Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: NupvWy6p7bYG97Do5sCHpRQ8qsDAnuq2CG7fOcBrcwc=
Subject key identifier: 82:8C:E6:24:2A:6A:D1:7A:DD:64:72:9F:1C:5A:93:34:9C:AF:AC:80
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 0198D73AE1DDE0696EB9E5A158FE636073BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 0326
Signing time: Sat 23 Aug 2025 14:00:16 +0000
Manifest this update: Sat 23 Aug 2025 14:00:16 +0000
Manifest next update: Sun 24 Aug 2025 14:00:16 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: ocCpFaHGfrHrMfeF8nVgWHjl1geaeGgsLY+TXtw839I=)
2: vlEdWKuRTS0cD9RNJ4tmPb-bgsQ.roa (hash: Y+o+UFhPbkj+17eC+0DjnhM2iiXi4bO98feJGgrh1ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e1:dd:e0:69:6e:b9:e5:a1:58:fe:63:60:73:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Aug 23 14:00:16 2025 GMT
Not After : Aug 24 14:00:16 2025 GMT
Subject: CN=828ce6242a6ad17add64729f1c5a93349cafac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:91:55:b9:9f:d7:36:b5:45:08:a6:83:88:
a7:e3:90:97:66:45:70:db:40:c0:8d:d4:6c:e5:df:
99:a8:17:24:61:01:08:fe:43:b2:a9:56:0c:d1:cd:
93:cb:7f:ef:97:2d:20:68:0b:fb:82:13:d5:3f:b5:
40:ef:81:a6:55:b5:74:56:b6:bc:41:8b:74:a0:9f:
18:b1:ac:5d:26:d2:54:08:50:e2:7c:89:b6:52:14:
a3:33:a4:ba:47:24:4f:15:59:a4:51:25:b9:6a:a4:
aa:e9:1f:92:d8:3a:0e:d4:7f:46:c4:43:f9:7e:86:
55:61:d1:23:d1:f1:b2:e3:a9:57:de:2c:0f:ca:44:
70:39:21:20:09:b3:55:1d:45:4f:75:83:5f:91:cf:
e1:9e:6e:f5:f3:60:72:98:b1:b9:79:e5:74:03:ee:
f3:66:ed:62:8e:ad:f7:5b:61:93:79:82:54:3c:23:
c2:96:51:e4:8b:5f:1a:dd:1e:64:1c:9b:c3:de:bd:
47:ee:1b:af:d2:fa:96:d8:ee:60:bc:52:e1:40:db:
e2:f6:1b:46:53:39:61:69:da:c7:04:d9:56:15:5d:
4b:42:56:5e:ad:e8:27:04:1b:05:0f:48:92:31:b0:
18:08:f6:c4:38:ff:0b:48:45:94:10:c2:6c:e8:f2:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8C:E6:24:2A:6A:D1:7A:DD:64:72:9F:1C:5A:93:34:9C:AF:AC:80
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0f:44:6c:aa:81:ae:32:30:93:da:74:41:25:47:c2:3e:9c:
86:06:4f:16:00:e9:9a:4a:c3:73:59:1e:d1:65:11:39:89:c4:
f7:84:53:07:09:a8:b3:b4:44:4b:29:d8:91:ff:59:cf:51:84:
b5:76:bf:0d:6c:19:05:c4:a0:a1:9f:ba:c2:23:3c:a5:54:2f:
7e:b3:1a:88:62:24:cd:d9:27:c0:d4:38:29:1d:a5:e4:a8:f1:
c1:4d:5b:4e:7f:89:0b:00:6b:f7:85:a0:95:da:81:ae:14:35:
1f:5f:64:c0:e3:15:ed:bd:32:42:a3:78:17:36:c2:35:68:16:
2d:8c:6e:15:6c:a7:b5:2b:a1:47:bb:25:e2:dc:a0:fb:dc:b1:
e2:a3:c9:f7:1b:68:2b:0a:af:8a:4a:5b:8e:32:89:ed:8b:68:
44:81:c9:f3:1a:62:05:b3:e9:77:64:d4:ad:29:40:37:91:ab:
3c:bd:27:d5:52:f9:97:f4:f0:55:70:93:7f:0a:c9:4e:56:df:
28:0f:43:91:56:02:70:40:81:9a:9e:90:74:9e:6c:7c:4b:d5:
85:cb:9d:aa:b9:65:63:16:95:28:c9:23:51:e0:c9:6a:fb:bf:
33:d5:ba:d3:f2:f8:a2:42:96:81:75:6e:3c:57:46:c5:33:b1:
c9:c2:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:17 2025 by rpki-client