Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: KEQLGKSO5x9ZcsaLTkDe8DYXx7gUrZNzDx5ph60d+dA=
Subject key identifier: 69:41:95:AA:8B:EC:59:B9:98:6D:C0:F3:34:B5:9E:1A:14:DD:FE:FF
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 01988B45F835B8A2CFD651CF5ACD56239A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 15F2
Signing time: Fri 08 Aug 2025 20:01:15 +0000
Manifest this update: Fri 08 Aug 2025 20:01:15 +0000
Manifest next update: Sat 09 Aug 2025 20:01:15 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: ti70lXXzCkeQzIe4ntBn44LfbnSHv268RgapSweXFCk=)
2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:f8:35:b8:a2:cf:d6:51:cf:5a:cd:56:23:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Aug 8 20:01:15 2025 GMT
Not After : Aug 9 20:01:15 2025 GMT
Subject: CN=694195aa8bec59b9986dc0f334b59e1a14ddfeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:7d:7e:99:df:08:de:98:8b:93:15:f1:ba:
20:c0:a8:f4:6b:2d:68:b0:07:b4:d9:9e:70:09:4c:
13:f4:cb:a4:4a:b1:d4:65:06:6b:7a:da:12:9e:e7:
72:5e:f1:8e:28:47:7f:88:88:62:8c:db:34:84:b4:
99:9a:e7:c5:db:5c:c4:89:e5:f3:9e:5c:5c:a5:0a:
4a:67:48:54:68:52:c1:4a:4e:3f:a0:56:8f:0c:3b:
1d:3e:99:18:d3:ac:42:44:06:b3:66:ea:01:f0:87:
e5:b3:83:b6:48:55:c0:71:8e:41:80:1f:df:10:4e:
b7:e0:95:1f:0f:3e:13:60:c7:86:c2:56:69:e2:06:
62:08:3c:54:f0:9b:fb:2c:05:a8:a7:f2:f9:d9:1a:
f5:c5:98:a0:72:35:69:1a:cf:e2:11:fd:8d:31:62:
f8:76:f9:fb:87:55:0e:74:ae:dc:57:cd:fb:46:fa:
04:8d:a3:e1:10:a9:05:6f:84:28:4f:80:58:53:24:
57:b2:6e:87:15:bd:b8:f2:84:1d:f4:d6:e1:ba:a3:
cf:5d:88:d8:fc:42:dc:a4:e3:c7:18:f4:82:d6:db:
17:94:48:02:7b:d7:08:77:bc:f5:1b:61:94:9c:bc:
7b:20:ed:1c:7a:cc:f2:80:5f:4f:d2:ec:88:ee:5f:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:95:AA:8B:EC:59:B9:98:6D:C0:F3:34:B5:9E:1A:14:DD:FE:FF
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c7:66:53:a9:31:9c:be:56:07:ef:60:25:3d:05:79:cb:6e:
ad:2f:76:d9:15:4d:ba:ea:7f:32:b6:ad:59:49:95:3d:ed:d0:
61:da:6e:6c:4a:91:b7:6f:e9:d5:a9:a3:21:a2:7c:04:12:25:
1e:36:d3:5b:3f:aa:5b:ac:4a:c7:a6:7f:bc:4e:7b:5f:81:fd:
b5:03:6b:60:5c:30:50:ff:4b:ce:4f:1c:d7:57:14:2c:c3:96:
ef:8a:10:db:74:fd:6b:bb:80:5c:9b:27:60:cf:3d:27:b2:0c:
16:66:57:57:80:b2:11:fa:bd:f7:3a:90:c4:14:5c:a3:fb:0a:
8e:53:3a:6c:ec:4e:1d:01:95:66:91:cd:6f:19:22:63:20:20:
5f:7c:1b:f3:dd:4a:b0:97:34:91:4f:d2:71:85:93:17:b2:ac:
b1:6e:0d:d3:2e:03:c8:76:6e:40:3a:61:86:d7:4e:35:82:e7:
55:3e:4a:3e:b5:7e:52:a5:80:0c:67:b1:08:71:5e:df:a5:75:
17:05:37:a8:0f:0d:52:9a:19:d6:f4:39:c9:04:5f:08:4e:73:
22:83:b0:f7:a4:b8:41:f3:34:8d:51:0c:13:01:78:e2:a4:d0:
15:5e:c5:9a:61:1f:3f:a4:01:d1:e4:ba:70:97:87:f3:e1:10:
fa:36:c5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:54 2025 by rpki-client