Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: D9GEHEabBW5xuKjvG0EJp2Z2jbppeIHShTshOTdg0MY=
Subject key identifier: ED:1B:F6:13:6D:AE:46:A5:90:5C:85:DA:28:2B:BD:A9:0F:8C:2C:9B
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 0198D5F183CEC39AF68426D60E22079DC6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: /bg6plXEY7VN7M+j0SRVsVXBp0rOkpn8Urrwj9ORoj8=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:83:ce:c3:9a:f6:84:26:d6:0e:22:07:9d:c6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=ed1bf6136dae46a5905c85da282bbda90f8c2c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:e3:20:b8:43:df:e5:f4:15:36:33:46:00:
c2:dc:77:9f:a2:c5:44:bf:b0:3f:f3:ee:b0:c7:12:
98:0f:df:f9:e3:67:e8:be:c8:16:f7:df:1a:12:7c:
15:fa:2b:8d:3a:0c:89:b7:cf:94:7c:26:59:42:21:
9d:cc:3c:71:bb:3d:e3:5f:de:09:8a:65:32:94:b5:
4d:28:43:1f:de:59:7c:e6:87:bb:f6:87:19:3d:c3:
ca:31:27:0b:1e:04:18:1c:0f:a3:ba:b7:44:f7:c1:
3b:c1:bd:d4:08:48:4a:62:9b:ef:5d:4e:21:34:45:
a8:c5:bc:2a:91:71:6b:56:b1:2b:56:91:14:38:4e:
95:1e:fd:4b:44:66:98:ee:5a:6d:6e:ee:a4:86:a4:
fa:d6:bd:e5:f9:cd:a3:6a:57:b7:e6:e7:31:1c:a2:
fe:0f:71:61:08:ca:c1:73:0f:21:c7:db:d6:6b:4f:
53:d5:78:9e:f8:d4:15:59:fe:07:f9:ac:e5:34:2c:
11:7c:01:46:87:73:69:e8:2f:2a:0e:5a:2d:25:3c:
08:57:ff:31:0a:a0:81:6a:a8:f4:45:d3:fb:78:2e:
7a:eb:34:86:7f:b5:72:d9:45:74:de:ac:29:f0:0b:
fd:91:85:c4:21:8c:34:26:9a:9f:1d:0a:2a:8a:12:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:F6:13:6D:AE:46:A5:90:5C:85:DA:28:2B:BD:A9:0F:8C:2C:9B
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:cb:26:5b:69:f3:11:1b:0c:4b:b9:64:60:63:b9:48:bf:
64:d8:74:16:19:98:66:ce:1c:a2:7c:14:98:d0:a2:77:13:f0:
a7:4b:ae:6e:b9:fc:04:39:87:da:0b:8e:c3:74:a1:de:6a:4d:
ad:11:79:a1:45:f0:58:eb:82:e5:d9:0b:b9:d6:70:75:79:09:
7b:9d:f9:a8:90:85:06:c3:c2:80:53:57:f9:57:c9:11:19:a0:
ae:e5:51:9d:3b:b4:4f:33:82:0e:ed:55:69:56:14:57:dd:79:
0e:0a:48:f7:e6:4c:55:92:0e:72:44:42:38:3d:61:5d:c1:3d:
68:b6:45:f0:42:0e:d8:8e:10:79:4e:2c:cb:c5:84:92:2b:ad:
14:1b:1d:5e:5e:29:77:1c:f8:dc:b6:ca:57:7a:37:5a:23:94:
72:d6:40:6f:ec:5e:a9:5d:b4:da:36:c3:cc:bf:93:76:2c:df:
02:ed:d3:f0:eb:85:38:57:b8:72:5c:e8:38:6d:4b:e5:90:96:
ff:08:69:5c:69:7e:62:e9:5d:fa:a4:0e:05:dc:bb:88:89:13:
fd:f1:8c:8d:86:50:72:96:fd:d5:5b:41:31:38:5f:11:49:e3:
64:90:02:5b:a4:0f:96:97:39:b2:ef:ac:92:1d:3b:7e:6a:40:
4e:af:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:34 2025 by rpki-client