Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: 2UnjckYsAt/dyqerzqHtZKsDqE+B1zs6Ks1aqstAqsY=
Subject key identifier: 0D:DC:14:42:C2:DA:4C:C9:BE:F6:AB:0D:E1:AA:39:2D:60:CB:B3:09
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019873E2D7C47CF9CCCE06160C8DFDBFA6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0F5F
Signing time: Mon 04 Aug 2025 07:01:42 +0000
Manifest this update: Mon 04 Aug 2025 07:01:42 +0000
Manifest next update: Tue 05 Aug 2025 07:01:42 +0000
Files and hashes: 1: Zj9lVIh8knr06HL6M68exsdyR78.roa (hash: DpNM17SY3ZBbdFnRbmny2u5MR4zgFSyDbmfcX50gqPI=)
2: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: ns8GVfk9kfw0anav9PIKn0sH7dIViDr0Q9dHLf9oswE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d7:c4:7c:f9:cc:ce:06:16:0c:8d:fd:bf:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Aug 4 07:01:42 2025 GMT
Not After : Aug 5 07:01:42 2025 GMT
Subject: CN=0ddc1442c2da4cc9bef6ab0de1aa392d60cbb309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:60:ba:8a:65:bf:54:52:a1:be:c7:d2:ae:
77:e3:ad:31:47:6f:d3:40:cd:02:a4:8d:b5:13:b5:
06:e1:4e:5f:08:fe:ca:39:91:db:e7:12:56:28:be:
81:5b:3e:50:b7:48:3a:eb:e4:60:09:b7:b2:dd:50:
33:2f:9d:c8:64:68:00:e5:bf:d6:51:3d:86:a6:91:
b8:41:96:ef:5c:4f:45:59:98:75:c8:16:35:30:9b:
8d:5f:42:cb:37:32:81:8e:dc:08:da:ba:13:e1:cc:
67:70:7b:f9:08:7e:86:a8:c4:6d:eb:41:33:07:9f:
6f:3b:c7:be:c4:09:77:32:3d:f1:d8:b4:4b:61:8e:
98:20:0d:77:fa:2f:88:c8:29:b4:1e:96:51:29:91:
e7:19:e0:f4:25:66:43:97:59:27:d4:50:78:d4:99:
60:49:8c:e9:7e:39:aa:b9:6a:b3:aa:b1:96:ef:0b:
c7:af:71:80:bb:a5:17:bb:48:32:3c:93:fb:a5:26:
ba:23:23:a7:a1:fd:33:93:b3:09:1a:98:94:82:cf:
e6:11:2c:f6:46:50:4f:a8:07:d8:5f:3f:15:43:b8:
6a:86:8d:f8:7e:15:11:d6:40:02:a7:61:40:b1:c1:
f7:c3:23:17:f9:f3:bd:c3:df:19:f7:c6:e0:32:f7:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DC:14:42:C2:DA:4C:C9:BE:F6:AB:0D:E1:AA:39:2D:60:CB:B3:09
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:07:99:84:c9:4f:0f:ca:32:a8:26:59:74:d7:8f:89:5a:14:
1d:a9:33:29:07:c2:fd:86:72:fc:99:3a:b6:05:ed:8d:5d:1e:
db:d3:8c:6d:0c:a6:0a:10:5e:ff:d8:a9:68:6b:8c:05:9e:fb:
54:92:3d:1a:d1:53:5d:0d:bb:1c:3e:9f:cb:73:e2:e4:7e:04:
f5:06:6d:99:23:02:52:eb:58:fa:5b:70:9a:ec:17:fb:f1:d0:
eb:90:92:c1:2c:8f:c9:52:cd:a4:57:bb:52:bb:d8:1f:35:75:
38:c6:79:91:45:62:57:c2:b1:96:fd:26:eb:35:0d:84:e2:7d:
20:a6:99:9c:71:3a:3c:a4:a8:26:c2:f1:9f:be:9e:29:25:ac:
df:06:86:74:5a:6e:54:af:9c:12:56:d5:48:23:5e:cf:4c:61:
7b:0b:e7:9e:a0:3c:06:95:28:36:3f:0b:d7:d1:82:90:01:ff:
bb:9c:93:ff:f6:4f:a4:d8:98:c0:01:59:13:b6:d7:d9:75:5d:
e4:f4:bc:e7:9f:b9:d6:a1:df:be:53:f4:8c:b8:e9:41:70:71:
5e:c1:4d:59:fb:01:57:f3:91:45:f4:73:02:e8:79:56:05:b6:
6f:8c:83:05:ac:50:32:c6:d7:f6:16:10:8f:54:ee:75:0a:48:
d1:67:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:47 2025 by rpki-client