Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: zWQkBSxWp/PCil+R2e8HL+nrNzkPRRlyzdotjYo72v8=
Subject key identifier: 0A:E4:20:32:34:32:9E:1A:BF:EB:5F:7B:6C:E9:61:97:22:72:6F:5C
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 0198D58361FA6975F4A259AFD330728F9F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 12DD
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: YmYfTuNDh96GwI0jtoyuu6RoEds71FGJv8cmkEn7Upo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:61:fa:69:75:f4:a2:59:af:d3:30:72:8f:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=0ae4203234329e1abfeb5f7b6ce9619722726f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3b:40:83:71:65:68:41:f9:99:f6:47:10:02:
56:71:ac:18:aa:fd:89:f4:7f:6c:ce:b4:aa:08:c2:
5a:82:4e:83:65:8a:af:a3:14:3f:18:0b:2e:83:ac:
d9:56:5c:1b:ef:3b:c0:b8:a2:30:10:81:8b:7b:54:
0c:a1:37:28:d3:4e:5c:5b:78:1a:39:84:74:c4:c2:
2c:e7:08:0e:1a:ed:3d:a5:cf:2b:77:ae:c2:62:e3:
df:44:dd:5f:f2:3d:d7:2c:db:8c:76:67:60:26:0b:
98:c6:f3:ff:0a:2e:a0:20:34:2a:65:ea:f3:90:ea:
53:e5:67:d6:d3:07:d8:db:a7:e0:52:96:a0:40:71:
dd:f3:78:66:0e:33:6c:64:58:db:8b:04:f4:a5:80:
c8:e6:db:f6:1c:2b:5e:7d:34:52:b8:7a:cb:b3:37:
75:9c:a6:e2:f5:25:83:ad:2a:cf:10:f5:a7:90:46:
40:42:5d:5c:73:18:05:a0:92:51:f1:1f:57:42:cc:
c0:3d:44:7e:ad:8c:2e:59:d1:14:00:8c:f2:e7:51:
7d:a8:21:b4:fd:6c:fe:ef:b4:34:91:37:8d:80:58:
8b:3c:6a:0e:ff:d7:14:3d:7a:8f:fa:59:b1:f8:0c:
f1:25:dc:42:fc:9f:3e:f0:45:10:51:6b:bb:91:9a:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E4:20:32:34:32:9E:1A:BF:EB:5F:7B:6C:E9:61:97:22:72:6F:5C
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d0:d6:7a:60:10:fa:59:31:b3:8c:26:a5:e1:86:8f:f1:31:
62:90:d3:19:d2:e5:f8:1d:ec:3e:c2:d7:5d:37:bf:cf:39:b9:
10:9a:8e:c6:62:1d:52:d1:4b:33:56:9e:d6:e5:66:9f:c5:08:
e6:cf:e4:d1:09:3e:24:94:72:c8:97:97:76:88:39:24:a1:63:
87:61:a0:ef:13:5f:04:86:09:37:ca:18:a0:42:43:60:99:98:
29:ef:f1:55:f5:d6:55:48:95:a6:62:66:b3:dd:b3:5e:6b:ab:
8c:ea:39:d0:6a:59:e5:b8:b1:f7:e3:42:a7:ee:60:aa:5b:00:
d0:08:28:19:80:4d:37:08:11:4f:fa:eb:cc:58:33:97:61:16:
6c:3c:5e:6b:4e:8f:18:d8:b0:5c:5e:f1:2c:9e:81:8a:fb:1b:
3a:29:01:cf:88:22:2d:b2:a1:84:76:dc:4d:e4:1e:e6:f2:0e:
1b:35:b5:9f:63:1b:2a:4c:09:b0:5a:2f:4f:5c:d4:ee:c9:74:
a3:e5:f9:0d:f5:4d:04:23:3f:2c:fe:80:ac:f8:20:87:83:39:
63:cc:24:02:15:99:fb:28:7d:71:2c:6a:c6:d8:5a:44:dc:e1:
80:61:75:14:21:c3:06:b0:83:ce:e6:5d:35:cc:00:bf:28:3e:
78:94:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:58 2025 by rpki-client