Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
File: hqnzrkX3AVCvF-uHiel4iQKe5dM.mft (raw, json)
Hash identifier: PwXSOG0sw9XCgneyXFYcUMdvWk/0AUlf/ageiL6UBJg=
Subject key identifier: 50:B1:5F:B7:AE:6F:65:1C:58:8A:BE:D3:4D:16:B2:A9:B9:6F:DB:0A
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 01987C09703D0E8CDE5D6952D9DDE3C1D321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 21:00:49 +0000
Manifest this update: Tue 05 Aug 2025 21:00:49 +0000
Manifest next update: Wed 06 Aug 2025 21:00:49 +0000
Files and hashes: 1: 6b_z1nYhros0lFsJJ-v5kZEUQbE.roa (hash: lcqP5Znx2EuUXx9SjdDPzhxT49PtsEmnOX0/yWwCL10=)
2: hqnzrkX3AVCvF-uHiel4iQKe5dM.crl (hash: 0ZaYFSnVgWxD6dnz/JlM62qRnDPlaQkhdN5QA/N+v64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:70:3d:0e:8c:de:5d:69:52:d9:dd:e3:c1:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Aug 5 21:00:49 2025 GMT
Not After : Aug 6 21:00:49 2025 GMT
Subject: CN=50b15fb7ae6f651c588abed34d16b2a9b96fdb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:bf:31:13:30:be:6d:e1:89:6e:a8:28:94:
24:f5:85:68:be:de:68:25:1f:04:cc:c3:20:21:31:
c6:c7:a2:97:4a:9e:32:79:ca:bc:f2:04:84:e5:61:
54:ff:33:10:ea:c5:02:44:fa:37:cd:1b:67:28:36:
5f:4f:89:aa:65:ab:ca:dd:d4:59:8c:8c:67:53:02:
55:2c:68:ef:10:12:cc:d3:f2:c2:83:00:0a:8f:38:
e0:71:a5:11:96:a7:7b:d5:7e:54:02:f3:cb:6a:3a:
ba:df:02:4c:8f:22:a7:45:b2:9e:0a:9a:15:31:db:
9f:6e:08:e7:2e:f3:b8:41:84:1e:f5:ff:f3:49:04:
37:32:46:c4:4c:91:3a:32:b1:b6:f5:37:49:f9:1d:
45:d7:fa:d6:70:f4:a8:ea:3b:79:a4:81:cc:b8:49:
86:7c:c1:14:2a:41:76:1c:45:07:89:31:d1:1c:64:
95:fc:c3:8c:ab:61:ef:58:be:83:1d:87:72:0d:68:
03:8e:94:37:76:5a:2a:db:87:9a:27:96:51:44:34:
ce:30:86:11:37:f5:5c:3b:d6:d7:eb:57:85:48:0e:
91:d8:cb:33:cf:86:fb:4f:ca:17:b7:db:99:c0:7f:
51:30:67:5d:a1:0d:40:16:d7:83:81:ae:c2:05:52:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B1:5F:B7:AE:6F:65:1C:58:8A:BE:D3:4D:16:B2:A9:B9:6F:DB:0A
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b7:80:36:0b:46:c9:18:1a:38:0b:24:74:1d:0d:f9:f3:b9:
b1:ba:08:1f:34:f4:cd:4c:60:00:a2:63:d3:d2:e7:23:18:d9:
e3:8a:18:a0:52:71:64:f5:13:3c:ec:c7:83:c5:8c:52:81:e6:
32:8c:93:f8:e0:0f:ea:b5:06:2b:f7:6a:1d:f8:39:91:ff:68:
00:12:35:1e:92:40:28:8a:4b:e8:4f:cd:3f:c3:c1:39:da:8b:
d7:34:94:c9:48:12:76:a4:d3:72:23:7d:e7:1d:46:a8:f0:8a:
35:14:fd:34:a4:66:f9:db:65:e9:8f:1c:a2:8c:2c:b4:ee:f0:
6b:07:e2:6b:75:17:6c:06:c6:24:0c:6b:e7:cb:f1:5d:44:41:
5f:b0:fd:2f:f4:f4:6e:13:fc:b5:dd:bc:cf:f9:6c:44:e3:5f:
aa:f4:23:47:dc:8e:e6:72:79:1d:42:d0:2d:2f:a2:a5:c4:b5:
b8:c4:90:f3:d0:e9:95:c1:24:1f:db:44:8c:01:8a:c6:7d:7c:
8a:83:92:67:84:3e:54:ac:06:65:c2:13:e7:b1:5b:04:c5:59:
47:5d:98:b0:e6:ae:48:71:4c:8e:bf:57:27:f1:0a:4c:bf:6a:
ae:76:5f:dc:45:1c:db:9e:29:7e:19:91:da:2e:57:af:af:d4:
b3:40:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:39 2025 by rpki-client