Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: /clmgTtOaLSRstOeOsSo/HesH6e/bGbTdqASgDkdg7E=
Subject key identifier: 53:8F:89:2E:92:96:55:F8:77:A3:FA:DB:41:8C:86:0C:3B:E6:99:E2
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 0198D661123E1BA2E8025400189C431B81AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 1172
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: FYfGapYZgv1rSx7oxjUTR0AEqSI.roa (hash: /yS9+tjgVqFWik3KkW3YA5pzZoZBBA4Y+IeN8zVnoxw=)
2: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: hjBD3aW6GjwTXurgBauIKPat0vpnFXGyxYV3qXJsiZk=)
4: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:12:3e:1b:a2:e8:02:54:00:18:9c:43:1b:81:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=538f892e929655f877a3fadb418c860c3be699e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:6d:0a:84:4c:3a:bf:4b:c8:fd:84:a6:13:
ee:16:f6:ba:d8:8b:98:ba:eb:f0:f0:5f:16:f4:d9:
f8:1f:ce:9e:97:76:d0:6a:cf:f6:17:e9:5a:fc:4a:
06:64:67:59:bf:19:de:36:cf:81:7a:88:6a:70:e2:
35:c7:e5:d3:d0:ee:2d:2f:96:ad:68:c1:f5:d4:ef:
2c:a0:06:e8:2c:51:7a:c0:07:99:5d:e5:89:91:89:
e1:80:7a:11:39:d8:8e:dc:31:9d:57:02:36:dc:a5:
22:a8:28:ac:bf:ea:ea:aa:a2:1e:fb:05:33:0f:51:
15:b9:bc:f0:cf:3b:f0:6b:77:0e:2e:b2:73:a0:20:
8e:ba:30:bb:81:33:59:51:b7:8f:b8:80:c2:d4:3b:
da:25:80:ac:d8:07:17:cc:5f:97:37:9a:e2:8f:f1:
12:3a:4c:78:76:9b:0f:b3:31:5f:61:98:ec:07:67:
6f:58:93:5f:f2:d8:31:e7:65:52:36:74:ea:4b:27:
4d:11:28:c9:36:2e:46:96:4b:e6:88:4f:92:b3:c5:
86:6e:83:a6:bc:e4:a1:1d:82:45:00:b0:b2:42:cf:
a8:fa:a0:1e:41:6e:f9:59:35:3b:a0:b2:32:35:36:
b5:0f:2b:5e:a2:f5:86:23:ae:8d:77:70:7a:80:a3:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:89:2E:92:96:55:F8:77:A3:FA:DB:41:8C:86:0C:3B:E6:99:E2
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9e:c2:66:39:41:79:de:b5:45:c2:dd:52:bb:8c:01:af:a1:
8f:b6:f6:a4:72:b9:63:6d:fd:44:cd:8f:93:1d:ec:de:3a:db:
34:0d:29:4a:da:fe:a9:8b:f4:74:72:bc:92:8d:e2:8f:17:01:
a6:c1:f7:5a:20:6b:4e:c9:2f:78:11:26:a4:f6:be:39:2e:a3:
b6:47:45:31:3a:75:da:d6:b6:35:d2:0c:7d:6b:16:19:4f:71:
02:ca:16:c6:af:21:6c:14:5f:91:1e:1f:ae:48:b5:76:51:84:
9d:51:9c:02:e0:d9:69:f9:eb:5a:07:72:af:ce:d0:2a:18:72:
2d:53:13:fd:98:44:32:28:9a:c1:d7:7b:f2:12:11:ce:e2:5c:
60:30:c4:fd:29:7d:29:0d:c1:58:95:ce:63:09:00:81:c0:de:
11:99:1c:a7:f0:ff:cd:e1:ea:6c:fd:34:ec:0e:1c:73:ba:a6:
fc:ce:5e:2d:6c:2d:e6:33:6f:ab:4e:23:f2:5a:66:d7:3e:ca:
31:cc:b1:ed:8e:d9:c9:7b:1b:06:f3:89:d9:45:8e:a7:3b:95:
ea:a2:8e:ca:70:9b:c2:4a:0c:ae:c3:ab:0f:62:eb:63:97:f2:
d5:87:ea:09:cf:86:38:b6:c3:85:4c:b9:57:3b:3e:3d:68:be:
68:54:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:20 2025 by rpki-client