Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: D/mXJaa6JWZ51eluFotCaRUH2cc4IjIRLD7OK0+Aw88=
Subject key identifier: 72:F7:7D:9E:B4:A1:34:D2:21:12:B3:23:09:AE:7E:09:40:C1:D9:F4
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 0198D5F17870134D7196CDA328596AAE7BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: QE4XgAaXelqis6/JNcN8oyuX5gSZzwygxPQSVk4C34Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:78:70:13:4d:71:96:cd:a3:28:59:6a:ae:7b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=72f77d9eb4a134d22112b32309ae7e0940c1d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:d3:46:81:27:82:70:2b:bf:2d:47:61:7f:
9a:4b:be:89:fa:ad:b6:85:5d:f0:54:d9:63:3e:46:
43:4a:05:00:5f:29:64:8b:b0:70:27:fb:a7:2a:b9:
88:57:b1:80:5f:28:3f:d7:76:64:e2:8f:b1:57:66:
68:72:22:8c:74:05:22:02:14:4a:db:93:f9:37:f2:
30:fd:3c:18:c4:24:6b:52:7a:49:0c:73:58:3d:f3:
4d:8b:f5:60:0b:16:06:1e:62:73:46:0a:14:8e:b9:
69:c7:02:29:77:49:33:28:8e:df:df:c1:6e:7e:1e:
f1:c3:e5:55:a4:e9:f8:0f:92:e9:e8:36:86:bf:58:
38:f0:75:ea:c1:3d:71:d9:d7:a7:60:f2:95:2c:b5:
af:3c:85:05:9b:c5:48:ab:bf:9b:b4:24:23:78:44:
40:e2:7f:72:b7:5e:d7:16:f5:d4:8c:f8:2a:48:fd:
b5:8b:b4:5a:a5:92:26:1c:2b:2f:bf:b9:9c:17:f2:
36:9b:97:70:64:5a:92:46:75:8a:a7:1d:f3:27:a2:
5f:4f:8d:b3:e7:50:cf:d7:f2:bb:3b:b4:f4:0c:7a:
54:c7:77:f8:65:b9:e0:91:2b:d2:8c:9a:f9:81:5c:
19:a4:a5:92:43:35:23:f9:ba:04:97:7e:a7:0a:b6:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:7D:9E:B4:A1:34:D2:21:12:B3:23:09:AE:7E:09:40:C1:D9:F4
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:96:d1:4c:ec:55:17:37:8a:e8:a9:53:12:9e:ee:10:31:19:
5d:16:41:e8:0e:85:24:02:d0:e7:dd:3e:52:4b:77:2a:d0:a0:
e4:4b:17:8b:e5:44:2e:f3:fb:a4:87:45:96:8f:1d:8d:cc:b7:
dc:90:ea:66:9b:1c:39:5c:c0:ef:65:06:8b:91:3e:f5:e8:d1:
c4:81:42:b7:9b:dd:ca:69:60:77:c2:f3:5f:3b:0a:57:eb:f6:
f1:f1:fd:b7:79:63:44:49:d2:82:3e:b0:95:34:1d:bf:73:da:
02:80:69:4b:08:ca:04:1a:36:48:43:b1:b0:12:e6:ec:52:c0:
fa:ff:10:12:d6:e0:66:44:e9:78:62:55:7b:20:ca:64:9a:c9:
fa:b2:bb:7f:2f:13:1c:01:89:2d:ad:f7:0d:d7:4d:8c:17:17:
6a:33:a6:77:2a:f0:c6:71:bf:6b:58:fc:e0:05:f9:eb:73:2e:
aa:ad:94:57:04:3c:ee:c1:3a:37:d9:a1:b3:15:66:91:87:1f:
94:75:76:55:45:b4:f8:79:63:3c:de:f3:b8:89:fe:7b:8b:ef:
69:c3:e9:df:e3:6f:e7:39:28:6b:a5:c0:91:1a:ac:d8:ec:90:
af:93:6d:b2:dc:4a:77:b6:ad:ab:a8:98:4f:fb:78:b1:b3:9c:
2b:a4:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:10 2025 by rpki-client