Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: RvOwFs5Ps4WXbeuURtWP2NOTekoX1Rfm3qUY5q2pMpg=
Subject key identifier: E5:81:01:8F:7F:07:6A:19:B4:81:43:7F:B8:3E:84:B4:63:75:66:41
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 0198D5838DE27052A0932F4F7933FBE79EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 14D0
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: XhZd4AXcprYaSWJWAkCvII9n7bo.roa (hash: +WoaFZAXvgLhbONkinxfr9JdPcFsQuGimoN13TlQ0XQ=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: Im8U9mHnSLTQcLUkNP905vIBnCm1OqkGSB3seWZOfgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8d:e2:70:52:a0:93:2f:4f:79:33:fb:e7:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=e581018f7f076a19b481437fb83e84b463756641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:05:a9:34:e0:97:a0:84:a9:bc:38:ac:25:
86:25:75:91:ac:ea:d9:ff:71:23:be:c7:f6:6e:42:
63:f2:af:2e:08:2c:b2:0a:8c:6a:28:d3:91:de:3e:
a5:ec:d8:be:ff:64:dc:c6:ac:02:73:9b:c9:09:11:
7a:e4:b3:6d:e9:30:3e:1e:44:8b:7b:3b:78:30:04:
93:af:35:e2:ea:d9:87:1c:df:da:8d:f9:a1:02:f7:
8e:bf:3b:88:68:05:2b:79:48:3a:79:ef:6d:17:b3:
70:da:96:7b:27:47:1d:de:a8:e5:89:4f:78:e9:9d:
1b:0f:c0:57:5f:49:7d:58:4e:f4:32:86:c4:47:83:
d4:7e:bc:d5:d7:80:91:3b:d6:1b:e0:a8:57:f2:fa:
bb:cf:ac:fc:bc:42:64:ad:c5:17:43:ec:7e:59:bc:
2f:92:8f:0a:bf:53:cb:1c:59:93:cd:51:ae:eb:f4:
95:d4:44:48:ee:46:ee:51:87:4e:70:98:42:3f:3a:
df:de:32:37:3c:76:aa:5a:d1:44:55:29:08:3c:94:
a7:fd:3e:8a:9a:49:58:8a:8d:47:8b:2e:0c:1f:3b:
67:9e:a0:e9:4f:f3:f1:0f:ae:4c:6e:4c:91:bf:64:
02:53:be:ca:0a:ae:f6:48:83:5a:c8:6c:43:a2:b5:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:81:01:8F:7F:07:6A:19:B4:81:43:7F:B8:3E:84:B4:63:75:66:41
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:da:a6:3b:f4:82:37:b0:48:57:96:7d:0e:aa:2d:c3:09:82:
2f:eb:5e:04:13:2f:61:fc:82:c9:8e:1e:f6:21:b6:20:21:b8:
7c:1a:38:9d:23:8e:8d:2e:94:3b:ce:68:88:1d:fc:11:79:eb:
68:bb:8d:6f:4f:44:37:35:e6:b2:5f:00:f9:5a:37:7a:d6:0f:
ff:9e:44:6d:e9:01:7c:8c:6a:e1:97:ab:d4:04:40:3d:4d:a8:
f5:6c:7a:a5:94:80:6a:4c:7b:fb:ce:d4:ae:64:13:6a:33:32:
26:33:12:27:da:a5:7b:8e:78:14:57:e7:9f:6d:29:7c:a7:61:
8d:36:71:21:9c:fb:33:91:ad:0f:02:32:42:cd:6c:0d:dd:25:
95:e4:b3:bb:78:45:2f:fb:07:93:b2:0e:fa:94:b6:81:14:23:
bc:a9:60:7c:89:de:43:52:ac:fb:5c:12:a7:0c:41:53:f7:43:
25:55:4a:53:b7:d5:11:c5:02:0b:9e:89:35:e9:b1:3d:fc:0f:
98:be:51:57:59:73:d8:c7:05:4c:68:96:77:65:96:f1:1c:e3:
18:a2:ab:71:be:00:ca:e8:b0:86:22:61:ac:3b:98:00:ee:31:
ed:87:fe:48:57:32:36:09:f0:b2:34:e2:56:39:4a:91:11:5d:
ca:e2:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:46 2025 by rpki-client