Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: TdGqlbgRmVcBSwV2alQIt1j5K+5rn1PS84g3/6Y9VKU=
Subject key identifier: D8:AC:A8:9F:E0:15:37:FF:BA:1B:DE:59:8D:A3:98:5A:47:F8:18:98
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 01987CAE6B987E0740B02B70E319629D1F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 0CFE
Signing time: Wed 06 Aug 2025 00:01:02 +0000
Manifest this update: Wed 06 Aug 2025 00:01:02 +0000
Manifest next update: Thu 07 Aug 2025 00:01:02 +0000
Files and hashes: 1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: jIc/+3NIzd/4Q0Z+yVqy3PXb/xUY+vJEvp61I/j1h34=)
2: aaN1Qn5xjEIJMdhSHXNcsvHXN84.roa (hash: SX27c8/0wfmzPnQt08w0ppx8WZVSTmUYcQpFOXOsbTk=)
3: o6rhv_3B72g00uq2IPDaZ2Jd1ks.roa (hash: Fo46CBCFKZszIDa+exG/2GR8P/sXWsoYlOaHRAWOGNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:6b:98:7e:07:40:b0:2b:70:e3:19:62:9d:1f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Aug 6 00:01:02 2025 GMT
Not After : Aug 7 00:01:02 2025 GMT
Subject: CN=d8aca89fe01537ffba1bde598da3985a47f81898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:ac:ed:21:44:6c:76:89:fd:9a:b4:e8:40:
60:44:d1:9f:39:80:92:49:16:24:22:19:eb:e7:87:
d8:82:71:0e:fb:1c:01:40:07:41:d8:be:9b:cf:a2:
f5:b1:ef:cc:9b:f1:4b:1f:a4:b7:20:4b:10:2e:15:
43:3b:74:94:01:dc:b1:79:07:70:84:32:d0:16:52:
a4:f6:6b:c2:f4:70:08:4d:e0:b6:4e:11:c0:96:72:
d3:f3:b5:5f:10:fa:09:d6:35:87:84:b6:38:a8:29:
c2:df:eb:fa:38:44:06:ce:3e:9b:6d:10:7b:e6:63:
ae:d3:b1:98:26:9d:d1:ad:cb:47:52:d0:0b:66:92:
dd:29:8a:b7:72:45:29:50:4b:99:e6:3b:31:a4:d8:
0f:15:b5:ed:13:75:1d:5b:ac:12:6a:7c:85:dc:83:
52:c8:ff:1a:93:66:d0:5a:3a:89:01:14:63:a2:93:
ab:16:c7:8b:0f:85:dd:3c:4b:0a:fb:1f:60:98:1b:
51:21:b0:f4:b1:62:d8:e2:0a:65:ad:53:a8:12:2f:
7c:63:b6:64:0b:05:92:49:b1:07:1a:ff:ca:18:b4:
26:80:bd:08:b7:1c:38:6a:31:93:fa:1d:f4:1b:2c:
6e:d5:99:66:11:82:9d:7a:88:5e:8a:f4:21:ac:b7:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:A8:9F:E0:15:37:FF:BA:1B:DE:59:8D:A3:98:5A:47:F8:18:98
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:26:55:e8:e6:7f:23:c1:40:53:27:2a:20:56:ca:32:8e:
52:ce:fd:b9:08:e0:26:92:ac:b1:59:97:cc:73:43:8b:ec:4d:
bf:80:2f:03:7e:e1:68:7c:bd:0b:5e:ac:0d:c3:74:76:c9:93:
68:ac:3e:fc:b1:4e:7f:21:bb:af:4f:ce:37:ba:ab:70:87:ab:
35:0c:77:12:e8:61:a4:b1:52:c0:cd:b4:61:ba:be:e0:5c:88:
49:4b:5c:3c:c1:79:aa:3b:ea:19:96:08:83:49:48:d9:17:92:
de:33:31:69:97:16:8e:48:d3:40:f8:ed:00:6d:8d:58:f8:bc:
b7:0d:4e:6b:bc:8f:93:51:22:a9:09:df:72:06:7b:85:47:94:
69:a2:c0:64:55:3b:f0:3b:28:25:e5:c2:75:62:74:83:fa:21:
d4:54:7d:38:c1:a0:c5:5d:81:84:94:65:e5:1f:04:a6:1b:ec:
50:ba:da:17:4f:c5:1a:39:10:2c:59:c6:65:e1:73:8a:37:9a:
13:e7:25:33:85:ef:e2:1f:83:2a:07:4d:2e:0c:b7:52:9c:4a:
d7:a4:0a:7e:a1:5b:5a:f8:b9:af:f1:b2:27:75:fa:c9:df:f9:
01:ca:70:81:0b:56:37:c1:9a:24:9f:c3:de:f2:18:6b:db:bc:
90:49:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:57 2025 by rpki-client