Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: sxZ/2NMWAVY309tcbk3+CZCt89XsOT9AMc4njjfL47U=
Subject key identifier: 85:84:08:39:47:F4:85:7E:34:BA:71:48:C3:EA:8A:BB:8E:62:49:28
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 0198D583A80F5A2FC85EC96B315BCC3BC03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 0711
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: +aDxlldEC0+MQWY/TYTJxT7BubWbLo5rNllOfsNeOxA=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a8:0f:5a:2f:c8:5e:c9:6b:31:5b:cc:3b:c0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=8584083947f4857e34ba7148c3ea8abb8e624928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:43:b8:13:5f:05:b4:cc:15:09:74:e9:79:
26:07:67:69:ec:c3:c4:d3:5d:1f:a3:68:8f:e7:52:
2e:77:2f:27:d0:7f:8e:48:d3:e6:c2:82:67:13:70:
44:00:82:69:be:85:55:32:c1:da:0c:20:55:83:8b:
54:a4:2c:06:b4:7f:d5:f0:71:c4:3d:7a:d3:3a:ff:
9c:e7:16:e2:39:ce:13:29:fc:00:34:b1:9c:77:72:
cb:a7:53:90:c6:13:ec:b5:b8:e7:7a:e9:c5:9e:0e:
d3:8a:c1:04:3c:60:e6:4e:83:3b:6b:62:94:bc:8e:
0b:86:18:fe:3b:e0:95:5b:58:6e:f2:47:df:ca:19:
0b:1e:fe:76:e3:df:0a:66:03:05:98:ec:3b:ef:15:
0f:b6:2f:5f:9e:01:66:60:8b:3b:c5:0a:36:2a:84:
4d:50:69:2a:4e:de:9a:aa:18:8b:66:97:c6:f7:b6:
51:74:ab:01:65:4a:c9:60:89:20:33:6b:d3:f3:ed:
60:9a:d0:ef:13:78:8b:98:09:b9:bc:9f:96:c6:f9:
6e:bd:66:40:b3:b2:52:b6:00:3c:26:81:b5:43:88:
41:08:a4:32:3a:f2:b9:33:4d:cc:4c:f2:13:82:2a:
75:52:39:47:4b:f1:97:6a:6e:b8:c6:8a:b3:ad:b3:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:84:08:39:47:F4:85:7E:34:BA:71:48:C3:EA:8A:BB:8E:62:49:28
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:e5:f9:71:13:84:7e:7c:85:37:7e:5b:f2:ea:d2:48:eb:
93:eb:53:09:bd:a6:07:cb:29:41:b4:c7:6f:a9:20:6f:bd:db:
14:07:6f:62:69:e9:09:4e:cd:a5:da:e6:61:03:06:33:91:8b:
dd:a5:5f:bc:75:a9:95:e4:29:0a:46:fe:56:0d:bd:bc:c2:af:
70:63:e2:5e:28:5d:80:44:c3:8a:50:e3:58:b6:ee:66:17:9a:
18:4d:ec:02:e3:30:1d:1c:4e:3a:58:ea:34:a2:3e:68:5a:98:
d7:60:25:7e:14:c3:98:39:61:ad:a3:aa:14:28:69:d0:16:89:
f2:4f:f1:f7:a8:d7:ec:6c:36:0a:0f:02:7d:92:79:99:f9:5f:
ae:7b:5d:8d:ec:4f:01:a7:c1:fd:32:f6:8e:b3:77:dc:d2:46:
a3:67:30:82:80:a5:4a:40:4e:ae:b2:c9:62:e7:d8:15:bd:8c:
d9:6b:98:f6:b4:e2:d8:16:c8:29:95:1f:5e:41:47:5c:64:5c:
2f:89:01:b3:c5:58:16:27:d4:93:22:04:6a:36:54:e8:58:e1:
e1:00:0f:53:42:32:6f:e7:49:bc:f5:c4:48:32:3c:d3:ea:30:
a5:93:22:57:6c:1f:9e:80:53:37:68:cf:26:2c:e6:23:8d:c2:
22:c3:04:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6gPWi/IXslrMVvMO8A+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3
NTk1M2EwHhcNMjUwODIzMDYwMDMxWhcNMjUwODI0MDYwMDMxWjAzMTEwLwYDVQQD
Eyg4NTg0MDgzOTQ3ZjQ4NTdlMzRiYTcxNDhjM2VhOGFiYjhlNjI0OTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU9DuBNfBbTMFQl06XkmB2dp7MPE
010fo2iP51Iudy8n0H+OSNPmwoJnE3BEAIJpvoVVMsHaDCBVg4tUpCwGtH/V8HHE
PXrTOv+c5xbiOc4TKfwANLGcd3LLp1OQxhPstbjneunFng7TisEEPGDmToM7a2KU
vI4Lhhj+O+CVW1hu8kffyhkLHv52498KZgMFmOw77xUPti9fngFmYIs7xQo2KoRN
UGkqTt6aqhiLZpfG97ZRdKsBZUrJYIkgM2vT8+1gmtDvE3iLmAm5vJ+WxvluvWZA
s7JStgA8JoG1Q4hBCKQyOvK5M03MTPITgip1UjlHS/GXam64xoqzrbMZwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWECDlH9IV+NLpxSMPqiruOYkkoMB8GA1UdIwQY
MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt
MmY3Y2Y4NDQ2YTMxLzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx
LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIHl+XET
hH58hTd+W/Lq0kjrk+tTCb2mB8spQbTHb6kgb73bFAdvYmnpCU7NpdrmYQMGM5GL
3aVfvHWpleQpCkb+Vg29vMKvcGPiXihdgETDilDjWLbuZheaGE3sAuMwHRxOOljq
NKI+aFqY12AlfhTDmDlhraOqFChp0BaJ8k/x96jX7Gw2Cg8CfZJ5mflfrntdjexP
AafB/TL2jrN33NJGo2cwgoClSkBOrrLJYufYFb2M2WuY9rTi2BbIKZUfXkFHXGRc
L4kBs8VYFifUkyIEajZU6Fjh4QAPU0Iyb+dJvPXESDI80+owpZMiV2wfnoBTN2jP
JizmI43CIsMEkA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:26 2025 by rpki-client