Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: u5C2sZ2jqdp0KcWNrIvEPo/kZfVjhsceZVUXBURv8K8=
Subject key identifier: AE:54:6D:A8:71:3B:E0:4F:5E:B2:73:4B:B9:5B:88:37:78:2F:BA:71
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 0198D583597C8C70CFB11B6DFC5E0D04F323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 0ECB
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: eqcCJWPG/66o3LVZB5b2SpPdRQY2JDMyXK4f4z6Wuqk=)
2: pkoA1nbX0r8lwiVwxbfu80R8kOU.roa (hash: dAPrEkvaKQk5s5Z7WHpV1G3F1Sw4lOg/QTiasC7ZX1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:59:7c:8c:70:cf:b1:1b:6d:fc:5e:0d:04:f3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=ae546da8713be04f5eb2734bb95b8837782fba71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:76:cb:3d:6e:38:ba:b6:a5:81:bf:71:d0:
34:19:d0:1a:51:ab:aa:8c:76:2c:07:0d:bd:89:c5:
be:fe:f2:f5:b6:27:d5:40:6c:0d:bb:e5:22:32:42:
45:6f:a4:6c:aa:fe:dc:3e:0f:de:d9:2b:d3:04:22:
1f:e3:33:0d:15:49:fe:0f:ba:a5:ee:64:e1:ce:38:
d5:45:37:f1:94:85:26:f7:97:61:b2:6c:64:f9:1f:
a7:78:b5:8a:e5:15:08:39:67:7c:97:d0:7e:e6:d2:
ff:1e:7b:88:32:69:7a:d0:bd:fc:94:62:42:96:55:
65:e7:7f:1a:b7:5c:4c:8e:39:3c:f0:6b:6f:a1:ff:
67:a8:c9:b0:61:37:cb:84:2b:7e:c7:fe:ac:57:6c:
50:24:0f:2d:c6:15:75:5c:a6:52:7e:60:2d:cc:92:
aa:99:56:28:e4:ac:85:d8:36:bb:04:2b:a0:64:7d:
ca:81:eb:02:72:05:82:93:66:c6:71:d4:ea:45:95:
c2:52:35:89:ca:2d:43:2b:fc:29:b7:aa:16:f5:c2:
98:37:ac:dc:12:9c:33:fb:b3:22:fa:88:9c:27:c0:
ce:09:e9:d1:a2:64:58:ab:43:1d:17:a4:82:91:32:
62:28:fd:51:02:3e:23:d4:15:63:3d:c5:af:4e:5a:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:54:6D:A8:71:3B:E0:4F:5E:B2:73:4B:B9:5B:88:37:78:2F:BA:71
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:4d:0f:29:b7:81:bb:26:df:d1:fb:55:79:b7:61:36:8e:29:
2e:d9:5f:be:04:37:47:86:45:57:7e:1e:74:a3:7e:5e:31:65:
52:d8:c5:2e:17:e6:fe:d0:70:49:4b:4a:78:45:28:f7:c6:c1:
b2:c4:92:ae:a8:2f:5a:77:2a:e5:37:23:d7:2d:f8:a6:07:55:
bc:70:d3:67:1e:f9:30:2a:b6:54:5c:f3:2e:c1:ec:9d:09:b7:
3a:39:56:14:81:91:9c:a4:a1:29:e0:5b:e5:67:d1:9b:2d:d9:
a1:53:10:43:c7:bf:7d:3b:31:82:97:62:00:f1:44:48:d3:b9:
89:f0:c6:cc:d5:85:33:48:74:ad:08:6e:f9:60:fe:f3:6d:2a:
5a:6a:6d:c8:8e:98:dc:55:a6:a0:6d:37:19:9b:6f:c1:2c:15:
8f:a3:c7:e9:a5:fa:1c:a1:13:d1:6e:78:a9:cd:65:db:04:99:
62:44:dc:03:bc:e0:92:5c:f2:f4:a0:ef:f9:36:a9:f0:02:8d:
ca:89:b9:ce:48:c3:aa:3b:2f:86:8d:2a:32:ad:74:35:3a:6a:
c7:0c:4a:76:68:b8:5e:25:af:39:02:96:b3:b4:0e:77:18:e9:
ed:ee:37:66:ac:be:af:f2:20:7f:da:45:f7:a3:2c:62:42:6f:
c6:60:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:43 2025 by rpki-client