Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: maLD1p6J7g+M3iKYhPez4FOQabyqZZ+4GrP0IwqH0XM=
Subject key identifier: AC:C6:D7:38:09:69:74:AF:40:3C:3B:C4:6C:77:A6:EE:9C:A7:5F:B1
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 0198820BEC55AC6715D3FC5B6A209ABE58CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 0141
Signing time: Thu 07 Aug 2025 01:01:16 +0000
Manifest this update: Thu 07 Aug 2025 01:01:16 +0000
Manifest next update: Fri 08 Aug 2025 01:01:16 +0000
Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: BCb2Uky3bBbIL93afWKaU+OGuFVrGkAFZ5RSzFBDYyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:ec:55:ac:67:15:d3:fc:5b:6a:20:9a:be:58:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Aug 7 01:01:16 2025 GMT
Not After : Aug 8 01:01:16 2025 GMT
Subject: CN=acc6d738096974af403c3bc46c77a6ee9ca75fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:7c:57:fb:60:31:a1:ad:7c:8e:f1:f5:85:
fc:d2:f1:59:77:38:0f:8d:32:6a:6a:71:dd:3f:e4:
09:9b:e2:ad:a2:2f:70:43:e6:d7:57:26:ab:d1:a2:
56:69:3a:9d:6e:b0:0f:66:b5:50:57:37:6c:71:70:
9d:af:c8:5e:81:ad:90:72:85:89:2e:cd:47:5c:27:
9c:b9:2a:11:27:03:60:81:45:53:ec:98:f6:16:be:
30:ca:fb:20:0b:0b:f0:b5:8a:40:66:2b:cd:e5:3a:
33:7c:17:23:98:36:3c:85:11:f9:c9:8a:2d:38:06:
3a:2d:fa:39:7a:15:0d:d8:0a:04:9e:bf:c3:9f:42:
79:20:8f:85:ce:4d:c9:df:85:9b:d5:04:8a:71:a7:
57:3c:7b:19:b4:e9:88:48:07:67:ba:e9:0f:bb:69:
e9:52:a9:82:15:a4:80:fd:e9:d9:11:68:58:47:e7:
6b:33:78:97:b1:31:ad:95:7a:27:ef:8e:bb:02:c5:
f9:95:53:43:36:dc:29:36:ab:8a:38:a1:3f:43:a5:
45:31:04:41:fd:d1:04:40:84:66:29:e5:49:31:07:
95:9e:01:92:03:40:22:23:dd:35:7b:4b:28:2e:b7:
c6:ea:98:53:20:7f:25:6d:48:4b:5d:1a:4f:96:e4:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:D7:38:09:69:74:AF:40:3C:3B:C4:6C:77:A6:EE:9C:A7:5F:B1
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:30:5e:7d:5e:ab:e4:e8:a3:dd:6c:e0:b9:dd:2d:f1:9e:
8e:0b:5a:c0:c9:18:5f:fc:45:5e:14:0a:da:d8:2e:82:40:bd:
a6:44:19:8c:25:18:7a:88:ed:8e:46:96:db:05:1c:0f:ee:e8:
1c:10:d8:8d:d3:19:51:51:6c:98:dd:09:cd:ef:49:c9:6f:28:
04:d8:07:2d:31:b6:e3:0b:fe:35:d7:79:f8:9d:97:65:28:1a:
db:3b:f2:a1:32:0c:a1:d6:73:b7:a9:ef:dc:a3:31:98:74:5b:
df:aa:1a:8b:9b:74:6d:e9:fc:fe:0a:59:55:11:d2:a0:eb:21:
27:08:b0:f6:47:f2:90:22:d7:d8:40:d6:bf:c1:7b:5c:c7:76:
74:77:66:f0:aa:35:a3:35:b1:7f:73:9e:8d:ab:b2:32:16:a0:
60:fb:a2:ae:76:6d:fb:12:bb:e5:73:f8:8e:c2:eb:65:4f:e3:
64:c3:1a:a0:90:0a:80:df:5c:b1:0e:02:d5:d1:da:ef:67:f6:
c9:94:e5:ef:a0:7f:c0:40:51:98:3d:b3:a3:a1:6f:58:f7:b0:
23:fb:5d:2b:8a:3d:f8:d8:5f:ff:4c:48:6d:03:b1:5a:0b:63:
a6:3e:07:00:3b:d0:b0:e3:d5:bc:13:e9:39:56:88:3b:98:67:
4d:00:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:23 2025 by rpki-client