Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: t/nU5Ia8k/BVnqWY3xQc25hNs8p7JAHj/hPqkb7MXQM=
Subject key identifier: 53:A1:43:F2:FE:7E:32:E6:F0:87:D2:6F:E3:44:95:4B:64:8D:B4:FD
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0198D54E9856934F60BE908C80A8D2B29B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0BC0
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: KNngLPUEeJfGeGvW_sjNLwrjlmo.roa (hash: VdgpRYVhUpsamPtzdnV+HbncE6iEYGQS6JyumMp2yn8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: 0EMAUazcfD99KMRLdbYGpv/kViiEkOwd+OrpRu9Aw+0=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: aJuKlK4Eyd-5-SWqzCamWBjJAOA.roa (hash: JqxrD9CIJNSFvb9h8lx5ybgaqxfxBBfuz3mHyoez/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:98:56:93:4f:60:be:90:8c:80:a8:d2:b2:9b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=53a143f2fe7e32e6f087d26fe344954b648db4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:c5:5b:33:63:13:7f:0f:d0:87:21:9c:c8:
c7:e4:f9:e0:b9:73:06:2a:82:03:fe:22:d3:06:5d:
0d:3b:ad:70:60:c1:98:c9:ba:0a:75:b9:ad:27:b7:
6e:e0:42:7d:df:9c:14:d8:16:25:91:f1:aa:60:37:
47:fa:a3:6c:98:a1:d1:28:ea:98:e4:fa:b9:a9:e9:
57:77:88:42:aa:7d:2e:f0:76:56:29:22:1f:e7:60:
9d:e1:ed:3a:76:4c:db:c0:5d:17:90:34:23:4c:f3:
f0:77:ae:09:f2:59:69:9b:7a:57:36:95:18:84:04:
e5:d5:15:1d:46:d6:2e:67:a1:f4:b0:36:70:1a:f0:
13:30:a4:a5:e1:44:0f:21:ef:a6:48:ea:e5:6c:c7:
b0:19:fc:09:fd:5b:43:da:00:c1:60:b3:bd:09:fc:
a4:74:5a:42:76:d4:70:d7:70:9d:fc:5e:60:1c:fd:
41:34:9e:01:42:78:68:2f:92:7e:c3:c4:a5:a4:4f:
c8:27:1f:82:d5:4c:fb:fe:d2:a2:42:c1:4a:f5:fb:
df:36:7c:be:10:34:d1:4f:89:52:3d:ab:d1:79:f8:
95:18:6b:7e:c2:f2:02:3c:57:02:13:28:88:f6:c8:
b7:41:8e:35:1a:44:c2:86:81:54:b6:3d:31:21:be:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A1:43:F2:FE:7E:32:E6:F0:87:D2:6F:E3:44:95:4B:64:8D:B4:FD
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:92:a8:b1:21:49:93:44:22:a8:a5:94:c3:5b:05:43:60:c8:
51:91:64:48:90:2f:a8:0f:67:09:77:68:50:12:fb:64:d7:09:
c2:8f:59:2c:56:03:0a:18:90:74:41:da:5f:11:71:77:4e:a6:
65:8d:99:0a:e9:50:e9:b8:44:a3:2a:4a:52:d8:09:2b:98:d2:
3a:47:f0:6e:21:8b:da:f7:ba:ed:28:51:ae:8c:88:fe:32:be:
60:c1:ec:38:5b:18:95:e4:34:2a:75:52:0c:9f:7e:8f:8c:34:
01:0c:6b:67:6a:b9:38:c7:2c:e3:99:8c:2d:f7:55:2e:c7:9a:
de:35:50:81:d3:39:33:30:01:72:1d:07:3c:bf:f9:c7:99:32:
20:f2:cb:a7:96:17:72:da:42:94:f5:45:2f:f9:e7:c9:ab:34:
1a:df:e8:0c:8d:21:4e:5f:e4:1b:e3:78:e4:6e:16:eb:c6:d0:
87:1c:e0:23:50:e9:71:9a:35:bc:a7:86:fb:b4:89:51:24:e1:
6d:35:cd:8e:5a:25:34:ca:26:bd:4f:50:30:0c:c7:26:7e:36:
80:b9:09:80:d7:b0:bf:69:a3:b7:03:98:df:23:8b:94:aa:fb:
b9:9e:38:6a:e0:9d:56:64:b8:15:71:f8:96:85:f4:f9:64:02:
c5:87:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:12 2025 by rpki-client