Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: 9vNwui4SF1WAQpXaKcNrBgULpeZ2nwAYkAp+4Sqs5UI=
Subject key identifier: 46:ED:D8:BE:A4:5B:8B:F2:AE:15:39:AD:77:A6:00:CA:DD:DA:1F:9B
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 0198D5F1C06ABCE66E20AD9D88F5011AC54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: LdJruFPTwk4sCGKW3xHmxmE7D4ToA1K1+f6vHY6yQdA=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c0:6a:bc:e6:6e:20:ad:9d:88:f5:01:1a:c5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=46edd8bea45b8bf2ae1539ad77a600caddda1f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:5b:e9:31:42:33:77:cd:b8:38:f6:2b:9e:
fb:d5:c6:04:eb:fc:75:47:00:48:d4:41:68:c5:ba:
5e:e9:ec:19:de:82:a3:f4:7f:0a:7d:d1:66:26:8d:
a7:4c:7c:f1:6e:7a:a8:f0:d1:42:43:67:64:ba:46:
22:80:f5:40:44:33:de:cd:a6:cd:0c:94:43:95:07:
17:4d:73:31:4e:c7:a3:15:02:57:04:cb:bb:00:5c:
c4:65:a7:47:1a:5b:49:16:2e:48:55:12:1a:70:b1:
31:6a:c9:d6:f6:82:39:01:d1:6f:00:b3:8d:fd:15:
6f:59:28:a6:07:8a:08:98:f2:b4:83:7f:7c:1f:e6:
79:fc:1b:19:4d:94:1c:22:85:c4:63:f4:85:a2:58:
d4:6f:82:a7:57:f7:58:c6:2e:f1:84:08:d6:a4:bb:
4e:9f:b7:7d:bc:3c:be:ae:e1:01:70:5d:68:0a:a0:
03:ec:7a:fa:5a:f0:98:97:43:8b:dd:cc:e6:57:47:
80:e1:fa:fe:97:96:d6:a0:36:df:82:67:d3:60:0c:
f3:6c:38:31:9c:9d:c0:2c:70:08:b7:f4:d4:09:50:
9f:2a:03:50:93:a8:26:8e:24:28:8c:d8:ee:4b:2d:
b6:a1:01:c1:68:43:33:0c:2e:e1:72:25:1d:bd:f5:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:ED:D8:BE:A4:5B:8B:F2:AE:15:39:AD:77:A6:00:CA:DD:DA:1F:9B
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:61:2f:1a:aa:1c:7e:e7:11:8d:e7:8c:71:d1:aa:fb:3c:b8:
6f:8c:86:c0:65:6e:0b:3a:2b:1e:15:cb:ff:89:4d:e5:cb:2b:
22:25:bd:db:56:ee:7d:fe:68:eb:8b:48:27:c4:77:da:08:a1:
56:53:30:dc:b9:2e:63:10:63:b6:77:6d:33:5f:89:c6:79:2f:
64:58:2f:04:86:6b:42:38:90:0d:e4:02:2e:30:23:d2:fd:c7:
61:d9:65:fb:5c:e1:a6:6b:37:14:7d:7c:ec:0d:9b:cf:65:79:
62:f6:da:8e:9f:3b:f3:aa:5d:02:55:90:4c:4f:8d:22:17:10:
e9:a7:b3:5f:3f:16:c7:3f:d9:fb:cc:ab:da:ed:06:ad:55:02:
6a:7c:c0:4d:63:86:d6:4f:ec:66:b1:24:10:93:2d:ad:86:8f:
05:b2:e9:00:19:3c:fa:67:39:d9:ce:ff:e7:15:0a:f9:7d:48:
18:67:12:cd:a4:6e:dc:63:24:a2:1b:f5:8d:34:39:34:e2:f3:
6d:bc:f9:ea:bd:5c:69:cd:cc:ca:71:a6:cb:19:f5:84:84:e4:
b9:a8:72:a6:c1:9d:fa:77:66:cc:36:74:c9:04:66:43:d6:e8:
51:42:ee:98:d8:3d:71:a5:7b:64:3d:ad:da:73:ed:66:ac:71:
74:96:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:22:54 2025 by rpki-client