Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: H0fIw8/BTDSn7YU1UXEDtdO+1GRccIgxxbeAMvmAjDg=
Subject key identifier: A0:71:00:78:E2:5E:87:A8:EF:7F:76:AA:FF:C1:76:26:CF:D0:AC:AB
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 01987562693CD01C99342C300E5824A17799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1656
Signing time: Mon 04 Aug 2025 14:00:40 +0000
Manifest this update: Mon 04 Aug 2025 14:00:40 +0000
Manifest next update: Tue 05 Aug 2025 14:00:40 +0000
Files and hashes: 1: 1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa (hash: AFl9DeBDP0dSG/OK6zMhaGWYU/Hi58NsW+5Sbk8Zc2c=)
2: 6N4n07cpVsvDfcO3eEPVPOVbfQg.roa (hash: nhZwGT39i2nPsTiPGKrLhdrJBmLcv3M5z0QYlPKdUVs=)
3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: iA57Li7v+uViyMz49ZXzJnxD66O5ykVZ4/yAt6oYaMQ=)
4: jZDFfglCAVXqMiHQiNaCS_ykt5c.roa (hash: Z9pj0iwTHPQ+PmAz+kp9u4GZKNWWC8RI/dko3M2WedQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:69:3c:d0:1c:99:34:2c:30:0e:58:24:a1:77:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Aug 4 14:00:40 2025 GMT
Not After : Aug 5 14:00:40 2025 GMT
Subject: CN=a0710078e25e87a8ef7f76aaffc17626cfd0acab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:57:ba:c0:fa:38:ad:eb:c2:08:d2:f0:0f:
4a:94:ff:42:0c:35:de:42:80:5e:25:2b:dd:49:ba:
c4:41:ec:db:e0:88:b1:f5:d8:e2:6f:d3:b9:e3:31:
9b:79:06:3b:6f:3f:a2:62:95:5a:53:00:50:9e:e5:
60:40:b9:eb:0e:31:db:f0:84:bb:06:d6:d0:c1:26:
d9:28:32:be:49:1f:ee:62:48:54:ec:44:eb:35:e9:
44:02:26:72:3c:9d:6d:ae:10:1e:bc:df:2c:ac:4c:
0f:23:a5:65:d9:8c:ec:ef:ac:57:9d:57:78:54:1d:
f1:74:b7:b4:0d:97:43:e7:e4:04:7d:ad:b9:9e:e9:
a0:ba:5d:81:b8:af:97:f8:6e:35:c5:c5:e8:1e:c9:
59:0e:ea:e4:5a:68:90:ba:ec:25:3c:a8:73:75:6d:
13:40:a1:2f:c1:25:5c:13:ef:4b:c2:4f:02:c1:38:
2a:1a:e9:a0:de:87:b1:4f:99:e2:ad:8f:8b:12:d9:
27:b2:2f:9c:42:e6:a6:1e:93:60:a6:96:71:3c:46:
dc:18:0e:b8:4f:d0:01:05:4b:88:7c:58:e8:5a:3c:
f7:02:8d:bb:85:a0:4b:22:8d:f8:cf:4b:25:03:60:
e8:a9:4b:0c:16:e3:10:fd:62:87:b1:96:29:19:79:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:71:00:78:E2:5E:87:A8:EF:7F:76:AA:FF:C1:76:26:CF:D0:AC:AB
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:42:4f:90:2e:18:ec:6a:91:e2:32:07:dc:93:e5:6c:e4:0b:
b4:e3:02:37:ed:d4:c4:5a:08:da:70:d1:89:91:46:38:b2:db:
1d:50:b1:0a:0c:ab:54:16:49:70:42:9f:52:20:a3:aa:f6:fe:
ea:8d:99:95:f7:52:f3:5e:e1:5f:7e:03:8f:69:fa:1a:b1:89:
28:88:97:f2:54:8b:bb:5f:99:b1:05:6a:bf:42:18:63:02:d2:
a3:65:61:00:89:6d:06:3a:5a:b7:9a:95:7a:ee:c9:c5:bd:fd:
17:4e:d5:0b:13:bb:61:12:2b:ad:43:a1:35:74:40:2c:7c:34:
01:65:41:9c:26:11:b7:0c:e1:e0:84:6b:08:12:38:2f:91:89:
ed:76:c4:db:89:28:94:c4:2f:08:1a:59:12:f3:fa:f7:c9:a7:
4c:e0:24:4a:cd:03:82:39:0c:85:a1:50:4c:af:62:82:c1:9f:
b3:0c:1b:c1:b0:37:73:56:84:20:47:ac:4a:68:82:2a:98:2c:
5d:96:08:f0:44:1d:1c:b9:6f:80:09:72:ff:01:3e:31:a6:1f:
79:64:39:10:7c:22:87:96:f3:09:e8:3e:18:2b:dd:e6:91:3c:
e9:66:a6:08:e1:55:5b:2e:d0:0f:7d:f9:72:4b:d7:48:c2:87:
5e:fa:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:31 2025 by rpki-client