Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: DbRmgN+z56yAf68ANKTl6J5gjLaiyg1hFVwiDqpPe2M=
Subject key identifier: A5:99:58:42:1B:57:9A:36:BB:C6:0A:A2:41:D5:93:90:3E:E9:3C:4C
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 0197BA7EABF3638F55C238711C95A3480489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 08CF
Signing time: Sun 29 Jun 2025 07:02:33 +0000
Manifest this update: Sun 29 Jun 2025 07:02:33 +0000
Manifest next update: Mon 30 Jun 2025 07:02:33 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: t0bPlhuiAeUbz27ykIzYCvK0GciKxNGm7ef6SQPhZVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:ab:f3:63:8f:55:c2:38:71:1c:95:a3:48:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jun 29 07:02:33 2025 GMT
Not After : Jun 30 07:02:33 2025 GMT
Subject: CN=a59958421b579a36bbc60aa241d593903ee93c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:f7:98:0e:f3:f9:15:d1:b5:e3:f9:d5:ef:
dd:43:6e:1d:37:d9:92:73:17:85:8a:8c:b8:14:87:
9a:49:cd:88:70:19:35:e3:66:f3:7b:3b:4b:92:1d:
05:fe:6a:57:00:98:9c:2f:cf:1b:04:f1:bb:58:0e:
4b:0d:83:9f:ea:04:66:a5:cc:41:38:74:12:08:90:
28:da:83:a6:69:bd:e6:ea:9f:32:be:f7:6f:5b:0b:
a5:bf:37:90:8f:2e:5d:18:54:b3:1b:35:e9:b5:18:
c3:a2:6a:69:9d:43:26:75:e1:f2:7d:50:2c:ff:df:
48:db:b9:0d:4c:da:55:73:e5:3b:15:16:bf:5f:a4:
cc:6d:b3:a9:90:0f:52:b2:8c:dc:d5:b1:ef:5a:8d:
21:7d:cd:bc:6c:a0:b9:52:02:0e:61:60:e7:c4:33:
f9:11:96:cc:48:4c:51:a9:82:3f:64:43:d1:4d:2b:
75:d6:b0:f2:da:a0:a0:4e:93:44:8a:44:ae:9f:a0:
69:13:49:fe:ca:f9:78:47:37:cf:bf:98:aa:10:19:
67:64:09:10:0a:77:1d:0d:32:3d:a9:7c:6f:2a:4c:
f3:c9:d5:ec:4e:fa:ce:a0:b1:f4:4e:13:dd:3c:d0:
dd:61:a1:0c:a9:2b:89:ae:6d:47:bd:23:52:06:7f:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:58:42:1B:57:9A:36:BB:C6:0A:A2:41:D5:93:90:3E:E9:3C:4C
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1b:a7:51:bb:1f:0d:1e:d8:22:45:5d:4d:07:5d:60:3e:86:
16:5e:ed:ce:79:8e:fc:c9:34:43:70:65:6c:09:45:d9:b4:9c:
ea:9a:4a:3a:1d:78:ae:5f:25:3c:40:88:76:d6:38:32:49:b9:
a7:35:cc:32:88:a1:cb:c0:4f:cc:0c:6e:82:69:8c:53:56:50:
65:9c:e3:22:33:23:16:61:b8:68:99:4d:ae:84:fa:4b:c4:55:
7a:d5:aa:e7:6a:09:84:ac:02:dd:14:4e:7f:4c:ab:89:df:85:
f3:f0:32:a6:3f:96:a0:e0:ec:f1:3f:35:12:57:af:7b:c2:1b:
6d:fd:bf:a9:ef:53:69:d6:e6:e6:fc:b4:94:3b:6c:6c:09:07:
f2:6f:ac:3e:c8:62:b6:e6:fc:dc:fe:a2:96:36:ab:25:6f:66:
1b:6a:c8:9e:6b:6c:46:d4:5c:2e:64:56:c2:28:b6:ae:29:3c:
19:c8:1b:a3:69:10:ee:46:27:21:dc:16:13:1b:c4:87:14:a3:
04:11:dd:56:40:63:93:ee:b5:38:8d:da:92:ad:05:8d:13:21:
b9:d6:31:e9:68:8d:d9:e4:fa:8b:db:b1:d1:91:3d:c6:47:39:
63:f0:3d:a3:7a:76:5d:cb:f4:87:6c:c6:30:f4:59:9e:b7:9f:
e5:14:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:12:12 2025 by rpki-client