Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: 3t/cx64YqIxjGAk/WlS6en0331kL++Id62EQ6wBamlE=
Subject key identifier: 5A:47:9B:74:4B:12:DB:ED:70:06:86:ED:30:64:65:10:0E:95:1D:45
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 0198D73BE41205298F43DCB7F075F2BF1088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 104E
Signing time: Sat 23 Aug 2025 14:01:23 +0000
Manifest this update: Sat 23 Aug 2025 14:01:23 +0000
Manifest next update: Sun 24 Aug 2025 14:01:23 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: i00Jo/4EnsV1WlsH37aNCB1NDvcTnyAmthyaySEwKqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:e4:12:05:29:8f:43:dc:b7:f0:75:f2:bf:10:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Aug 23 14:01:23 2025 GMT
Not After : Aug 24 14:01:23 2025 GMT
Subject: CN=5a479b744b12dbed700686ed306465100e951d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:db:5d:a2:16:d3:f6:f4:11:f6:61:bf:3f:
6a:f3:bf:7c:a9:bf:cd:06:3a:03:d4:e0:3d:f2:25:
e7:f6:20:e6:82:b2:d0:53:bc:05:87:82:2f:d7:06:
7b:be:f9:57:1e:17:6f:74:1d:14:fc:c1:43:03:a9:
7e:b2:08:ac:e3:85:13:11:91:83:6c:20:c7:19:c6:
42:0a:38:a7:a7:a4:c1:00:6b:83:2b:0d:09:7d:28:
bf:6f:7b:5b:c2:d7:bc:69:13:90:3b:c4:28:80:b0:
8a:8f:51:be:3b:6a:fe:11:69:ae:81:ab:06:1a:2b:
40:93:5d:e6:e3:bc:cf:fc:c0:93:64:14:70:2a:69:
b1:2a:fb:62:8f:88:7b:06:b9:72:99:f8:14:58:c6:
75:27:c8:93:90:e2:44:d4:6b:11:09:48:11:05:eb:
d1:83:b1:fd:72:d7:a6:39:01:68:db:27:81:9f:58:
4a:06:8c:e1:70:d8:50:82:75:52:e0:4b:85:4a:06:
6f:60:80:3b:62:4d:ca:a8:f6:7b:21:22:da:4c:b8:
da:c0:c7:6b:97:54:66:d8:aa:4b:e9:39:9c:d7:b9:
86:13:3d:57:7e:65:a6:49:89:8a:e2:4c:df:d1:9a:
f3:f3:f0:1b:f9:72:95:7b:cf:b6:db:2b:c1:8b:83:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:47:9B:74:4B:12:DB:ED:70:06:86:ED:30:64:65:10:0E:95:1D:45
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a8:b5:5d:73:e2:18:2f:90:36:b0:ab:a5:ee:e0:97:d9:56:
f5:dd:ec:5a:df:03:69:18:2b:01:39:05:fe:db:cd:c2:ef:77:
ae:02:c0:25:c2:55:21:9f:51:1d:58:45:09:0c:5f:03:f1:cb:
4b:fd:67:94:9f:b2:65:51:90:9f:ea:d3:a5:6f:c5:05:27:d8:
d2:c2:04:95:27:a7:96:ac:84:02:91:df:b8:40:b2:a9:97:d3:
75:c8:78:37:36:29:26:08:ff:41:b6:c3:1b:4b:85:51:99:21:
11:3d:55:a8:4a:33:58:22:97:1b:83:72:df:62:44:40:32:e3:
6b:b2:1c:f0:a3:fc:c9:2c:8d:90:cf:29:dc:80:b0:78:04:e4:
37:20:55:50:05:9f:58:0a:45:50:24:ad:cf:e3:1e:85:6a:6e:
95:74:f8:cf:c7:2e:70:7e:f9:06:3e:0a:6a:eb:46:aa:c0:23:
79:18:53:9d:50:da:62:34:26:4a:73:a7:c0:98:25:1d:59:fb:
d6:f1:d4:d9:ef:b5:a5:f4:c8:32:45:a3:8c:0b:5c:79:b6:51:
f5:22:09:67:bd:93:a6:94:aa:94:4f:4d:c1:70:36:9c:34:cc:
29:b0:ce:7d:80:b2:a7:14:9d:3b:07:1c:c1:0a:7b:b6:db:70:
22:ea:86:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:10 2025 by rpki-client