Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: nKv3ZPkTmrGcvu0PZC+HYi04cmOfCZkaee9MjuKpa4g=
Subject key identifier: 40:54:AB:36:00:60:F4:A9:50:08:15:EF:EF:36:43:DF:EA:CA:37:34
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 01988D6A9F116A54EBEE60AB6393AB8FAD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 06:00:31 +0000
Manifest this update: Sat 09 Aug 2025 06:00:31 +0000
Manifest next update: Sun 10 Aug 2025 06:00:31 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: CG33jDuk70V1LSNvkqcq15lwY76hbVJmLRGxY0D3O9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:9f:11:6a:54:eb:ee:60:ab:63:93:ab:8f:ad:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Aug 9 06:00:31 2025 GMT
Not After : Aug 10 06:00:31 2025 GMT
Subject: CN=4054ab360060f4a9500815efef3643dfeaca3734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:3d:0a:dd:9b:b4:77:34:86:ed:de:16:dd:
f4:52:a7:30:f7:f9:78:b0:39:28:df:55:be:ec:dc:
cf:ce:d1:21:26:94:f9:91:cc:59:8d:60:6a:06:80:
a5:a0:60:0a:2b:55:4d:2b:12:cd:c5:0f:8a:4a:37:
5d:74:03:12:c3:82:0c:cd:ee:58:db:a4:87:06:82:
c4:e5:ca:43:f7:01:29:79:5e:e2:4f:54:28:a7:69:
b9:43:48:1f:64:cf:86:47:eb:5f:f2:82:a9:6e:91:
76:c1:4b:07:8d:33:99:9c:94:a2:0f:66:97:bd:30:
3e:b6:70:38:14:9f:f6:f0:c1:d3:ec:36:7c:de:78:
53:5f:d3:27:88:4e:e9:3c:78:8a:57:65:91:05:31:
35:2f:38:5d:a2:42:cb:c4:82:d5:23:fc:f6:89:54:
6c:89:49:3e:0b:d3:8f:d3:a7:a8:c9:92:0b:ec:99:
7b:da:48:fa:78:fa:2b:30:3c:6b:ba:6e:6b:6f:55:
51:6c:30:90:c2:b3:f3:b7:67:be:cd:de:bb:48:b9:
54:2f:67:ce:33:c8:fa:d7:0b:5a:6f:d6:d6:f2:b0:
51:ea:88:ae:87:87:12:25:89:07:ff:7a:13:47:0c:
40:6d:42:e7:4d:87:3d:3f:4b:6f:d9:a7:c9:9b:93:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:54:AB:36:00:60:F4:A9:50:08:15:EF:EF:36:43:DF:EA:CA:37:34
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:15:85:09:fa:d7:48:f5:4e:f3:29:be:cc:77:6e:f6:9b:b5:
37:c1:9b:e5:74:12:87:b7:e9:21:50:5e:7c:90:dd:cc:02:47:
ce:19:71:02:84:2c:34:fa:06:d1:ee:d7:9c:4f:a2:60:1d:33:
17:61:37:1d:17:4a:18:b7:d2:01:ea:ce:13:c7:01:c8:e8:b9:
2c:a2:94:d2:a7:4d:c6:39:d8:46:39:4e:40:62:b6:2c:98:49:
8d:59:62:55:81:70:05:27:2c:af:36:53:69:1a:0c:00:18:6c:
ea:76:6a:b3:a3:60:18:97:9b:7c:67:4e:cc:5e:f2:c1:ba:25:
ef:81:c6:b1:70:70:7a:f7:24:a2:11:67:84:b9:61:9c:0a:32:
5b:ca:e1:4a:40:53:72:80:89:f9:0c:77:0a:eb:db:c9:3f:50:
de:8c:ac:a7:34:81:cc:2c:2c:17:1c:44:f3:ef:c8:d4:45:01:
04:fa:c4:97:28:95:39:22:e7:2a:d2:f9:d5:bd:3b:c5:1f:a5:
bd:20:b2:bb:25:b5:f8:3e:49:20:f3:6e:a5:a5:ed:53:ac:9c:
ee:a9:49:b8:64:0e:be:1c:0f:87:1c:7d:e6:59:32:f9:12:64:
df:4e:10:fd:ec:6d:0e:d4:2e:c5:af:0b:fa:ea:53:0e:04:00:
5b:3d:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:54:03 2025 by rpki-client