Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: IQbvzwpeCuGIAj4yR40jWcsHZFF/8O8jOJJj4IfTR0k=
Subject key identifier: 12:F6:FB:16:1F:26:AE:A0:55:2D:5B:D4:6F:96:6C:9A:3A:74:24:A6
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 0198D6CE0889CB62B3D573352F47611698D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:01:23 +0000
Manifest this update: Sat 23 Aug 2025 12:01:23 +0000
Manifest next update: Sun 24 Aug 2025 12:01:23 +0000
Files and hashes: 1: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
2: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: 6aeVwHEVUTmsQN5jl8ysAn7hVYeNTeDW2ARShEh/k74=)
3: ie3Ij3d9SbHwlFZKN1iAPlTDPF8.roa (hash: LDgmzuKBYv7wHEv9dhDlxCP+uQjNRE91nisvU0AfRTM=)
4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:08:89:cb:62:b3:d5:73:35:2f:47:61:16:98:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Aug 23 12:01:23 2025 GMT
Not After : Aug 24 12:01:23 2025 GMT
Subject: CN=12f6fb161f26aea0552d5bd46f966c9a3a7424a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:39:e0:eb:69:d3:53:47:e9:e9:ae:6d:b4:
f4:28:9a:b7:9e:60:17:ea:1d:0d:51:88:e9:7f:ed:
d1:40:e6:e4:95:f2:1e:bc:f0:d0:59:f7:af:89:ff:
09:01:7c:bc:19:45:9e:49:5b:eb:86:e6:58:7d:d2:
6f:95:b1:39:74:01:8d:21:6f:7d:1c:e2:60:cc:29:
80:b4:df:59:0a:f3:89:86:1d:1d:67:e0:bf:0f:02:
ad:d1:0f:87:c0:28:9a:d0:a7:6e:ec:8c:a6:7d:ee:
8f:d3:ca:f2:32:7c:36:be:d4:2a:19:30:9d:a3:ad:
e1:f7:ad:d1:9c:85:66:5c:83:02:11:32:a4:c1:12:
4c:d4:10:03:92:90:31:4e:91:df:38:7a:91:00:4d:
3d:a1:c1:86:f1:32:26:da:3d:a6:9c:ef:c4:31:9a:
a1:ee:91:7a:95:85:06:99:c8:4a:88:75:82:4a:9e:
82:04:20:f2:da:ba:ff:3b:1f:9c:73:26:6a:87:b5:
5f:ab:0c:9a:19:bd:5e:9d:de:61:22:c5:7f:94:76:
e4:fb:4e:28:04:6a:27:c6:d7:3d:52:7a:c2:bb:a6:
1a:b5:a2:0e:a2:8b:1f:1d:34:74:92:83:33:4e:d1:
02:ff:9e:2e:0f:47:de:5c:a9:62:4d:d8:19:61:92:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F6:FB:16:1F:26:AE:A0:55:2D:5B:D4:6F:96:6C:9A:3A:74:24:A6
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b9:55:b0:7e:12:f7:53:55:bc:e3:59:b7:78:e8:56:3c:e0:
f8:78:53:bb:ce:32:1c:f0:ed:5b:86:88:80:d8:e4:a0:0e:61:
54:b4:e7:e1:5a:fc:18:94:54:e2:3e:6e:18:7b:8d:9c:41:ce:
92:70:1e:48:b4:22:e1:84:37:03:95:f7:88:28:e6:a7:73:01:
7d:87:54:c4:1d:69:af:da:9c:f6:a6:1e:b1:28:e4:6c:85:ac:
73:e3:a9:50:26:a0:a5:19:b4:63:18:20:66:d0:d3:89:78:d5:
58:32:11:55:1e:b9:82:ac:57:1b:1c:9b:da:85:f5:9c:e4:18:
2a:99:9b:3a:b4:b0:86:9b:dd:13:af:3d:d0:39:06:3f:ee:17:
bd:55:19:e5:4e:cf:fc:0e:9a:0e:bf:81:59:c3:a3:a3:a2:d7:
10:65:fd:4e:f7:78:d3:30:6f:d4:0f:08:33:dc:ab:b9:3e:d4:
83:bc:8d:2f:85:cc:76:d4:5a:74:7d:75:cc:9e:b3:df:9b:6d:
90:7a:fc:fc:cc:5e:a4:69:69:39:0f:52:29:50:8f:7c:55:09:
0f:99:2b:87:10:03:af:4d:95:75:d4:2e:e0:fa:c2:98:0c:4f:
b8:e4:67:fc:c4:5a:7a:e9:e0:b6:b8:19:6e:74:73:d7:fa:9f:
04:68:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:21 2025 by rpki-client