Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: apK7MvYShRK+M2S9ep4UGYktEN7bZb7JU+mqDUl6TXk=
Subject key identifier: 9E:CC:61:D6:D3:6E:43:ED:53:B9:65:EE:EC:F3:95:1E:8B:46:BA:33
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 01988243058984B25B7F0E16B1F00BAA4445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 12D4
Signing time: Thu 07 Aug 2025 02:01:27 +0000
Manifest this update: Thu 07 Aug 2025 02:01:27 +0000
Manifest next update: Fri 08 Aug 2025 02:01:27 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: 8ZIqnIqOhPIzVl+sykDm01kWyaQ7NTLjsaCqUD7TOqc=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:05:89:84:b2:5b:7f:0e:16:b1:f0:0b:aa:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Aug 7 02:01:27 2025 GMT
Not After : Aug 8 02:01:27 2025 GMT
Subject: CN=9ecc61d6d36e43ed53b965eeecf3951e8b46ba33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:3a:f6:a6:ad:d3:e6:5c:7a:a8:89:e3:b9:
ac:22:0b:59:6c:53:fa:25:3e:ac:d4:a5:f1:b2:0c:
ca:18:84:c8:15:57:71:c7:e7:02:83:c1:88:a4:11:
ab:4e:49:0f:79:1b:6d:89:3d:f3:e3:d3:7f:26:1e:
c6:f8:1b:af:83:dd:c0:8d:d5:52:77:18:eb:b0:36:
42:8b:b6:ce:08:24:5f:19:99:98:ad:dd:de:5c:12:
c2:1d:3f:62:52:4f:05:0b:1e:1a:78:e3:9e:f7:fe:
53:bd:3f:92:65:44:bf:80:eb:14:90:5e:d4:67:87:
86:c5:69:14:b6:2b:56:9d:99:ce:98:69:f0:2b:bd:
90:63:80:57:08:e2:95:93:43:ea:96:12:6a:2c:cd:
fd:db:0e:8b:7a:43:58:5c:fd:50:9e:9e:0f:72:49:
a3:46:f1:9c:b5:43:5c:e6:a7:48:8f:49:de:1f:81:
db:bb:c3:af:54:17:1a:1d:72:f8:4c:34:02:01:c1:
28:4f:74:d8:72:17:24:c0:e2:22:3f:df:0f:e7:59:
00:0e:35:f9:9f:d7:53:3b:2d:74:6c:3f:ea:39:74:
be:f4:41:81:91:d7:56:61:d2:d8:bb:03:69:b0:0a:
35:b3:24:99:ee:96:3b:90:03:3f:64:78:b7:89:20:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:61:D6:D3:6E:43:ED:53:B9:65:EE:EC:F3:95:1E:8B:46:BA:33
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:c7:76:bf:88:c5:f2:34:f1:65:0d:70:e0:7b:83:f3:46:
af:5b:8a:a8:ac:cb:2a:37:a5:7e:7f:d5:d7:8f:0d:25:fb:ee:
c2:c5:1e:bf:12:a0:61:07:fd:97:01:0f:0d:b2:9f:b5:5a:3f:
d8:c4:49:f1:81:f1:eb:e2:43:8a:9d:ca:49:f0:66:d4:c2:fb:
4e:1c:ca:74:6b:e1:d0:f9:38:ec:48:0f:36:03:81:8c:ac:08:
f8:ec:b2:86:c2:5c:63:42:07:fe:53:3f:71:3c:b8:3a:1a:4f:
e4:e1:6d:56:bc:da:8e:3f:a8:a4:7b:96:2a:2f:d5:f6:ea:11:
4e:a1:c2:27:2f:f6:08:84:5e:97:e5:06:d3:b0:f7:0d:fb:b5:
a0:0b:c3:37:07:f1:be:a2:18:b7:2f:f2:1f:ec:a9:87:27:ae:
4e:65:d6:a2:fc:14:7b:70:c0:0f:73:41:3b:97:5f:63:eb:ea:
e6:a7:8e:b9:0e:ff:17:22:76:41:b5:84:48:75:71:f2:9c:e3:
0f:75:cf:76:fe:dd:50:ba:9d:c3:83:b0:fb:d5:2f:78:15:57:
7b:e6:c5:4c:e6:a5:0b:2a:af:30:30:80:2e:bf:34:19:fe:5f:
7f:9d:cc:0b:2f:d4:34:9b:1d:0b:55:d2:67:dd:86:5f:30:72:
b9:5e:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:25:29 2025 by rpki-client