Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: ctfvx/J5JYEgi6ZuhoQgKa6i7Iy/aAn2EkzE8wrOEzI=
Subject key identifier: F9:98:95:18:CF:6A:26:E8:1F:1E:C0:63:F7:E5:98:B9:0E:FE:E1:C7
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 0198D5157DABD337324E7F3BF1989D798132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 02C3
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: gCBkC16cE+rEsg/ZL3bNpq39nZL95tExLs6RXliQQi8=)
2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7d:ab:d3:37:32:4e:7f:3b:f1:98:9d:79:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=f9989518cf6a26e81f1ec063f7e598b90efee1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:47:fb:21:e7:d5:58:73:a1:1e:ce:c7:70:
86:d9:58:12:e3:76:ba:19:b1:7f:36:31:62:01:92:
71:59:f9:2d:02:11:55:6f:df:49:60:f5:9f:ea:5b:
4e:64:45:7e:af:4c:8d:7f:16:35:f2:e5:1a:e5:e3:
cd:d2:86:46:ad:f3:2b:d3:5e:cd:cb:64:e9:07:f7:
a9:98:63:10:4c:8b:f1:6a:9e:dc:e4:d1:41:0d:33:
8a:f8:0a:85:06:8f:b4:fe:a3:34:f7:52:9d:fe:af:
50:aa:93:ee:36:05:4b:9f:05:4b:06:d2:14:18:a6:
c1:40:f4:71:a4:61:3b:59:eb:36:1c:6f:bb:a9:f3:
56:d3:d1:00:e1:47:a0:26:11:c7:49:05:c6:66:d4:
d5:90:e6:92:85:eb:74:c3:7c:95:94:a7:30:3d:f3:
66:78:8f:d7:67:0e:08:f8:48:ca:b7:69:54:18:31:
48:0c:dd:13:c4:bf:d6:75:bf:b1:2f:5b:2e:dc:c0:
be:0a:c5:c7:65:54:06:d3:f3:f4:a2:fd:6e:87:1b:
73:33:af:6e:b3:e0:d8:0a:af:e7:95:91:ff:fd:56:
c5:fd:aa:df:df:be:34:88:f5:1e:9f:97:0b:9a:88:
68:b3:d5:db:ae:2b:f6:80:5c:67:d2:b0:61:c3:2e:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:98:95:18:CF:6A:26:E8:1F:1E:C0:63:F7:E5:98:B9:0E:FE:E1:C7
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1a:dc:ea:91:51:8c:1d:b9:e8:fb:71:ae:7d:3e:05:c6:e4:
d6:c3:05:12:82:34:17:a4:cd:a7:ac:5a:4b:37:08:e7:3f:8b:
ff:e8:af:8d:83:f3:51:7b:d5:bc:b2:c7:23:e1:7c:8c:0e:1b:
ff:bd:1b:cf:ba:3d:3c:5b:1d:0b:13:36:4d:f9:a8:25:02:52:
c6:29:ac:e9:53:ce:09:95:21:10:eb:36:ec:25:a7:c1:f3:95:
58:3b:92:00:0b:7a:1c:11:32:9e:d0:90:5a:17:90:63:df:1e:
c8:90:58:d7:9e:c0:7f:18:b8:67:47:ed:d4:66:a9:77:b3:d0:
30:40:0f:56:10:20:ad:ee:bb:48:61:73:d5:b5:f2:f7:83:24:
e8:36:d2:23:52:08:d3:9e:aa:b7:40:cc:2a:f0:06:9a:fc:ec:
a2:fb:a7:88:f5:c5:20:d8:36:73:1a:1d:9d:4c:27:bb:d5:8d:
26:0b:ce:da:b4:41:e4:2b:e6:1e:94:57:a8:8e:4f:aa:e5:43:
9c:da:8e:a5:89:c0:fa:7f:fc:d3:d0:d4:fb:b5:e8:0c:6e:a8:
59:68:06:83:a4:06:6f:21:5b:db:69:c4:da:81:4d:5a:b4:27:
38:ff:13:7e:01:97:8b:77:d0:7f:9f:71:90:0d:d3:23:e4:14:
cd:45:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:46 2025 by rpki-client