Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: fdh4CUjBTIucKIinq1hccgUszznx1FK0kLh5/afaRpM=
Subject key identifier: 7C:24:B6:3E:7C:20:DF:5D:BC:27:99:77:7E:CE:78:7C:B8:12:C9:7F
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 0198D6CD17B484B3EAFC7C81364BC5DC7710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 14E1
Signing time: Sat 23 Aug 2025 12:00:21 +0000
Manifest this update: Sat 23 Aug 2025 12:00:21 +0000
Manifest next update: Sun 24 Aug 2025 12:00:21 +0000
Files and hashes: 1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=)
2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: 5IJbd6eKYgBttbzewf/GsAnq7afYTlNWszDAJ50ygQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:17:b4:84:b3:ea:fc:7c:81:36:4b:c5:dc:77:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Aug 23 12:00:21 2025 GMT
Not After : Aug 24 12:00:21 2025 GMT
Subject: CN=7c24b63e7c20df5dbc2799777ece787cb812c97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:46:96:22:89:fa:8a:54:11:d4:6e:39:d2:
72:ba:9c:18:3f:ed:a1:be:93:bd:a3:89:1f:13:a1:
a7:e5:16:d4:07:6e:4f:ce:d9:14:9d:00:34:85:30:
4d:48:80:0a:67:0c:46:06:06:d1:17:d2:d9:53:88:
0b:db:9c:3d:f1:20:6d:eb:6c:9a:5a:9d:7e:c8:f6:
13:09:d4:9c:99:a6:1a:73:d8:bc:de:d4:d8:94:70:
1a:a5:3b:fd:b0:80:7c:f7:ff:f0:ab:3a:e9:5d:8f:
80:52:5e:bf:39:05:83:64:c1:53:22:1a:a2:22:da:
3a:72:d2:55:af:1b:a0:3e:97:fa:32:2e:d0:22:8b:
31:c8:13:87:ff:c0:fc:ab:4e:df:cf:23:36:95:d7:
02:37:a8:ce:1d:c9:93:21:0b:46:71:be:f7:2c:a3:
c7:eb:40:c2:f4:72:4a:7b:37:29:43:d0:13:41:c7:
6e:12:2d:b6:ff:5f:a1:07:36:10:2c:ac:f4:09:db:
39:a3:c7:b3:f7:30:aa:db:ea:bb:5d:c7:1c:16:01:
93:5b:d7:56:91:0f:a2:2b:31:f2:4e:1f:c2:50:ab:
12:27:aa:9c:68:ab:7e:ea:55:36:d1:2c:e9:78:f0:
0c:d7:42:d9:b5:41:71:cb:a8:47:cf:ea:1b:cc:df:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:24:B6:3E:7C:20:DF:5D:BC:27:99:77:7E:CE:78:7C:B8:12:C9:7F
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bf:fa:ee:03:71:01:22:cb:81:88:16:e4:c4:28:35:33:f5:
63:c9:03:d6:b0:22:2c:43:e5:fe:95:8b:4b:3b:9a:67:66:9b:
f1:d4:7e:69:44:31:43:9b:26:d9:9d:a0:7d:d0:fe:ea:a7:33:
65:b3:ca:5f:a7:aa:32:40:2e:c0:40:0f:57:84:0e:a9:5f:d6:
ba:6a:4f:c1:37:ac:ce:95:d3:17:fe:65:60:f1:67:c3:06:59:
b4:dc:d3:89:fa:81:48:f3:44:94:db:a4:a7:00:36:38:3c:12:
7f:70:80:20:e5:51:10:cc:9c:f6:2e:d4:c4:26:08:d3:b4:08:
89:30:a0:dc:ba:aa:56:94:73:dd:f9:28:f4:fe:2a:1f:d8:7d:
e1:a3:f5:f8:f5:7b:bf:e8:54:b1:59:6c:dd:a9:cc:e3:4f:72:
05:5a:81:98:d2:6a:3a:f3:97:13:50:64:19:1d:ad:46:d2:87:
a4:78:3f:ee:22:7b:7e:7f:61:2b:74:a8:af:13:4c:e4:df:5c:
cf:30:b3:7d:b4:95:af:a1:4f:b5:22:34:6b:82:2d:60:0a:f5:
33:9e:8d:e6:09:43:3a:db:88:e4:92:27:4a:47:1f:e1:52:b7:
25:db:5a:3a:de:a4:ea:72:6d:6a:94:05:d0:cf:aa:4b:fa:91:
17:74:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:29 2025 by rpki-client