Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: KSvIuTm2/4ibOoT4WzakTSXVeLpMMU9e/QBb8Ttyo84=
Subject key identifier: 32:27:15:1B:DC:22:A5:2B:9A:45:0D:E2:10:3A:6E:75:ED:61:79:55
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0198D54E1C0442AFEFD12E1FEBC33B3A19BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: neTFZVIJbgS3zR9xbK7UIHHjRn7Bm/iAXZ/O8UrwPR4=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1c:04:42:af:ef:d1:2e:1f:eb:c3:3b:3a:19:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=3227151bdc22a52b9a450de2103a6e75ed617955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:7b:29:a8:71:a1:f6:df:ca:50:f8:12:42:
5b:af:0d:8d:4c:26:a8:85:cc:44:d2:94:92:01:b2:
3d:1d:f7:ea:8f:d0:69:7e:ab:79:32:d4:35:fe:5a:
ed:54:7b:11:99:84:b8:33:b0:af:75:56:69:78:ec:
85:ea:dc:93:7e:ba:8d:c3:90:f5:59:b4:8b:2d:ca:
0a:ea:42:bb:5a:af:29:68:0f:9a:e1:d3:07:93:ac:
b2:e0:6d:08:17:1f:37:66:93:e0:ab:eb:38:82:a7:
98:d6:c3:5e:f5:5a:75:71:f9:e9:cd:5d:70:2d:5a:
b1:a2:3b:f0:b1:8f:05:a6:0c:ce:ab:d4:87:04:6f:
c1:ed:b9:e9:7b:71:85:b0:c6:0f:7b:f7:e4:38:c9:
d5:10:c8:37:0c:11:e5:5c:56:b3:8c:3d:5c:13:d7:
96:da:07:65:db:0b:0c:7a:49:50:3b:a7:03:47:2b:
6d:5b:e6:e7:69:e9:2c:af:d0:85:52:36:5b:74:49:
6d:6c:b6:0a:c6:c0:a8:68:cb:ad:49:63:37:32:1b:
0b:12:b8:2a:f6:f3:25:f3:fa:7b:82:6d:3b:d7:96:
a4:e9:5f:c0:e4:a2:c7:1b:bb:5f:06:f6:88:05:85:
fd:b5:97:80:00:71:e2:37:45:53:3e:44:7d:c6:67:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:15:1B:DC:22:A5:2B:9A:45:0D:E2:10:3A:6E:75:ED:61:79:55
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:eb:2d:30:3c:ab:3a:94:50:fb:c4:7b:53:30:b2:0e:4a:
78:05:80:91:0a:ed:79:a4:bf:8f:32:0c:54:41:4e:28:b3:3c:
9a:c7:48:9b:fd:e6:ee:c7:35:a6:82:48:ee:5d:3d:86:37:29:
fd:7f:42:c4:8a:97:98:09:56:60:b3:5b:47:90:d2:09:c9:cc:
01:d2:43:97:a5:0f:ce:60:06:b8:30:12:a5:85:bd:0f:61:67:
72:67:31:93:b3:82:61:41:ad:ac:d7:b7:5f:91:ff:4b:7d:00:
dd:31:fc:71:58:02:f9:71:65:22:07:1a:20:88:54:0e:8d:1a:
64:d3:d4:d3:40:1a:5b:58:db:4c:f9:37:87:77:57:d7:2e:de:
b0:97:0f:f1:f3:70:64:f8:85:96:fd:39:3c:0d:87:fa:f7:2d:
65:fb:c9:b2:93:59:3f:3c:a1:a0:ef:f7:35:43:b0:d1:29:d8:
f1:72:ee:67:b0:6e:63:75:f7:fb:ce:a2:aa:04:14:16:e2:a8:
2a:ec:ea:63:5e:a1:71:73:e8:15:11:42:65:a3:6d:b0:c4:f8:
3e:f0:f6:b9:07:ea:f1:43:1e:65:0f:38:79:8e:dd:88:c5:3b:
30:0f:28:32:2d:cb:1e:a5:b2:9e:5d:9b:32:96:11:ad:01:8c:
45:6d:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:36 2025 by rpki-client