Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: wiad2rFNoukg9SysGE6SrwdZhwzKpg0FRPTYEp3b5wg=
Subject key identifier: F6:88:84:E1:9E:EF:00:53:82:94:B4:B7:BA:2D:14:B3:9E:A5:BD:D0
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 0198D472B7C81516A97F586F0C33E3BA01CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0A8B
Signing time: Sat 23 Aug 2025 01:02:24 +0000
Manifest this update: Sat 23 Aug 2025 01:02:24 +0000
Manifest next update: Sun 24 Aug 2025 01:02:24 +0000
Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: S4U5P36lYlJUHU5OkvB0mSBMCPxGm16CMvar5f3nUR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b7:c8:15:16:a9:7f:58:6f:0c:33:e3:ba:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Aug 23 01:02:24 2025 GMT
Not After : Aug 24 01:02:24 2025 GMT
Subject: CN=f68884e19eef00538294b4b7ba2d14b39ea5bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:dc:76:ac:1c:1c:cc:ff:8c:d5:fc:84:10:
47:9c:a4:3f:88:2c:93:97:6c:b1:df:ff:43:e8:a1:
6c:93:57:0c:ce:a6:ba:98:49:5e:01:79:9e:2d:aa:
cf:1d:e2:51:95:9e:5d:5d:ed:af:ec:60:38:0c:1d:
41:75:75:14:ed:3d:8a:4e:ca:2a:58:27:24:dd:e3:
1b:fe:d4:51:95:81:54:1f:c0:aa:fb:c5:66:15:5f:
88:88:69:15:f5:23:99:75:05:6a:87:d8:cc:1c:b1:
04:4b:82:82:e4:bf:7f:2a:f1:3b:7a:5b:aa:4b:46:
ab:72:e0:34:9f:77:78:a9:fc:1e:80:e1:02:28:cb:
99:c8:64:10:31:fc:af:c4:f8:de:fa:c3:e0:77:c7:
6e:be:73:f9:4a:0e:25:80:ba:d6:b5:df:3a:3e:98:
3b:cd:50:76:3c:9a:55:b2:73:a0:ee:99:91:1c:73:
11:a1:ea:4c:18:93:c4:e2:ea:a4:6a:b8:29:84:8d:
bc:fd:00:dc:28:47:f6:c7:37:2c:c8:01:53:a2:34:
21:97:90:7a:45:a6:65:5f:0f:74:e0:03:a4:52:aa:
a1:49:bf:34:2a:2b:f7:ab:72:a0:59:f2:23:a1:ed:
82:65:73:34:ae:a8:b9:17:cd:13:96:62:58:77:f4:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:88:84:E1:9E:EF:00:53:82:94:B4:B7:BA:2D:14:B3:9E:A5:BD:D0
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:35:a2:96:a2:06:de:6a:fe:1b:09:5b:68:82:87:b5:4b:33:
55:1b:a2:f6:6c:d8:2c:c1:5f:4a:25:1c:93:75:2a:bb:17:28:
81:be:13:05:ca:f0:41:7a:91:11:5e:6c:d7:b3:ad:df:d8:f6:
fb:10:ff:64:56:19:9c:c1:45:5d:46:b9:d7:12:1c:45:d1:3b:
71:68:d4:05:11:5e:f9:42:0f:95:2e:78:f2:78:72:fd:c0:07:
1f:e5:34:f5:77:cf:12:c1:ad:49:2d:ab:51:5d:f3:3e:fd:01:
e8:14:4c:92:c3:20:82:c5:96:27:8b:c2:b7:dd:3d:e9:ba:51:
41:e9:bd:c3:c2:02:f4:55:cb:49:08:67:f3:35:b2:65:8d:f9:
72:6b:90:0f:88:24:bf:58:35:60:de:8b:27:26:2b:4f:8c:1d:
ea:71:e9:f4:ab:47:bb:75:bc:4a:fe:ba:36:e5:a1:f0:d3:69:
33:05:eb:de:1e:41:21:3b:58:f8:87:27:5c:3e:b7:bb:31:ee:
9e:46:48:1b:1b:7a:df:1e:93:02:bb:2a:af:40:8c:d6:e2:38:
e7:c5:8f:9c:25:a8:1b:11:ba:5a:f7:b4:e8:89:04:83:73:bb:
44:99:41:b1:9a:03:9a:f9:9e:b0:25:4b:63:21:7e:4a:76:72:
3d:fb:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:13 2025 by rpki-client