Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: Z95V1yZfIOwjBdPxotrwoE0CsCzDuJu4bH74nCoqJEA=
Subject key identifier: A8:0F:3D:1F:46:53:54:26:72:43:8B:F8:49:FF:4B:6D:33:58:5C:4E
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 01987CE58B614145073BE6EACE87F6473E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 01:01:14 +0000
Manifest this update: Wed 06 Aug 2025 01:01:14 +0000
Manifest next update: Thu 07 Aug 2025 01:01:14 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: yoyV/Y15CypwGIFJFjLxz2yVOWvFtx9dJ772tuJ4BTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:8b:61:41:45:07:3b:e6:ea:ce:87:f6:47:3e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Aug 6 01:01:14 2025 GMT
Not After : Aug 7 01:01:14 2025 GMT
Subject: CN=a80f3d1f4653542672438bf849ff4b6d33585c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:dd:5f:57:95:60:d8:3c:84:7c:c8:ea:5e:
f7:6b:0d:e3:a7:03:66:71:2c:52:d4:a8:ce:4e:d6:
63:34:e0:c8:e0:9d:d4:b4:db:18:bc:60:df:e2:80:
1c:1d:a5:3e:93:a0:39:03:18:3d:bb:96:b2:a7:67:
14:21:68:e7:f1:16:8a:be:29:37:e0:2f:19:f1:7a:
18:74:12:fe:55:cb:fa:b1:24:47:60:04:b2:fe:e9:
4d:52:ae:c0:b1:12:dd:34:16:bb:a8:ed:7b:8c:f3:
00:0d:bd:e7:35:9b:5c:6c:b5:9a:c5:6b:b0:74:f4:
8e:19:ca:d3:7d:09:c5:8b:aa:1e:4c:e4:de:4c:9e:
37:bb:0e:8e:4e:ec:49:fc:6b:93:33:24:19:d2:b2:
64:91:08:ed:c2:f3:0f:b7:63:e6:23:01:97:ff:7c:
5f:ae:14:6a:80:7c:7b:e0:36:b2:05:0e:f3:b5:7e:
70:2b:29:a0:01:85:09:b3:fd:76:d6:c5:d7:00:c8:
ec:c9:de:0f:b2:93:e3:34:16:9e:7b:3d:38:46:0c:
86:f2:80:84:f9:24:5f:b4:11:24:50:cd:88:b1:45:
aa:51:fc:50:20:cc:d7:c4:a7:0d:cd:27:e6:ea:d0:
27:4e:42:b4:dd:8b:82:00:6a:ac:6e:19:25:76:93:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:3D:1F:46:53:54:26:72:43:8B:F8:49:FF:4B:6D:33:58:5C:4E
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:2a:6a:a2:c2:a8:5e:0b:a6:2e:1c:29:e1:c5:45:10:9f:
5d:50:20:28:dd:2f:35:0e:90:e4:85:a7:2a:6f:19:8e:7a:79:
18:b4:46:87:a8:78:80:ef:5d:14:6b:f2:90:22:96:a3:b8:76:
fc:87:f7:2f:84:33:5d:2e:80:59:4f:8e:f2:8f:0c:e9:d4:c3:
fb:5b:14:81:e6:fa:64:60:47:5c:62:d6:14:1a:2e:02:1e:81:
f9:b6:2b:6b:ca:e4:4d:38:e0:ed:bf:e1:8d:63:ee:a1:7c:81:
27:31:9e:56:f3:31:02:16:17:cf:64:1b:ec:3b:80:9c:b0:52:
f4:8e:45:83:bc:2a:ed:a8:f8:bb:5b:4e:cd:dc:9f:de:73:d4:
a3:d4:ff:d1:2b:7f:6b:44:0c:b9:2d:08:ce:0b:7a:d4:85:26:
11:15:9f:3e:59:66:5d:11:12:a2:87:ce:5f:65:23:f4:78:fa:
7c:95:78:69:3d:59:1e:45:80:ae:b8:e5:36:76:4a:5e:ac:9d:
28:3a:97:a3:2f:3a:f4:aa:09:13:50:7e:17:8f:e1:6e:2f:fb:
94:a9:20:5a:a4:4a:3f:67:c5:16:7c:c8:a3:0b:4c:f3:e7:f7:
89:84:3a:1b:58:35:48:70:96:75:8f:f9:6b:67:91:7c:32:80:
7a:e5:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:43 2025 by rpki-client