Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: zZJqHke+2Fc6D31HvnhVdhqmBsLO9UvY653DduxSSHE=
Subject key identifier: A7:F0:9C:CA:5A:FD:6F:F9:68:29:14:B9:BE:B4:24:D9:57:A7:F6:DB
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 01988B7D2F84D9B4A01B934FE5507426D7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0A34
Signing time: Fri 08 Aug 2025 21:01:33 +0000
Manifest this update: Fri 08 Aug 2025 21:01:33 +0000
Manifest next update: Sat 09 Aug 2025 21:01:33 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: 0VWkg+k0oiDd+smoSibNNgIgnZkmOrF34ylohHqfN5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:2f:84:d9:b4:a0:1b:93:4f:e5:50:74:26:d7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Aug 8 21:01:33 2025 GMT
Not After : Aug 9 21:01:33 2025 GMT
Subject: CN=a7f09cca5afd6ff9682914b9beb424d957a7f6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:ee:8d:51:d1:04:3d:40:5f:0e:53:fe:a0:
fe:10:18:ce:56:f1:32:29:4e:c5:3e:31:89:19:08:
fe:3b:4a:6d:d8:98:70:66:be:ca:7a:67:df:78:ea:
49:78:b2:a4:6c:78:e7:0d:6f:ee:c7:3a:06:a5:50:
2c:be:0e:74:4f:a6:fa:9f:b7:a8:8e:e3:56:b1:40:
b4:e9:c9:ea:fd:db:d6:9a:10:ca:b5:30:94:4e:46:
da:a2:13:75:3b:bf:55:ca:d2:d6:1c:77:cb:55:2f:
72:66:3c:67:75:a5:57:da:92:7b:94:db:e6:ba:14:
ef:ed:c1:0d:21:00:30:a1:21:85:fd:d9:98:3b:cd:
8e:18:71:5a:07:3a:70:4c:dc:97:35:e7:39:11:18:
1f:f3:9f:ea:6d:fc:60:fc:a7:9c:e6:1c:a6:ac:55:
66:de:93:08:ee:3c:62:b3:28:dc:18:15:52:ce:a8:
f1:bc:5a:fc:8d:f0:7e:8d:6a:0c:cc:b2:c7:17:e9:
5d:b3:06:e0:8a:c9:45:ab:70:ff:09:7d:5f:25:09:
4c:2a:af:ea:f2:25:ac:52:40:08:17:6d:f7:73:ad:
cf:b1:0b:c5:30:05:1d:a0:7e:b3:59:56:f7:2a:70:
7f:0d:d5:76:d8:62:13:0d:2c:7f:5d:fa:ea:23:ae:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:9C:CA:5A:FD:6F:F9:68:29:14:B9:BE:B4:24:D9:57:A7:F6:DB
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f4:45:05:81:8f:9e:95:2a:c9:8e:ae:a7:81:d7:af:81:90:
57:55:10:82:af:01:18:ea:d3:85:71:bd:01:6e:58:f4:19:02:
25:10:57:d3:0f:0c:bc:41:f4:f3:f4:46:74:c1:e4:df:b6:b2:
fd:f9:e7:3c:60:6b:3e:0d:50:b8:87:59:f8:8f:20:b0:cf:b5:
69:20:4a:df:41:c0:71:2c:bd:84:5e:6d:51:5a:55:74:e9:ed:
c5:b5:44:df:d4:03:35:e8:a1:2e:d8:70:5d:11:a4:60:0e:34:
3d:40:d4:3d:47:db:3d:59:e7:d8:03:30:44:f1:45:fa:43:ee:
37:e8:fc:6f:cc:93:4e:d5:5f:23:78:35:3a:14:98:6c:f4:85:
7f:b9:fd:7a:f2:3a:69:6d:1e:92:59:a2:75:a7:20:ac:77:8d:
c9:44:5a:fe:79:ff:02:6b:06:cb:0a:3c:64:8d:3a:2a:e7:ca:
13:31:43:b1:c9:5a:7d:81:3c:fe:1d:c7:8a:52:cd:89:31:2b:
8b:ff:1b:f0:0c:bf:88:6e:22:d3:cf:f8:3a:4b:b7:6a:69:b4:
a0:d2:a8:2c:a3:ad:c5:1c:9e:81:2d:47:4e:82:b6:14:b0:b7:
15:cc:2f:ec:ad:1a:97:b0:cb:ae:4f:b1:29:93:e5:b5:98:9e:
f1:46:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:58 2025 by rpki-client