Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier: Kleog8AmKSVnaJkpjIQAy3hJ/n6NDNgwjQTtPsIm/tE=
Subject key identifier: 45:1A:F1:D9:2C:E5:54:98:81:B9:54:08:48:92:F2:D4:9C:0D:F3:07
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial: 0198D54E8792D06D1D2DE2311B008A5713D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: JzMC6J-x27UinyjGPkrtJtPKKbM.roa (hash: MM6S0DzqbOgEC1Eeh2U4n74HZ5Ntf2dFAQc2wkIxZDw=)
2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: 4K3D8jpbf21nO+UMysutPseal2Fz7Zps53aZEGcCGX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:87:92:d0:6d:1d:2d:e2:31:1b:00:8a:57:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=451af1d92ce5549881b954084892f2d49c0df307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:35:d9:f8:e3:94:72:d3:0d:77:63:02:08:
70:08:2c:64:cc:54:a4:e6:28:e6:34:c2:d9:e1:98:
b8:c6:e3:db:2b:b3:21:70:72:51:09:10:58:89:20:
f9:65:01:df:19:05:0a:9a:7c:f3:2b:9f:c5:32:c8:
25:ae:08:c0:ec:05:34:05:cb:76:c1:fc:ae:fd:f7:
fd:3b:1e:6b:ea:28:1f:6f:16:bd:98:6e:74:cd:22:
84:f2:12:7a:1b:7b:18:76:8b:2d:27:0e:25:76:ec:
87:35:ff:73:a6:22:cf:ca:fa:d4:ed:fd:ed:91:60:
bf:dc:5f:b7:bf:71:44:8e:a2:db:21:54:3b:dd:97:
a2:c1:2e:73:02:72:da:68:7d:b5:33:7b:81:a3:4a:
5a:71:6c:a1:9b:f7:73:b1:a9:20:c3:55:31:d1:4a:
d9:84:47:d6:1a:a5:75:bc:7c:f9:c0:16:b5:de:e5:
d7:cb:59:80:46:f9:68:4c:7b:2f:7b:11:d2:08:7d:
cc:7c:da:95:e5:93:8f:e9:60:29:f1:44:5b:2e:69:
40:20:dd:ce:54:f3:2c:a9:ae:9c:89:7c:18:ff:04:
60:8d:c9:aa:25:43:91:ab:6a:13:53:b7:73:f0:8e:
00:43:30:88:8d:b8:59:66:75:ff:2e:f8:77:16:73:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1A:F1:D9:2C:E5:54:98:81:B9:54:08:48:92:F2:D4:9C:0D:F3:07
X509v3 Authority Key Identifier:
keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7e:85:05:0b:cf:02:92:df:63:77:c0:e3:9f:10:6f:61:dc:
57:86:a1:ea:73:2c:34:46:9d:bc:e8:13:c8:f0:f2:4b:b9:8c:
8e:80:3a:6a:5e:59:ca:d7:23:ac:8d:f9:cb:ea:38:c0:56:b4:
e3:99:c5:88:5d:4e:8f:6b:ce:3c:f2:13:f3:c7:25:6c:30:a9:
ba:da:e3:3b:35:5d:7a:ef:22:42:92:fe:00:6d:79:48:43:81:
ef:e4:30:40:60:bb:f5:9b:35:5a:ad:7b:31:bf:a9:f6:39:23:
50:9b:2e:9f:68:6e:05:d5:1e:4b:f1:0d:fb:ed:8d:71:f7:cc:
7f:ad:4b:d8:ec:aa:92:45:a3:c2:2d:49:9b:f4:8f:21:3e:7d:
a3:bb:2f:8e:1c:d1:78:08:78:a8:ef:7c:39:18:b1:73:67:27:
02:1e:0d:a3:ab:41:b6:27:80:99:56:60:b0:5d:d0:fd:92:38:
8f:b3:f2:f2:9a:4b:66:0b:09:7c:2d:14:48:97:6f:1a:21:32:
91:15:03:7c:3f:fe:a3:a9:8e:d1:40:db:a8:36:04:3a:ab:cb:
83:14:82:7b:6c:d1:a7:26:72:ce:9c:b5:d4:d9:4f:47:1e:b8:
37:42:31:ff:12:59:eb:db:d6:01:83:06:b7:c2:9b:c2:f6:62:
a5:87:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:41 2025 by rpki-client