Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: 4dwX9U2iNQM8aNKRuxvi+2DOqGkWnQX3jUvE4Hf9Cwk=
Subject key identifier: 54:10:01:AD:33:48:8F:07:EC:A0:39:3E:7C:DF:1A:03:D4:BE:AB:0B
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 0198D6CD7AF4892BB03CE57E6F64E22926EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0C53
Signing time: Sat 23 Aug 2025 12:00:47 +0000
Manifest this update: Sat 23 Aug 2025 12:00:47 +0000
Manifest next update: Sun 24 Aug 2025 12:00:47 +0000
Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: YTx5/uUWCoI4czrk/QxQy3DKWG6fmZ2VWC7OS2gUtBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7a:f4:89:2b:b0:3c:e5:7e:6f:64:e2:29:26:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Aug 23 12:00:47 2025 GMT
Not After : Aug 24 12:00:47 2025 GMT
Subject: CN=541001ad33488f07eca0393e7cdf1a03d4beab0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:37:9e:db:f9:0e:84:72:3b:55:8d:f2:c5:
cb:29:97:da:a8:25:2c:6c:de:76:ed:a1:ea:5e:ba:
d6:c9:03:74:e4:38:61:ae:a1:f3:79:09:8a:51:ae:
95:98:f5:bb:c0:15:1f:3b:34:c3:f5:7d:81:4d:ce:
41:38:8e:73:fa:4d:05:b9:cd:84:b0:11:5a:e7:33:
22:d4:b6:bf:5c:04:87:7d:cd:2d:6e:25:e0:a0:51:
09:5a:e5:10:a6:85:32:78:6d:ae:35:9f:14:df:65:
48:e6:a8:c8:a1:ff:f6:6a:aa:7f:5c:e6:56:c1:f0:
3e:62:83:51:61:14:61:c2:58:44:72:26:87:de:4a:
b0:b3:5c:37:53:06:c2:e1:42:46:4b:b7:29:e8:dc:
b4:cd:cc:5d:17:27:cb:a9:8e:a2:fb:f9:a2:3a:51:
b5:ce:af:13:66:5c:c3:81:df:79:1e:a5:e5:dc:22:
17:9d:7d:44:85:57:f7:a8:11:c8:87:e2:fc:97:7e:
dd:0f:97:ed:eb:15:c7:3f:84:36:59:81:04:48:3e:
85:cc:1a:45:03:b1:b3:46:f4:bb:22:77:0d:fc:ee:
28:a5:7a:41:e8:a8:04:89:74:7e:7b:03:60:61:10:
47:f1:aa:b7:75:fa:ca:b4:22:23:2c:b2:fb:e0:08:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:01:AD:33:48:8F:07:EC:A0:39:3E:7C:DF:1A:03:D4:BE:AB:0B
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:db:91:71:be:20:84:89:6d:13:12:b7:d4:96:02:77:49:28:
fc:3e:bb:64:fe:e3:b5:78:53:c7:f6:6c:67:f5:1b:7d:52:d6:
ff:15:4e:02:6f:49:6f:3f:38:85:be:45:1a:ef:a9:af:a6:1a:
cf:09:57:a1:87:97:16:fe:fb:a7:b6:d1:e4:64:22:0b:7a:77:
75:6b:dd:54:18:a7:5b:b1:50:aa:d7:f5:e2:e6:06:88:a6:aa:
36:75:5f:70:07:5b:a0:26:b3:99:f4:c8:3d:b7:55:d2:e9:e6:
55:8f:71:74:0f:0b:63:73:45:90:a1:07:3e:09:05:94:c2:1f:
27:f4:38:a3:06:d8:0f:b4:5a:c6:6e:35:0c:c5:8c:4b:b6:92:
6a:6d:b1:2b:a0:58:b2:78:69:bd:0b:9f:71:5a:2a:24:4d:e1:
c1:12:cc:f2:0a:ff:68:86:e2:71:e2:a0:c3:44:d7:77:40:48:
87:c9:98:3a:0b:8c:7a:11:3b:15:37:59:58:8e:0f:9f:02:13:
0f:48:b8:20:c3:48:59:b3:cd:1d:33:83:a8:91:68:a9:53:5f:
07:ee:a2:3f:77:05:b8:7e:a3:ab:c7:f5:06:24:88:71:b5:91:
fd:16:60:5b:0c:87:fe:c0:bd:cc:04:fb:d9:d4:ef:4c:3b:86:
fe:65:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:50 2025 by rpki-client