Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: n16NosHDJ8HpLGxsVBZmBxMxALNATZWqz3AGrlbSmxY=
Subject key identifier: 18:0F:10:0B:1A:E8:20:47:FA:7F:4A:DA:FB:79:1D:FE:F6:92:EE:A0
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019889FC497E196BDCD6A1E48C7EAE48C28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 1026
Signing time: Fri 08 Aug 2025 14:01:09 +0000
Manifest this update: Fri 08 Aug 2025 14:01:09 +0000
Manifest next update: Sat 09 Aug 2025 14:01:09 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: bgfABOWgi9uBmh2QRlmCDFCRPCgo1TZvbT3Rpf/Up+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:49:7e:19:6b:dc:d6:a1:e4:8c:7e:ae:48:c2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Aug 8 14:01:09 2025 GMT
Not After : Aug 9 14:01:09 2025 GMT
Subject: CN=180f100b1ae82047fa7f4adafb791dfef692eea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:e5:b9:a0:69:8e:64:7a:d0:7c:da:47:8e:
55:ed:86:14:ad:5a:1e:a3:bb:cb:0f:ac:f6:ae:d4:
87:b7:c9:31:46:b4:4c:e5:27:13:67:fb:fe:84:2e:
19:24:cc:47:24:91:40:75:40:b7:ec:88:7a:d7:b6:
81:e4:40:6d:af:e8:d4:37:fc:f6:63:a0:9f:ae:21:
01:4c:71:a1:b3:67:92:1d:3a:f7:b9:71:27:f6:a7:
f4:2e:87:9f:79:96:a0:78:1c:52:b0:13:b4:d5:33:
08:c0:42:b3:4b:92:41:22:0c:30:29:06:bc:88:93:
4a:ca:22:f2:71:ad:c7:40:06:c6:63:61:55:37:03:
5c:eb:78:90:40:91:36:6f:d7:9c:d5:4d:b7:74:86:
a4:63:90:8f:e4:e2:e1:d3:f4:9b:a4:7f:e7:60:4a:
e8:69:11:42:bd:54:a5:44:eb:aa:17:35:57:d9:13:
bf:52:7e:46:f3:60:a0:ca:3d:83:01:09:c4:ee:ec:
d9:13:7d:23:ff:20:c2:ff:36:e1:04:96:e9:b7:dd:
a6:d0:94:78:d8:cb:34:f3:db:96:ba:99:63:7a:8d:
8a:5b:f3:43:8d:2b:03:74:f0:aa:12:dd:88:78:12:
05:ab:d1:45:47:1a:1d:b0:3a:56:69:de:a8:2b:0b:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:10:0B:1A:E8:20:47:FA:7F:4A:DA:FB:79:1D:FE:F6:92:EE:A0
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fe:ff:0b:6a:0f:ad:51:ef:71:7a:4d:ec:0e:30:78:99:64:
3d:97:f9:d8:19:f5:b4:06:03:05:ed:fc:f3:24:d8:c4:4e:8d:
b4:c9:fa:ba:f8:a5:5a:63:2f:18:31:a7:37:c9:d2:ef:9e:9a:
9a:b0:af:11:40:b9:2f:72:5e:0b:e1:62:02:83:c0:ed:38:82:
22:18:84:c0:f4:7e:9e:f3:54:c4:4e:48:ab:70:b8:10:89:46:
b5:f7:dc:40:ae:58:f8:e7:bd:06:f8:1f:35:40:73:af:30:04:
65:3d:e6:5f:6d:01:6b:ad:31:3a:ef:d5:24:45:9e:8d:e1:f4:
ae:f5:c8:75:b9:63:0d:25:18:0b:e0:61:b6:61:49:f3:ef:a7:
6b:32:e9:ad:f8:ff:75:6f:dd:27:2b:2d:47:80:82:b2:8e:20:
2f:3a:80:21:4a:66:08:2f:4b:35:3a:ce:74:b4:86:36:56:db:
ac:79:af:3a:43:c9:e4:92:0b:24:c4:3c:fc:b0:3b:46:7f:f7:
1c:85:97:ee:0f:09:77:57:9b:2d:e4:e4:90:7c:5e:94:e8:32:
12:35:35:f6:f3:96:24:ce:b4:0b:b9:85:df:33:6a:5c:9e:cc:
05:40:20:d0:df:2a:23:e6:bb:e2:68:fb:7e:28:45:d1:e4:95:
f2:b0:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:49:04 2025 by rpki-client