Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: EPOTGvk2famdaC6fect0o6aQnwE8k9aEpkUaq+ZLnIc=
Subject key identifier: 6E:5D:23:61:18:25:27:67:FE:B4:E4:E8:A1:00:73:40:D9:B4:42:3D
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 0198D473BA4606844299BA377487ACEF987D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 079C
Signing time: Sat 23 Aug 2025 01:03:30 +0000
Manifest this update: Sat 23 Aug 2025 01:03:30 +0000
Manifest next update: Sun 24 Aug 2025 01:03:30 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: NJVEtCoaPZI4ft4hozcykhfBt/xVfHZ4bpmKFb3jRRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ba:46:06:84:42:99:ba:37:74:87:ac:ef:98:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Aug 23 01:03:30 2025 GMT
Not After : Aug 24 01:03:30 2025 GMT
Subject: CN=6e5d236118252767feb4e4e8a1007340d9b4423d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:1e:17:e6:34:27:a3:a2:e0:8c:3e:b5:9a:
32:c0:66:9e:5f:a1:53:38:57:e7:8e:39:b9:6b:ea:
a9:33:98:ac:f3:5a:fb:cf:b6:c7:00:5c:f9:0a:a9:
89:3c:3b:3d:62:b7:f9:8d:ac:d1:51:de:11:53:5c:
05:d7:83:65:07:5f:30:73:64:a6:c2:3a:9a:8e:50:
2e:94:38:65:b0:c9:7e:50:a7:22:dc:85:37:81:3c:
cc:5c:f2:b6:2d:fd:3d:61:32:02:86:77:a6:48:d3:
ce:78:fa:f4:32:73:be:6f:c8:68:58:60:87:f0:20:
4b:de:5c:90:a4:eb:fa:39:45:f4:30:47:f3:33:47:
5d:00:90:50:cb:3e:12:23:29:53:fe:6d:8e:d5:09:
a6:37:f8:69:bd:b4:66:94:16:20:ca:0b:f0:bb:c1:
e4:a5:02:1b:02:80:1f:d1:a3:00:95:91:c7:9f:97:
32:05:95:7f:52:0d:83:6e:3f:23:3e:e0:b8:d6:1c:
ac:d3:23:cd:09:d9:62:d9:cd:f3:8c:65:0a:79:47:
00:be:50:44:a1:90:31:9e:26:43:01:2e:6a:f2:d6:
ce:8d:8c:1e:b8:55:dc:03:b3:63:3e:df:c9:27:6f:
23:86:a4:9b:22:1e:31:42:af:fa:79:f1:73:02:6a:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5D:23:61:18:25:27:67:FE:B4:E4:E8:A1:00:73:40:D9:B4:42:3D
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:de:f6:8e:23:a9:90:d2:bf:d5:21:41:1d:a8:fa:ca:2b:
13:18:a9:1b:65:da:34:c5:f8:1f:40:24:51:46:38:c0:5a:48:
a0:22:07:0c:33:9a:3f:cf:26:50:1b:fb:04:ac:aa:ca:13:58:
95:64:8a:f7:ef:b9:96:f9:67:3c:ed:0d:7f:47:00:ec:f5:99:
5e:a9:b2:6c:c6:0c:8c:b3:4b:70:d0:24:a5:b6:5f:42:87:24:
c8:79:f2:28:06:26:6e:3b:62:c5:11:02:72:b5:da:b2:11:68:
67:16:ba:c5:b3:f3:fa:a3:8d:58:5b:f8:15:e4:c2:66:62:0a:
a8:aa:71:51:28:dd:7b:73:00:8d:13:5d:eb:28:ab:6a:e7:a9:
83:67:bb:c3:d2:9c:88:3a:79:5b:2b:99:8c:98:63:77:f6:57:
25:56:f4:68:87:3f:40:8e:40:dd:0b:06:dc:17:f6:49:68:dd:
a7:f9:92:c1:00:97:ec:f5:50:ed:c7:51:ad:e4:34:3d:b6:ad:
4f:da:c8:8c:5e:29:77:5e:81:15:7f:ec:ef:a6:07:9c:a1:c8:
a8:d5:71:4d:7d:54:dd:0d:24:f7:f9:b5:cc:0c:4e:a7:b8:2f:
99:3b:6d:24:d6:a7:e7:a5:de:81:60:0a:34:29:a0:23:f8:1a:
48:96:d1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:18 2025 by rpki-client