Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier: PjV08cCTxQKfuQI/32EkQHvwNqJUsXOYYrxA1pByG0Q=
Subject key identifier: 8A:38:6F:41:7D:97:9F:5B:42:1D:C7:A0:C9:C7:7C:6C:3A:2E:90:F1
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 0198D5839073D99B8A2C77C9A8372A7A9121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number: 0861
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: zaJunVP8e+dnEIA0Mmq+oKsokXD0JS5sA2XPRZGbmw0=)
2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:90:73:d9:9b:8a:2c:77:c9:a8:37:2a:7a:91:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=8a386f417d979f5b421dc7a0c9c77c6c3a2e90f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:61:91:b9:28:04:f8:8d:28:74:aa:37:12:
bb:88:30:4d:8c:3b:9d:ab:1b:08:3c:0b:7a:1f:31:
8d:f5:05:6a:1a:63:49:c3:f8:5b:4f:c6:12:6e:86:
68:fe:05:78:35:05:30:d2:ed:4c:65:f6:ff:e8:92:
50:c9:56:7f:9f:67:3c:3f:ea:1f:b2:f9:2d:90:75:
ce:a9:2c:0f:13:e3:e7:e4:77:08:93:e1:8e:4b:9a:
19:be:dc:5c:8d:0e:38:a6:ea:04:3e:c7:ae:4c:3f:
2c:72:76:37:cb:83:88:4e:d6:0b:c8:05:41:9c:df:
e0:27:22:37:98:8f:3d:63:77:aa:2b:e3:cd:90:f5:
e6:7a:83:d5:05:4c:3e:9a:84:d1:2b:96:bb:6d:01:
fb:3a:85:9c:96:70:3f:44:5c:e2:7d:0d:6e:5b:6e:
44:5d:ec:40:ef:8c:ae:8a:e1:28:27:09:d0:2b:f9:
9c:b2:83:06:52:4e:48:b0:e1:75:14:86:cc:bd:59:
8d:9d:32:82:62:7c:e3:17:fd:2d:4a:c1:24:30:8a:
a8:3a:95:c6:c0:65:62:6b:a7:62:bd:08:3d:d8:8e:
a4:1f:cd:76:db:cb:aa:68:77:04:61:f8:50:7b:46:
e9:f6:93:22:34:d4:81:9f:7e:63:7f:12:2a:e5:eb:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:6F:41:7D:97:9F:5B:42:1D:C7:A0:C9:C7:7C:6C:3A:2E:90:F1
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cb:bb:0c:28:30:4f:84:49:3d:57:59:4a:e9:72:92:1f:b4:
f5:5f:86:5b:13:70:3d:2e:d7:0f:23:0d:b6:66:59:f6:a0:79:
de:4d:ba:c5:36:08:eb:05:29:61:49:85:a1:99:ec:51:ea:53:
26:a4:91:a2:c4:5b:79:0c:39:a3:b1:03:2f:9f:c2:14:fc:71:
d2:d2:48:92:3c:2e:a1:86:00:01:2e:7f:fd:59:26:6f:75:0a:
f6:61:8c:d1:5d:96:a1:3a:6b:27:a8:e2:ac:25:ad:45:59:27:
c8:78:76:8e:df:19:aa:20:6a:8d:55:93:d5:a2:2a:bb:f7:37:
38:8f:07:40:29:40:1f:fd:c6:fb:57:0e:35:b1:1c:a0:f8:cb:
56:3b:c7:f7:c8:b5:17:c9:33:85:c9:84:3e:06:d1:58:38:90:
a8:71:6c:05:25:a8:a3:26:1f:94:68:85:9c:5d:c2:d9:24:75:
d1:9d:e1:bc:eb:19:11:cd:8f:a5:2b:9a:6e:e2:12:a4:fd:25:
3a:f1:c7:38:ce:0a:73:d6:75:59:93:2d:04:2f:08:ae:2d:66:
db:a0:19:4c:2c:f8:47:f3:57:26:8c:3d:7d:23:52:45:75:c7:
2a:f9:b2:78:2d:ee:9a:d8:a3:8d:1a:81:8c:e6:10:ac:2c:cb:
de:db:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:21 2025 by rpki-client