Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: JuxrAdCv1SuxJEymvtkA5sAKkq6T8GSriowui/8ajtk=
Subject key identifier: 23:45:8F:51:9F:AA:2F:8C:03:AC:69:73:32:EA:87:A7:AC:46:CE:E8
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 01987450BD499D04613619FD1B9E1BCB6DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 09:01:45 +0000
Manifest this update: Mon 04 Aug 2025 09:01:45 +0000
Manifest next update: Tue 05 Aug 2025 09:01:45 +0000
Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: UZlngfS9Rj7f1eKtyMZk6Iubf3S7z4Aw8qRjwVcqAl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:bd:49:9d:04:61:36:19:fd:1b:9e:1b:cb:6d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Aug 4 09:01:45 2025 GMT
Not After : Aug 5 09:01:45 2025 GMT
Subject: CN=23458f519faa2f8c03ac697332ea87a7ac46cee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:09:9c:04:3d:55:c0:1b:7f:b8:e0:aa:fa:
e0:0c:d2:57:bf:4b:0a:38:ac:0e:0a:f6:b2:98:bf:
01:7c:dc:20:89:7c:50:73:40:6f:5a:77:4d:b5:dd:
84:f5:14:b0:68:01:39:ba:dd:ce:24:09:8d:7d:da:
39:04:1b:c0:6b:07:1c:d1:cb:3b:30:b6:f7:83:b5:
7b:a6:b2:e3:40:9c:ab:17:7a:85:24:87:6c:9c:2b:
9f:ae:90:49:9b:7b:9a:69:b1:a6:84:c0:6c:24:bb:
e3:c5:e1:3f:7d:5d:d0:6e:69:d3:f8:0d:80:ea:42:
04:11:73:a5:3c:0b:2c:f8:6d:25:59:76:69:7c:74:
f6:56:b4:9e:ea:2f:16:eb:b3:d5:73:1f:3f:fb:5a:
06:c3:43:f7:46:3d:ac:60:fd:19:24:00:45:6f:45:
3a:ed:fc:9c:fd:01:18:6d:16:1c:dc:2d:c9:88:8c:
c4:cd:56:91:0a:7e:b0:47:9d:55:82:9b:49:d7:18:
4c:7f:f4:ac:2d:48:95:c9:05:1e:36:46:b1:ef:07:
06:09:ea:a5:f2:3d:9a:82:a1:2c:ee:dd:ab:fe:25:
18:10:9b:f2:ca:15:9b:9d:a5:03:e2:06:e8:e6:ee:
83:6b:a7:33:9f:c4:78:ea:48:dd:33:d6:c0:91:64:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:8F:51:9F:AA:2F:8C:03:AC:69:73:32:EA:87:A7:AC:46:CE:E8
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:99:2e:29:4d:3a:f3:08:3b:bf:98:b4:2e:08:0d:90:79:3c:
34:e6:b2:a5:44:a9:23:92:38:df:d1:84:dd:ef:0f:69:85:34:
14:75:42:54:fd:c3:2a:d3:5b:07:1d:5d:f1:ba:d8:ae:45:15:
dc:53:95:06:1b:cb:0b:e0:3f:49:e6:b4:08:8f:73:7f:30:2b:
56:a4:2f:95:f4:13:17:9b:79:78:0e:9f:fb:6f:a6:d4:4d:eb:
0f:7f:5a:17:e9:fc:34:2c:28:66:ae:ee:f7:80:98:81:e5:d6:
46:e2:d3:45:ab:87:1e:08:a4:5a:54:13:db:20:04:f8:79:76:
ca:ae:24:e5:f5:64:ef:be:8e:19:86:f1:4b:73:2f:7e:a5:f6:
cb:0e:51:5c:48:59:df:5f:57:55:bc:ec:dd:65:40:5e:48:02:
41:63:ff:1a:de:1d:2b:7c:2b:59:66:47:5a:f7:a6:8b:ae:a4:
02:f6:35:10:f8:97:36:e7:a9:a0:0a:07:00:b4:3c:fd:57:08:
0e:c1:34:e0:9a:25:b6:a6:40:d0:cf:9f:c5:8b:87:9a:bc:89:
4e:c4:85:5d:6d:aa:b2:f3:ad:8f:0e:68:cf:35:a9:6f:35:dd:
25:9c:21:d1:65:c7:69:e6:84:fd:b6:67:92:2b:e6:a3:ab:70:
02:e1:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:17 2025 by rpki-client