
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: U8KNVeCHeB+hk2kVukpJSWriBZ1RSowjhgubQwiTup8=
Subject key identifier: E7:A8:B8:43:AA:81:EC:CC:15:15:0D:DE:BA:21:93:2B:B8:78:8A:24
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 01987A88B53EC2CB956559D1522844168FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0F1A
Signing time: Tue 05 Aug 2025 14:00:36 +0000
Manifest this update: Tue 05 Aug 2025 14:00:36 +0000
Manifest next update: Wed 06 Aug 2025 14:00:36 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: MEaguKfR1UlVLmeKcIzMQ/aey559Uc/VX5UUYH/WNv8=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:b5:3e:c2:cb:95:65:59:d1:52:28:44:16:8f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Aug 5 14:00:36 2025 GMT
Not After : Aug 6 14:00:36 2025 GMT
Subject: CN=e7a8b843aa81eccc15150ddeba21932bb8788a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:30:f8:a6:42:c4:f0:37:52:0b:f1:f6:a1:
62:e9:dd:6b:60:85:a0:d4:13:d8:64:0f:23:d4:67:
ba:d9:78:fa:9c:cd:d7:d4:4b:2f:6d:ab:0b:fa:a7:
c1:f6:be:8e:17:aa:bb:f6:03:1c:72:a1:05:3e:2a:
fa:3b:79:d7:2e:f2:f8:d1:6a:14:f5:d7:58:74:38:
d0:bf:49:64:f4:50:de:b2:91:c7:ae:a9:cd:73:9a:
03:1a:61:21:aa:79:3f:16:4d:e2:f7:f4:40:9a:2e:
20:0c:c2:8c:26:8a:eb:64:88:65:0a:df:a7:aa:1f:
1e:12:cc:27:ea:f0:9d:77:34:21:0f:b6:61:0a:5d:
f7:b8:1d:e5:79:7e:a3:59:67:6b:de:7d:5d:ba:93:
1b:52:60:ae:8e:d3:49:a2:15:ad:09:f4:43:14:29:
0b:7a:e6:8b:49:a5:45:e1:4e:2d:a6:8f:62:01:ec:
6c:24:31:b6:ad:8e:df:14:3e:ef:3f:b4:29:ae:6b:
fc:c2:c3:48:c6:3f:23:f7:ba:95:f9:39:43:30:5a:
d5:9b:41:a0:4a:a1:8d:b1:e4:67:71:8d:65:88:16:
d2:16:79:53:ea:0d:12:15:91:98:8b:1e:3c:dc:39:
2e:2c:d2:c0:a3:d3:7a:a7:ee:2c:53:13:c1:25:fe:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A8:B8:43:AA:81:EC:CC:15:15:0D:DE:BA:21:93:2B:B8:78:8A:24
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:dd:51:fa:4c:3a:4c:dc:36:9d:50:a9:55:35:69:e6:4b:82:
82:97:f3:91:66:2e:7b:6b:d5:e6:9a:1e:f0:c5:f9:e8:52:b8:
f1:7a:2a:2e:24:71:7a:21:4d:bb:14:f7:c0:7d:57:09:7f:bc:
7a:47:73:40:04:ea:e6:56:60:20:83:7d:49:0b:c4:c1:e8:03:
2d:5e:05:13:a8:ee:59:0c:ae:b7:fb:64:1f:11:9b:3c:cb:9a:
66:c1:8f:ff:a4:12:8a:3c:cf:8f:2a:6c:80:91:8a:40:49:3d:
d0:a4:3c:1c:29:19:81:e0:35:0a:22:1f:55:fc:4c:1e:ea:47:
46:f0:bb:07:45:ec:45:48:8a:77:cc:08:9e:77:61:bb:b6:d7:
b2:73:92:c3:e9:7a:e4:52:2e:ad:35:d4:ac:23:72:ad:fb:88:
6c:a6:5c:a1:bf:7b:9c:c8:91:b2:0f:26:e3:45:3f:98:18:aa:
1d:90:5c:2b:0d:37:4b:e3:83:1e:27:22:14:f2:53:16:ee:a5:
c0:7b:5e:49:d4:ef:30:45:69:25:30:95:7d:e1:ea:7c:47:4c:
d2:52:1e:2f:db:eb:d0:ca:9c:99:e7:a4:0f:17:c5:09:f9:ac:
eb:f6:ce:04:85:53:db:26:c2:11:13:6f:c7:6c:85:1f:12:43:
6b:b0:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:15 2025 by rpki-client