Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: V218oTKLignBTBFj7KUJkKoABhlOLuG5TXMfQh51Kk4=
Subject key identifier: 43:52:AC:C9:5B:E9:0B:D4:90:15:C3:60:ED:84:E8:CB:91:01:B9:EC
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 0198D54DED2A1A6CEA03A10A9E09A98CB880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0A42
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: ilVkaFT87aYuVZcPNY0HN+P1PNk2+2egOZF1JgX4xQg=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ed:2a:1a:6c:ea:03:a1:0a:9e:09:a9:8c:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=4352acc95be90bd49015c360ed84e8cb9101b9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:d1:2a:19:e3:d9:01:ea:04:da:ac:81:73:
87:94:ef:07:55:e1:63:78:91:17:38:d7:68:ae:ca:
b4:b4:de:52:93:be:99:87:c3:54:cb:bc:29:33:d4:
6e:6b:0c:08:78:27:09:b7:90:28:8f:8c:33:8a:8c:
98:cd:8f:19:e8:af:14:53:24:4c:0e:5e:ee:66:31:
9e:d3:0f:79:b9:8d:c9:4b:51:10:c7:fd:7c:38:7a:
1d:50:f0:ec:26:c0:30:2c:3e:be:09:0c:9a:59:35:
5b:db:b3:73:6f:5b:e1:8f:d2:4b:d5:4c:d3:cd:c3:
cd:a5:f1:19:98:eb:45:6f:d3:e2:fa:71:5d:36:3d:
a8:e3:11:36:57:0f:f6:65:8d:0e:ef:ca:80:b4:53:
3d:52:df:c0:88:10:51:67:ca:ff:82:06:55:66:28:
77:21:8c:37:55:62:3b:c1:b0:d3:c8:f2:8f:60:aa:
79:b2:d7:1e:d4:bf:7b:18:9b:ec:5d:0d:7b:c1:e7:
50:ac:53:c8:78:c0:57:9e:9a:4a:3b:21:42:e7:18:
64:16:96:30:b7:06:be:4f:28:d6:d8:3b:e7:68:d0:
b9:31:b5:45:f7:8b:38:26:13:14:07:53:ae:2e:f8:
4b:c9:22:9f:87:6d:db:9d:f8:8f:4e:af:30:35:98:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:AC:C9:5B:E9:0B:D4:90:15:C3:60:ED:84:E8:CB:91:01:B9:EC
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9b:db:df:a9:31:aa:ae:95:3b:ca:38:20:c2:0f:06:0d:10:
c1:f6:d1:7f:5f:e0:0e:df:15:2f:e1:09:ba:ca:0d:7e:ce:7a:
e7:3c:20:2b:e0:6d:7f:6c:63:77:ec:3e:78:aa:2d:59:38:6d:
09:37:86:f4:46:57:91:81:fc:50:04:04:57:67:3f:00:40:ee:
74:80:43:11:2e:ba:32:92:ec:2c:1b:57:a4:0c:42:d2:39:e2:
89:4e:ae:d1:7b:92:0d:86:25:31:af:88:eb:c7:a3:dd:18:1d:
f9:cd:61:e4:9a:ae:85:ed:ea:da:58:f1:f9:75:81:76:5d:69:
cd:f7:49:09:6a:ac:5c:03:ae:c9:95:03:20:82:cc:25:f6:99:
6c:1e:75:41:6c:f3:9c:a1:8e:d7:2e:09:ca:c3:31:53:a9:f4:
6c:b3:9c:21:9a:e1:4f:13:af:b6:68:39:79:9b:b9:40:20:5a:
1f:4f:5c:4c:28:b4:19:d6:cf:13:d3:18:f1:8a:79:7c:8d:db:
72:4f:b5:99:81:35:5a:38:8e:b1:38:28:aa:18:5b:8d:6b:d1:
35:da:a3:53:27:90:66:8b:91:61:3f:92:07:19:72:e0:e1:15:
7d:71:0f:5c:73:63:29:25:fa:b9:d9:5f:8c:8f:aa:ce:1a:3e:
b6:42:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:27 2025 by rpki-client