Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: eYdYCFLMadFs5vbc8Dp6nU1n0U4BasQqydtCzVNEdJo=
Subject key identifier: C6:20:C6:5D:67:6A:16:59:D2:DD:A4:2B:77:47:80:0D:01:7C:73:4C
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 0198D5834AF42186E25D16733F74739123F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: UMnX42CmEnS+bFwCz5SaQlHnI+XtU5a1DFGi76GLBfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4a:f4:21:86:e2:5d:16:73:3f:74:73:91:23:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=c620c65d676a1659d2dda42b7747800d017c734c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:58:22:29:6e:73:b7:da:c6:51:7f:90:8e:
e3:a0:c6:9a:cc:9a:d5:3c:a0:48:ac:a6:42:05:7c:
fc:ac:21:9d:35:43:bf:2a:3d:24:44:fd:59:2e:ec:
52:83:26:ca:4b:b3:83:98:84:91:5f:af:18:7b:42:
d5:48:58:c6:76:92:d9:0a:b1:7e:53:9a:64:ac:65:
6a:e2:b7:6a:d3:de:ed:34:50:e2:28:bb:76:a9:25:
da:2a:9b:c1:40:06:37:75:73:f0:2f:79:76:bb:4b:
68:d7:96:40:28:12:82:2d:70:9c:37:82:ef:a5:d6:
a5:2c:dc:93:99:32:2d:43:69:dc:ce:d1:13:6f:24:
6e:8a:3d:8c:90:69:e9:52:8d:c5:d5:46:d7:60:69:
e7:a4:e0:fb:96:12:7d:a8:74:ba:8e:f3:15:38:e3:
c5:dc:ff:ba:d8:3f:c6:d5:44:25:75:40:1a:03:be:
61:0e:b9:86:af:b2:49:8a:20:e3:16:b1:2c:40:b8:
8e:b7:a4:76:48:7f:f6:6e:c3:5a:9a:e1:cb:6d:89:
08:07:61:91:9a:02:57:31:9b:8a:c4:b7:49:f9:a6:
fa:9a:ef:5b:df:cf:78:d2:78:a7:8c:0a:3e:c3:e1:
61:38:c9:92:cc:e3:c3:4f:b8:53:37:75:df:7b:2b:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:20:C6:5D:67:6A:16:59:D2:DD:A4:2B:77:47:80:0D:01:7C:73:4C
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:89:2b:59:2a:b6:36:33:41:1f:f2:d9:43:0c:0c:c4:58:6c:
e6:cd:2b:33:74:ec:e1:09:a4:43:f3:04:9d:12:d6:8a:28:9e:
80:35:8c:8e:8e:95:d1:f7:b2:3b:e1:16:e5:9e:da:2a:89:8e:
a2:db:75:39:01:b3:64:6a:fc:04:bc:d9:24:05:93:6d:fc:b1:
0d:70:9f:c5:64:4f:7e:a3:f9:e4:37:44:5f:24:97:a1:7e:92:
40:aa:f6:03:42:8d:17:51:06:f9:38:d7:77:b9:dd:4c:5f:8e:
98:32:87:10:60:88:63:78:a6:9f:6c:2b:ff:aa:19:29:ba:cd:
5e:d5:02:48:00:46:2a:6c:87:ac:bc:f6:ac:12:aa:f8:2b:3c:
c7:44:86:c3:89:82:3b:b9:cd:d6:0c:90:0d:65:87:13:0a:7c:
46:31:d3:aa:66:cd:47:f1:16:bc:79:5e:05:07:54:c7:ca:4d:
9f:85:82:ab:04:ac:0d:49:ac:66:80:2d:c7:0a:8e:0d:d1:41:
55:dc:39:fa:29:bc:02:46:17:97:e5:80:73:9f:fd:2f:38:5c:
73:ee:d0:68:a4:74:89:da:3c:91:55:45:b6:15:d4:c7:66:a2:
fe:7c:16:fa:d1:2b:8e:dc:bd:26:cb:35:a7:7f:c5:02:aa:77:
a9:56:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:07 2025 by rpki-client