Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: qy8GjwuuxlUuxhMhUfuyCEiIxQH34FEJKUkduQE2aQA=
Subject key identifier: 74:19:5E:35:2A:B5:1C:6C:6F:53:D1:75:B5:41:B4:AB:8A:9B:0A:5F
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 0198D4728947AB16613A06E9AB271FF2F57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0961
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: vMBZIxpvyzYaR7mspsJNj6TPQXxaIQN2ytDGCP93sfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:89:47:ab:16:61:3a:06:e9:ab:27:1f:f2:f5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=74195e352ab51c6c6f53d175b541b4ab8a9b0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:16:4f:cd:5f:dc:9b:14:28:9a:c3:aa:f7:
69:7c:75:8e:5b:f9:58:f7:78:a0:12:a5:aa:e4:ae:
ae:a4:14:4e:b2:95:20:71:15:4b:7b:b2:e8:f2:14:
4d:27:d0:ac:97:ce:7b:08:23:e7:09:d8:1f:00:34:
7f:8c:88:64:63:6e:be:4f:ef:5d:64:7b:cf:cf:94:
1f:52:6a:e6:8a:3c:2a:71:b4:ef:9c:9a:9f:5d:03:
a8:e3:1d:15:76:ab:c6:02:bb:88:c1:86:89:f8:18:
c5:db:37:0e:06:d6:e4:84:ca:9f:02:a8:60:56:78:
36:47:e8:11:07:ab:b8:72:8a:df:45:88:f6:53:d9:
f5:a5:bf:fb:d7:85:f2:59:9e:18:cc:00:f3:f6:fb:
80:3f:08:55:c1:27:9a:fc:ed:04:1c:83:e4:ef:7e:
8a:e3:02:e0:e1:49:fa:d7:9a:76:f0:e8:af:19:1f:
44:e5:19:95:6f:69:15:08:e6:0c:14:df:ad:97:41:
b0:ee:00:0d:5c:0d:aa:fd:3f:e3:2c:03:5f:65:ee:
5d:53:95:d8:24:77:b7:d3:34:b0:b8:12:1b:18:01:
05:46:f1:35:21:36:63:9a:42:3b:c5:1f:9b:4a:5b:
9d:66:51:a2:00:eb:67:39:98:09:a8:1c:31:20:6c:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:19:5E:35:2A:B5:1C:6C:6F:53:D1:75:B5:41:B4:AB:8A:9B:0A:5F
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c1:3b:6f:25:c3:26:82:74:d8:76:c4:97:3b:e5:ed:a4:b3:
be:0c:9a:90:4e:a0:ab:20:81:75:0c:9a:d8:f7:ec:5a:23:e0:
db:97:4b:9c:69:a9:36:1b:d9:e0:15:ae:6a:ce:d8:cc:89:d2:
89:26:7a:4f:f0:6e:39:33:7d:ca:a3:b0:b3:1d:df:d6:24:27:
f9:b4:5e:c7:56:9b:ff:31:06:c0:bb:e0:da:1d:c9:18:b1:c0:
fb:5f:6b:0d:45:7d:7a:86:97:0f:1d:e5:d4:07:cb:3b:5c:95:
7b:0c:d6:6d:52:26:ee:77:55:e2:58:ad:70:5d:e8:d2:c5:b5:
fb:09:76:b5:78:78:9f:73:89:06:bc:ee:cc:62:6c:a6:db:92:
e1:50:9e:79:7f:6c:ac:5c:33:48:25:c6:80:e2:8c:b1:ee:5d:
38:83:b8:54:5d:73:7e:e8:99:ac:d2:ec:03:66:65:fc:64:00:
c7:23:a6:a0:bc:09:19:ac:77:4b:cd:43:19:d2:1e:77:a9:66:
ce:cd:33:0a:83:85:6a:cc:9b:80:b8:28:ea:2b:0e:1e:31:14:
45:8d:d0:35:90:df:e8:0e:82:d1:c8:53:1a:62:04:bf:53:40:
a6:a3:ab:6e:4c:c6:4b:35:70:ed:25:8f:4f:4d:02:d2:c5:ca:
1b:99:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:18 2025 by rpki-client