Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier: Wp2qacdBPlNFVl3Y33SYyDnR8jtEr/HcTBHb7sAzuGI=
Subject key identifier: 5A:2F:D9:ED:FF:75:11:0F:17:C9:53:53:B3:7B:93:3A:FC:18:DB:76
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial: 0198D6CD267889E69EF823BA7DDE9D8FA8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:25 +0000
Manifest this update: Sat 23 Aug 2025 12:00:25 +0000
Manifest next update: Sun 24 Aug 2025 12:00:25 +0000
Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: dgxbMaU2973tul4DbSYpirMVaZIaj8AuLhnBinvGgmo=)
2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:26:78:89:e6:9e:f8:23:ba:7d:de:9d:8f:a8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Validity
Not Before: Aug 23 12:00:25 2025 GMT
Not After : Aug 24 12:00:25 2025 GMT
Subject: CN=5a2fd9edff75110f17c95353b37b933afc18db76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:1f:41:e1:64:31:82:5d:2e:9d:65:96:95:
6c:3e:1a:fd:65:a1:a8:ee:57:eb:ee:fc:fb:b3:e2:
ab:a1:67:72:12:03:d0:2e:21:ec:dd:d5:48:a8:8e:
8d:f3:2b:07:99:bc:4a:4f:d1:a2:6f:33:60:ba:e0:
8c:c5:5f:9e:d9:53:24:c8:c3:60:d0:30:91:e4:cc:
c1:08:f1:4e:88:9b:63:73:bb:44:de:c3:e9:b5:12:
60:8c:9e:3c:e1:93:e1:35:69:cf:3a:5c:4f:d0:fb:
1b:c3:d7:c3:cb:49:30:80:ac:1b:65:7c:8d:4e:e9:
18:57:ca:44:76:68:cb:f5:57:d1:b8:e7:ac:80:5e:
67:ed:7d:1b:b4:57:e1:5b:2c:10:9d:b6:87:ae:6c:
f7:ba:f3:b7:b9:83:13:5d:5b:58:36:bb:9a:dd:7c:
38:97:aa:8f:53:fb:fb:9f:dd:55:10:2e:5b:8b:85:
94:fe:37:e1:21:b3:93:6a:45:ac:01:f4:27:23:09:
c1:be:40:b3:d5:b8:b3:ab:ba:4c:12:ea:b4:ba:2f:
c6:b2:0b:1b:0b:45:4a:9b:b3:61:89:50:b4:90:bd:
df:33:43:3c:67:1b:65:3f:a1:ce:54:ac:c7:fd:98:
d8:ce:1d:ad:e5:8d:25:8e:cc:01:e1:4a:b2:4e:10:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:D9:ED:FF:75:11:0F:17:C9:53:53:B3:7B:93:3A:FC:18:DB:76
X509v3 Authority Key Identifier:
keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8a:67:da:e2:52:6c:b1:f6:37:52:5b:ac:2c:c4:4b:56:3a:
7f:59:42:2b:36:46:ba:de:c5:08:48:05:9b:12:18:f9:57:df:
a0:85:e5:9f:bc:18:9f:87:f5:fc:a3:56:39:f9:87:1e:02:eb:
ee:eb:63:39:62:e9:bc:4b:7a:fd:47:f0:86:95:ad:e9:db:4b:
6e:9b:8c:15:b0:45:af:66:8f:ec:2e:2f:56:c5:e6:2e:bc:58:
8a:40:70:68:26:71:2c:1c:20:a7:c6:83:c6:75:18:b0:d0:81:
17:df:79:3f:4a:b7:32:b5:f4:7f:ab:a7:a4:15:b1:50:4f:b6:
9e:dc:00:cf:da:9b:5c:00:29:1c:a7:ba:9c:49:08:20:18:95:
e3:bc:e1:03:c8:03:2e:6d:37:df:60:f9:72:00:81:62:3a:df:
9f:13:9c:cc:bd:57:04:57:ca:df:66:ac:b8:a1:83:e9:5f:a0:
ea:a6:da:f2:b5:4d:84:e9:30:3e:26:03:60:f2:27:c4:89:6e:
43:5c:34:eb:fe:bf:6c:06:6e:e2:fc:a9:87:06:eb:71:03:b2:
be:96:99:cc:ec:4a:98:03:42:4d:0c:c9:30:ee:cf:69:48:ee:
5c:f6:76:9d:99:ba:81:d9:ab:6f:a1:8b:a7:07:d6:42:08:cd:
b7:1a:44:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:31 2025 by rpki-client