Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
File: hWyvHy8CkUARBe9osllX3FVVENI.mft (raw, json)
Hash identifier: i8EzqghcvBWur6Vvoz+yf39tDhYY0P6HABH0NUmDrs8=
Subject key identifier: A5:60:EE:ED:EE:C0:2A:51:33:3B:35:D9:8D:F3:A2:01:72:9A:E8:85
Authority key identifier: 85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2
Certificate issuer: /CN=856caf1f2f0291401105ef68b25957dc555510d2
Certificate serial: 0198816762F0A44E7B530E70B40290F88C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
Manifest number: 1189
Signing time: Wed 06 Aug 2025 22:01:33 +0000
Manifest this update: Wed 06 Aug 2025 22:01:33 +0000
Manifest next update: Thu 07 Aug 2025 22:01:33 +0000
Files and hashes: 1: GpIZ4jE-9ieq_ECexQxa_m3ORPw.roa (hash: IjDJZYXavRzEltys5gXrAE3D7K9MgVcCUjh6DyqqaSM=)
2: hWyvHy8CkUARBe9osllX3FVVENI.crl (hash: 8OgVKl2ZOQJb9AsrHMXuYrPF95AAjzdMQx9TkDfClGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:62:f0:a4:4e:7b:53:0e:70:b4:02:90:f8:8c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856caf1f2f0291401105ef68b25957dc555510d2
Validity
Not Before: Aug 6 22:01:33 2025 GMT
Not After : Aug 7 22:01:33 2025 GMT
Subject: CN=a560eeedeec02a51333b35d98df3a201729ae885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:03:96:39:b5:d0:d5:81:02:7c:d4:76:1a:
08:3a:35:14:2f:d8:4b:b7:eb:78:90:a0:78:e3:bb:
93:85:02:aa:d8:01:b4:8b:cc:02:2e:9f:3f:30:32:
07:a2:52:37:1d:72:db:82:4b:48:48:ed:04:a8:2f:
b2:b4:db:8a:86:a5:cb:f3:5b:04:90:7a:ef:44:03:
52:3e:10:bc:2e:1e:5c:b0:35:2b:67:c1:e7:90:25:
3f:0c:4c:84:7d:2a:0b:08:9c:dd:2e:3e:e7:e8:a7:
32:25:2c:cf:a4:3a:b1:24:a8:be:05:12:ed:65:da:
f2:47:3f:38:d2:c0:38:21:60:f0:0c:e6:70:fd:a9:
2e:91:39:d1:53:03:4a:b0:3c:4c:14:81:fd:c1:fa:
8d:57:5a:20:71:3b:6a:1b:c0:c7:34:81:e1:e5:f3:
38:ab:23:d4:97:27:5c:22:1a:ca:ca:e2:78:d4:c9:
4f:50:ef:e0:02:50:52:9a:b7:d7:bd:be:ae:a9:86:
7a:de:f9:53:22:93:63:d5:69:78:bc:29:fe:45:01:
52:a0:79:4e:c5:d5:06:47:b6:08:8f:e4:79:58:86:
31:00:5d:f3:f6:44:fd:9f:5a:21:45:8d:b0:1c:29:
18:c9:bf:d9:dc:34:bb:5d:32:4c:8b:4b:bf:04:5d:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:60:EE:ED:EE:C0:2A:51:33:3B:35:D9:8D:F3:A2:01:72:9A:E8:85
X509v3 Authority Key Identifier:
keyid:85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:f7:fb:b9:f5:eb:9e:3e:5b:ce:99:58:22:06:e9:67:79:
bc:c0:ca:2f:06:c0:51:d9:c5:bd:2a:9b:0c:34:b8:93:e1:8c:
fc:b9:06:91:7b:8a:06:48:50:96:20:32:86:c4:3e:53:c4:44:
21:60:87:b6:f7:03:19:c9:18:fe:43:39:91:85:ed:c0:5b:3b:
57:ea:b8:fc:1f:97:8f:d1:90:5d:50:a5:3d:fb:d0:d7:d5:83:
72:95:e6:6b:7a:c3:bf:7e:12:e1:43:f9:db:6c:14:cc:4c:64:
a5:e4:8e:4e:de:d3:b1:3a:bc:2d:f2:02:cb:1c:9f:32:8f:c8:
cf:44:ad:6f:35:9a:12:1b:d1:fb:26:5f:92:ed:a2:68:56:1e:
57:37:42:83:50:b8:c8:41:d7:a3:20:05:95:c7:4b:c5:ff:92:
f4:dd:bc:53:f4:5c:52:37:57:5a:40:17:03:81:82:2f:c5:ce:
6a:78:d5:3b:ff:cd:75:5f:ef:78:4a:67:44:13:a0:a9:1f:34:
f2:c6:42:00:5a:95:42:d9:67:30:8c:9f:c3:a1:8c:59:1f:fd:
10:54:90:19:dd:8c:e1:c7:38:2b:3c:73:d8:6f:4a:52:0f:fa:
33:bd:2c:6a:70:69:0f:db:41:92:db:d7:d7:41:18:ce:c0:16:
4b:26:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:24 2025 by rpki-client