0b:1d:80:ff:
1d:37:92:34:6a:8f:e7:51:a3:45:80:25:ff:8d:45:
d2:1f:ad:cd:d7:df:4c:31:aa:0d:07:fd:45:ca:9c:
75:78:53:3a:3e:70:f4:a9:8b:62:c9:d5:8c:14:fe:
0e:1b:aa:3f:a8:bb:7f:14:c5:68:58:f8:55:4b:ef:
c6:b0:4b:b2:f1:8f:a9:83:72:ae:aa:60:f5:66:ab:
37:37:be:7f:b9:c4:85:2c:13:f3:63:62:fb:49:f3:
6e:2a:5d:95:f8:3e:6b:a6:19:31:6d:76:da:89:23:
59:07:07:68:d2:c1:b2:4a:83:7e:06:47:1b:81:ec:
44:ab:9a:5c:00:ef:52:82:fd:fc:f1:29:9a:87:ea:
78:5b:28:54:54:e1:ec:9d:24:c5:cd:cf:2d:82:ad:
c5:ad:bd:e1:36:94:55:5d:e3:04:ca:d4:80:c4:db:
3c:83:92:28:47:e6:c3:a1:8a:33:1e:fc:ce:f3:b2:
21:08:6a:ef:9e:06:90:52:cd:57:94:56:c7:2a:b6:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:56:23:79:16:C0:F8:19:D8:B2:A7:B5:DE:26:49:98:2B:CA:0C:1A
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:39:5c:2c:4c:37:05:be:c3:a7:55:95:a6:11:db:44:f7:93:
31:0c:55:46:b8:fd:2a:76:ae:93:2d:8d:88:25:ac:46:56:bf:
f9:22:fe:41:78:44:55:f0:ca:55:0a:c6:51:f7:c7:13:34:44:
52:cf:fd:ec:3b:4d:a2:f7:29:3d:c0:ed:d2:57:5e:6c:7d:77:
36:db:46:ca:b9:46:90:8c:ea:35:34:bb:72:86:44:01:e5:d1:
3b:58:ba:66:a1:f3:d8:76:4f:3b:8f:41:f1:b7:d8:0e:10:0f:
96:b5:3c:42:8b:5f:29:06:e5:f3:40:d0:62:3f:c6:00:35:68:
48:74:20:a3:ba:5a:f0:03:7e:0e:c8:de:87:da:28:c2:d9:2a:
03:c1:63:5f:e3:11:7d:84:a6:16:08:68:85:61:47:20:df:42:
fb:3b:b1:d4:18:c1:c6:19:ac:d7:44:a8:0c:9d:a1:74:16:bc:
79:a5:8c:4f:0b:a7:93:78:6b:c4:61:6b:5f:71:0e:94:d4:29:
04:31:f7:12:8b:1e:84:0e:0d:a5:a7:20:34:e0:1a:f1:47:60:
63:84:90:fb:b4:b5:b8:c4:fa:5f:e2:96:ed:62:f8:0e:8c:bc:
53:51:4e:ff:11:b0:12:52:5e:fa:47:56:51:42:3b:52:81:b0:
63:de:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:37 2025 by rpki-client