Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: x12e+/wL4mxNZjh46eQdWxzsypbTQS0D6gtx0EJoMf4=
Subject key identifier: 28:E3:DC:BE:4A:7F:05:6D:71:33:93:AD:23:4D:4F:64:E8:F6:96:5D
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0198D6982D447F9F9F3DBCCE2A2159C2E38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 165C
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=)
5: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
6: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
7: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: XW049yXWH1nypoSjVn3DVoxBbuPitgN4M8RqY9DUiEs=)
8: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2d:44:7f:9f:9f:3d:bc:ce:2a:21:59:c2:e3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=28e3dcbe4a7f056d713393ad234d4f64e8f6965d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:e1:67:31:c5:31:98:28:b2:30:41:81:76:
eb:cc:68:7c:dd:fc:94:d3:14:a9:e1:fb:db:25:86:
35:c9:34:e7:f7:af:cd:f7:64:bd:6b:21:0b:04:a4:
d6:66:fc:7b:aa:bf:c7:45:5a:1e:51:e1:4b:df:49:
87:21:81:fa:e3:d8:c9:b7:a1:d6:71:29:05:12:fc:
8c:02:c7:da:e3:4d:5b:cf:8b:1f:24:89:6b:36:15:
3e:ad:d2:44:cd:5c:e2:a7:8d:67:67:44:b8:d9:de:
79:e0:42:bc:ec:58:f2:a5:25:22:ca:4f:d6:90:da:
f7:19:59:60:e5:e1:f5:05:82:2e:76:79:a8:ec:ea:
d0:17:5d:28:d6:35:80:b2:f3:fe:e5:94:af:b9:c7:
47:a5:a3:ba:5c:c0:7f:bd:2a:38:03:b2:de:a4:d0:
ea:bf:45:18:6e:49:14:0e:16:31:a3:9f:96:af:8e:
b0:a5:0c:7d:1f:62:56:2e:31:be:4d:65:94:36:61:
0f:94:fa:49:28:6b:3b:7e:a1:b1:76:f4:43:92:50:
1e:8e:1a:85:8a:3f:62:fe:4f:47:91:03:da:be:7d:
8f:db:ff:dc:b2:26:db:07:f3:ca:87:ba:fb:3f:75:
aa:b7:67:ab:0a:5e:26:19:c2:24:46:b7:ec:af:aa:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:DC:BE:4A:7F:05:6D:71:33:93:AD:23:4D:4F:64:E8:F6:96:5D
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:40:77:50:1a:c4:a3:15:89:1e:60:62:48:00:38:c9:47:33:
29:e2:2b:cf:66:f5:4f:49:ce:07:02:a5:7a:46:a8:38:56:59:
f7:f7:fe:c2:a4:7c:2d:d6:09:3f:14:3b:2f:98:63:a0:85:26:
76:5f:fd:1b:11:e9:29:93:31:79:2f:8e:2a:d2:9b:42:20:06:
3d:05:34:5f:11:52:8d:ee:78:d4:8b:05:31:7a:49:53:2c:8b:
a9:bb:7e:45:9c:e7:a6:fb:dd:6e:09:3e:de:ae:61:69:76:10:
76:ac:ed:13:19:be:a8:d5:36:c6:c7:83:0d:36:61:ee:72:77:
d4:3f:ff:a7:0c:9a:a0:25:0e:fc:6d:45:74:3c:d0:f3:39:90:
78:45:b3:42:80:df:d9:ff:5f:6d:69:e9:27:f4:d3:5f:f7:11:
03:28:f0:a4:10:63:94:dd:44:b6:d2:c4:ba:03:c0:22:42:de:
8f:31:8a:e7:01:50:00:5c:b5:27:33:57:ae:96:39:c2:99:a7:
49:66:8b:f3:52:b8:80:02:cc:4b:b7:24:db:1c:6e:bb:0e:09:
4c:49:3d:15:e2:44:d8:62:db:92:01:6c:62:c8:03:d8:08:2a:
94:72:7c:b6:96:4a:57:6b:00:46:5c:a4:7a:01:e9:8c:38:c0:
ea:75:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:08 2025 by rpki-client