Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: igO7ikIOeZErvN+Jd9xPZFRKx/tUufpvYn9U5FXrq0w=
Subject key identifier: 07:62:0C:B4:74:D8:CB:0E:DF:3E:7D:B4:36:FE:3F:F9:A2:F0:F3:21
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 0197C23841CA03F1FF51E9C2B4FEED785ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 1140
Signing time: Mon 30 Jun 2025 19:02:35 +0000
Manifest this update: Mon 30 Jun 2025 19:02:35 +0000
Manifest next update: Tue 01 Jul 2025 19:02:35 +0000
Files and hashes: 1: N2KDrXsXfLoSK2ut42Tlf6Gqknk.roa (hash: o+7zLi+nAqreLIrK7jetd34lwzrF5To+yT8AikGoh0g=)
2: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: ZAYRrW82q7gDOBtaxin/3RXwO90hG/rcGlQvCPtsejA=)
3: pBDB5dEoNoGI5z6b0bPqttsFG_4.roa (hash: 5Z8Z9vYKFLWRSaHZB0Lf5gl087k9mD/pQXqsfiZQPco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:38:41:ca:03:f1:ff:51:e9:c2:b4:fe:ed:78:5a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jun 30 19:02:35 2025 GMT
Not After : Jul 1 19:02:35 2025 GMT
Subject: CN=07620cb474d8cb0edf3e7db436fe3ff9a2f0f321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:41:43:1b:43:db:a6:ee:20:7e:06:51:ec:
f5:d3:07:69:bb:46:28:d2:3a:88:08:9d:0c:76:03:
f7:d3:76:04:02:ca:aa:79:35:1a:98:dd:2b:78:b7:
36:a8:14:3e:d1:69:c3:60:30:2e:f6:0d:a9:f0:17:
d0:a2:60:cf:f0:7b:d2:62:fb:0c:14:d5:91:8f:a9:
1f:ee:35:04:c6:dc:31:98:73:66:68:6d:dc:e3:0f:
c7:71:2a:47:1c:96:9f:1b:e1:aa:f3:92:0a:33:7a:
5f:39:47:ef:2d:98:f6:38:66:c1:0d:13:79:c6:5f:
df:e2:f5:68:1a:93:fc:42:e9:d3:a9:72:3c:d0:77:
1f:08:94:aa:fc:f4:1c:13:29:c2:0b:d0:3b:9a:46:
1a:84:0d:de:de:3d:46:3d:a7:12:39:28:86:a4:87:
b0:07:5f:22:f3:a5:48:c7:d4:a5:69:c7:a1:23:9d:
d4:ae:46:77:62:35:98:45:76:16:16:e5:77:74:52:
d8:6b:cc:da:da:37:f6:67:86:62:14:e3:e8:9e:53:
0b:53:b7:f6:68:88:6b:3d:ac:ed:c4:69:94:72:2d:
06:74:ab:66:08:b8:32:f0:52:e4:36:f1:dd:67:ac:
f8:55:e2:a1:83:8a:79:95:5e:36:8f:77:43:15:b7:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:0C:B4:74:D8:CB:0E:DF:3E:7D:B4:36:FE:3F:F9:A2:F0:F3:21
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4a:01:8c:a2:2e:62:72:10:05:df:6b:38:7b:e1:2c:d7:9e:
e5:9c:34:79:6e:ce:85:e2:be:87:d1:94:7e:96:a6:d5:17:69:
ce:ca:11:99:a6:19:0f:89:08:e6:d8:06:3c:24:55:74:b9:89:
b2:cd:85:21:82:8d:bc:80:d7:7a:de:91:48:63:32:cb:53:5b:
75:f7:2c:90:1e:ee:a3:3e:b4:f4:28:5a:e3:ac:4a:20:ae:c3:
47:ac:e5:ce:4c:af:57:69:c8:bd:84:24:77:13:1d:f1:19:d7:
dd:68:d7:b1:29:b5:ee:8e:31:22:be:d0:6f:61:de:9d:7c:7a:
12:b8:65:51:d4:35:ef:a1:ee:67:fc:c2:5a:9e:5e:96:4d:05:
94:81:98:b7:42:8c:b4:d0:9e:4d:bc:50:ae:21:6b:cf:de:3a:
8b:ab:ea:3e:70:d9:95:20:44:f1:c6:0b:bf:c9:a1:90:02:66:
d5:08:78:42:f0:d0:d1:2a:43:32:e8:92:2d:8f:b9:cf:3d:b2:
f0:ef:a7:a8:67:d8:ba:60:43:b7:39:85:a8:72:f4:56:df:f1:
68:3b:0c:43:9a:8a:85:27:13:5e:76:54:c2:6f:10:b4:c2:55:
67:ad:50:6d:6e:17:32:4b:8f:b8:da:66:fb:76:e5:cf:cb:4e:
93:86:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:03:04 2025 by rpki-client