Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: 60L8v2IivzuR8pM82L0OBVQkjkkyQp/O9IFpvMqgu+4=
Subject key identifier: AA:F2:29:5D:CE:D4:CB:A0:02:DC:6F:DC:C5:9B:F0:B7:D6:43:A4:75
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 0198D6CCE7E14B3AE9CE4EBD2FEA04E34B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 0805
Signing time: Sat 23 Aug 2025 12:00:09 +0000
Manifest this update: Sat 23 Aug 2025 12:00:09 +0000
Manifest next update: Sun 24 Aug 2025 12:00:09 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: KzD9gZjR82Q8ySCOSFmOGbBjHIzRXpGBqG/yXSwVaeM=)
2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e7:e1:4b:3a:e9:ce:4e:bd:2f:ea:04:e3:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Aug 23 12:00:09 2025 GMT
Not After : Aug 24 12:00:09 2025 GMT
Subject: CN=aaf2295dced4cba002dc6fdcc59bf0b7d643a475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:d3:35:20:46:1f:34:fc:b4:38:18:38:03:
fa:b0:2d:42:99:26:97:45:e3:0e:5f:dd:32:21:56:
f5:fc:20:aa:3d:73:32:5f:9b:81:e4:f5:6b:df:d2:
6e:03:a5:21:bb:81:18:d1:91:24:ce:e8:22:87:90:
cf:71:72:de:57:65:14:82:df:c0:4e:2a:b0:fc:63:
7d:7f:84:97:ac:5e:16:a5:fb:b1:d6:17:a2:1b:1f:
b4:4b:2e:fd:09:c7:26:79:74:90:73:8d:a6:48:17:
af:e9:31:b0:89:c9:ec:f8:06:37:ae:d9:e2:5f:c0:
4e:e0:2f:bd:1d:36:2f:57:e2:9f:89:16:56:86:28:
51:f9:19:52:24:ab:64:4e:1b:11:17:31:7e:ff:70:
2a:fd:d7:c2:e4:68:ea:bd:c3:86:7b:05:ad:76:55:
88:df:14:e8:d3:82:e9:46:58:01:60:53:ce:28:4c:
78:71:00:29:72:29:34:b0:49:8a:c1:57:26:5b:6b:
da:62:06:3f:c2:2b:1e:91:70:2c:46:73:63:11:c8:
ea:c0:8f:70:b2:5e:57:e5:b0:af:27:62:12:d3:c5:
2a:26:58:10:bc:77:77:8f:6c:72:8a:2f:a9:d1:9b:
1d:f9:2d:b3:31:b7:27:a0:1b:fd:4a:ac:ff:eb:a8:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:29:5D:CE:D4:CB:A0:02:DC:6F:DC:C5:9B:F0:B7:D6:43:A4:75
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:37:a8:47:88:8c:58:ee:b8:d8:2e:d9:97:d6:61:16:7e:c0:
a1:82:c8:9b:5c:27:da:72:06:54:ad:b0:e6:2c:c4:31:f7:1c:
1e:d0:90:ef:6a:0f:7c:2a:19:c5:c3:a7:73:64:f9:b4:b9:96:
55:2c:e7:f9:cb:3d:69:6d:47:6c:1f:84:b0:f5:6b:47:24:1b:
12:26:d8:ef:eb:05:27:97:dd:02:de:f8:1e:75:d1:56:52:7c:
34:a7:a8:5d:89:6c:fe:f1:39:c7:24:86:76:9a:eb:02:e3:1c:
4e:e2:40:d2:e3:28:67:37:20:1b:06:c6:73:93:94:23:97:12:
75:38:20:f2:51:95:13:2e:51:52:e8:88:cc:ce:ae:5b:7c:25:
d4:40:5e:5a:be:34:f9:f5:97:7c:90:7c:e3:66:12:f3:07:e1:
2f:ed:df:00:81:2c:83:5c:78:b2:1c:83:91:85:ca:37:3f:8d:
3b:27:a2:ee:e7:96:02:05:12:b3:bb:1b:7e:7e:66:fd:21:06:
c4:d9:29:7a:0f:25:bd:a2:44:b5:4e:a0:22:dc:72:9b:fd:42:
f6:df:97:a7:c5:fa:d9:0f:4f:fb:4e:1a:23:10:6e:c7:23:7d:
fc:7b:de:2e:1a:2f:5f:57:5f:ae:88:5c:65:2a:02:52:e9:56:
f7:1a:7b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:26:36 2025 by rpki-client