Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: hKlY+eHk5Om/347EUj2JveuAJRw0gSsNGrsVqfZwJew=
Subject key identifier: B7:EB:EA:CF:43:44:D3:F1:F0:08:13:D0:9C:33:78:72:80:C0:44:49
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 0198D54EC10DDBB73DEDB23A63ADF63F9550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: UzSEdJBP2Gqr1z-0qx79WTsLauw.roa (hash: vl1ow4mOIeKlrrAdbJAJQJmVxWS6mp39VC/9XaCz00U=)
2: XebRYOITfzcAbcv2WQiIUJzp9IY.roa (hash: /LlV1c2jBHdUzm3m7BbrQfvi7DnfI/2A+wzHJz5/0Eg=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: 2TBSowkAorQa9eUp2NLRGw3UzL7RPCuC1E0R0+d0w20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c1:0d:db:b7:3d:ed:b2:3a:63:ad:f6:3f:95:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=b7ebeacf4344d3f1f00813d09c33787280c04449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:03:4a:3e:c1:a4:ca:65:dc:ac:c5:1d:dc:
5f:ec:b2:70:42:e6:17:31:f0:ed:50:c6:c5:b6:d1:
f7:cd:02:af:62:90:97:db:29:2b:e5:e4:f1:c2:af:
0d:9c:02:9e:cf:b4:a3:4d:b5:47:1d:9d:44:c5:71:
91:90:bc:3b:55:cf:d0:05:1c:a5:be:69:b9:df:22:
dd:98:bc:95:c7:b8:0e:5f:23:a2:f8:b3:5c:71:fe:
4e:4c:51:64:7d:ac:ab:7f:a1:07:2b:6d:05:54:6d:
2c:53:d9:e7:3b:48:e7:bf:4a:c8:39:5a:72:3b:e2:
97:a3:d7:2c:48:61:ea:2e:ad:0b:65:93:e6:d7:ee:
d2:bb:e8:51:3a:8e:b0:14:e3:29:18:0d:ff:0f:dd:
87:57:e5:f0:ba:ad:aa:b2:9f:6e:60:dc:3b:8f:50:
e0:69:53:63:15:47:69:38:10:00:0d:d2:d9:c1:1b:
f3:29:66:c0:c8:31:4b:ff:94:8c:4b:f3:35:3c:07:
56:a6:4c:aa:2f:08:ca:88:51:e7:d7:38:b8:f3:d5:
13:8d:27:aa:25:9e:6c:d9:cd:f0:b0:ee:4e:a4:41:
41:c6:bd:54:2c:28:07:7f:eb:b8:e8:74:8a:89:e9:
00:00:2c:da:51:2d:2e:17:60:4a:1d:49:2d:92:72:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:EA:CF:43:44:D3:F1:F0:08:13:D0:9C:33:78:72:80:C0:44:49
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d1:4f:79:b3:f2:4e:d9:cb:dd:4f:0b:ac:0d:d4:96:9c:5f:
fc:c6:b7:89:ef:1e:ab:14:b5:0b:75:88:ca:48:b9:5c:54:ad:
d5:0d:eb:47:23:8a:57:88:0e:8b:2a:91:e0:5e:c2:75:c2:fe:
7a:2f:77:cb:37:ed:49:df:0b:4a:4d:d3:e4:5d:e7:69:4e:bd:
c1:03:6e:07:ec:66:d1:59:1f:10:e1:f3:de:23:bf:9e:7e:d3:
f6:fd:44:38:82:b6:2c:2c:02:24:63:eb:51:2f:5d:97:e0:c8:
4b:3b:af:64:d1:0e:d2:75:4f:95:3c:d4:db:7a:4b:ab:58:62:
91:c7:b1:98:16:86:e9:70:38:66:98:14:17:38:d9:e5:0a:08:
56:34:e7:6b:ae:1a:75:f0:62:0d:27:b1:4e:46:6c:37:13:f0:
50:c1:e5:76:7c:da:23:86:66:66:60:e3:89:29:ab:c9:1f:88:
2a:f3:48:5f:49:37:1c:b1:d9:82:ab:cd:2f:4b:e3:7d:bd:a1:
11:93:63:85:a0:f8:02:9f:2d:bd:1e:f0:b0:c6:4f:20:5e:85:
62:92:19:e8:63:dd:10:a7:32:db:ea:16:79:ce:b7:86:bb:34:
b5:cb:92:5e:98:a8:7a:d6:c9:9f:f1:33:0c:c6:65:e2:22:d5:
86:92:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:03 2025 by rpki-client