Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: mKm0vmLToHXL3o6a4w1bSGF6OvZ6drQDTnm6Bgqk5ss=
Subject key identifier: 34:94:6E:ED:B2:36:9C:68:A7:9B:4C:B1:A8:AE:52:40:83:EF:6F:0F
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 0198D4DFD05CB2FC08317CC056610EF0422B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 0378
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=)
2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: si0KRUbEhj5WpxRFwwV+zIxwTz2NRy1InOPYJynv2TQ=)
3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d0:5c:b2:fc:08:31:7c:c0:56:61:0e:f0:42:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=34946eedb2369c68a79b4cb1a8ae524083ef6f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:b3:48:6b:d3:52:48:97:8e:55:a5:04:27:
ae:c0:b4:08:d6:53:69:4a:ae:ee:69:3a:1b:34:27:
45:e7:59:85:45:20:5c:84:d4:c7:0d:33:18:fc:58:
50:d0:c8:ca:62:db:20:8c:0d:fc:8d:5c:fa:ff:28:
c3:dc:7e:4c:f0:13:17:1c:47:f4:71:de:5a:e3:07:
ab:bd:4e:57:c5:b7:9c:02:e9:1c:fd:40:18:65:3a:
76:5c:00:e1:5a:07:b3:c2:71:4e:eb:83:13:ef:31:
5c:18:f8:71:f0:1b:d3:b2:ec:9b:77:ea:53:3f:dc:
17:30:5d:48:ef:9b:7c:cf:d1:25:f7:1a:43:bc:b4:
06:9a:59:db:86:13:aa:1f:c4:a9:07:ec:c6:8b:a2:
33:60:9c:04:89:0e:f8:2f:f3:52:26:e4:d0:63:aa:
2e:d3:5c:83:0f:8d:8a:a3:d7:22:96:34:d6:3b:56:
12:27:a0:75:a8:4b:27:80:34:1f:c3:02:5b:c0:b3:
55:1a:4a:d8:67:a0:d1:89:1d:67:56:f2:41:08:28:
29:8a:37:dd:2d:57:db:d9:62:57:d3:ac:9a:a9:a9:
6c:7c:5a:6d:48:45:0c:98:64:d7:30:4f:8f:4a:5e:
12:ea:19:31:e2:25:79:3e:8c:09:7a:48:3d:aa:67:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:6E:ED:B2:36:9C:68:A7:9B:4C:B1:A8:AE:52:40:83:EF:6F:0F
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6b:85:73:89:73:6f:5e:6a:97:7c:e8:65:f5:88:23:90:8c:
dc:35:54:9a:38:06:dc:72:f7:b2:87:0b:84:23:88:bb:f6:4a:
7e:8c:40:fa:08:53:ce:db:fc:7d:cb:dd:e1:c9:31:81:31:c4:
5e:99:71:b9:ea:6c:69:7a:87:b3:69:17:15:b2:a0:95:64:74:
30:cc:59:11:f1:83:f3:cd:b8:a5:59:b3:e6:5b:aa:06:80:2a:
01:aa:59:be:0f:13:35:f5:6e:f7:5d:c5:8d:ee:4f:68:2f:a8:
2b:a4:88:f4:d2:e0:44:b9:82:8c:1a:a2:03:8a:e7:2c:38:92:
9c:ae:ec:77:30:63:df:72:e8:0d:ba:3e:54:b2:30:6e:32:95:
25:53:74:7d:0f:33:44:17:7a:bb:13:43:89:e6:ff:be:01:8c:
56:6a:bf:4f:18:b4:77:4d:d8:48:29:a1:b6:f0:c9:e8:8b:12:
19:3e:f7:9d:fa:44:93:34:cd:15:15:cb:a8:17:ae:48:7e:8b:
14:54:4d:37:17:5c:7d:49:5b:5f:a8:45:ad:5d:38:0a:1b:8d:
12:90:91:fe:2b:50:47:9d:32:7f:99:ef:1a:9d:78:e3:c1:87:
49:14:c7:54:42:1f:e7:66:de:d5:c4:1f:ae:18:cd:af:bd:c0:
8a:de:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:24 2025 by rpki-client