Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: 7aG1ZqGTp2rkTYPOhY4wHgRxVHDCcI/iuyudRFduSN0=
Subject key identifier: B4:FF:A5:E3:60:44:5B:38:10:C4:7C:41:00:19:17:89:CB:C0:C8:A1
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 01988C8F500A4DA4CD8C5C6FE0E96EA8541D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0837
Signing time: Sat 09 Aug 2025 02:00:59 +0000
Manifest this update: Sat 09 Aug 2025 02:00:59 +0000
Manifest next update: Sun 10 Aug 2025 02:00:59 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: Ns17c6blUwH08Wcvr7V7RSdKV25eQACilvjcYWndyVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:50:0a:4d:a4:cd:8c:5c:6f:e0:e9:6e:a8:54:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Aug 9 02:00:59 2025 GMT
Not After : Aug 10 02:00:59 2025 GMT
Subject: CN=b4ffa5e360445b3810c47c4100191789cbc0c8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:21:a0:29:4a:02:65:90:3c:ce:ef:ab:19:
98:dc:0b:fa:5e:bc:02:b8:60:91:15:81:54:16:ed:
71:e7:99:d0:1d:1f:c2:58:31:e7:a2:a0:80:e3:a7:
62:62:f5:86:57:dc:91:8a:78:6d:08:c4:f1:ec:5e:
77:a9:18:92:92:66:46:d9:eb:d7:13:78:57:d9:42:
dc:c2:a1:8b:98:11:39:3f:57:ab:7f:d1:71:a1:d6:
fc:d0:76:ee:fd:c5:4d:d8:40:31:0a:3f:6f:61:69:
5c:d9:73:a9:c6:46:c5:97:a3:a8:5f:32:f6:12:c7:
dd:bf:6f:07:8f:b6:79:a3:67:67:2b:18:4d:20:3e:
44:55:4c:9f:90:ef:1a:05:06:20:49:b5:53:e6:bf:
a5:3f:f4:9e:c0:e5:96:72:1e:dc:aa:7c:65:19:fc:
d3:9b:b2:ef:17:cd:f5:ed:5d:96:3e:f4:0c:3b:9e:
c9:07:86:8e:2b:e8:4d:b0:76:a2:ca:ce:a4:cd:bc:
54:3b:f0:47:54:b7:72:04:12:85:ba:11:5f:7e:9d:
da:4e:ba:99:a9:6d:d7:88:d9:48:18:48:4c:e0:11:
af:01:e5:b8:ae:80:d7:9a:c4:ef:a7:7f:32:92:c2:
24:ed:a5:7b:b1:c1:45:c0:4f:39:12:f1:02:49:79:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FF:A5:E3:60:44:5B:38:10:C4:7C:41:00:19:17:89:CB:C0:C8:A1
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:28:2d:b2:7e:9b:6a:e6:98:05:ce:2e:bb:b4:02:a5:95:c9:
3b:44:aa:18:08:52:9b:c7:e5:42:24:c1:7b:af:31:45:d6:a5:
ff:89:c1:32:4b:76:1f:ec:a4:b9:99:48:a7:70:4c:0b:62:f5:
26:e7:54:70:91:e7:7c:a0:8d:67:f4:0b:79:aa:f2:3a:ec:cc:
d1:68:2c:7e:22:56:93:97:c4:63:6c:4e:48:f4:37:69:bc:b2:
be:96:c0:4d:17:21:bb:11:87:03:2f:02:e0:35:4a:f8:e0:3a:
6d:7a:8f:e3:e6:ec:6f:ab:b3:f5:77:b4:a3:85:29:11:80:ee:
6e:87:d2:86:c7:8c:a9:bc:c7:13:28:3d:b9:f1:ba:13:25:f3:
d4:a6:97:d1:25:7d:3d:51:9c:1b:11:74:3d:d1:86:80:df:f5:
6f:24:4b:8f:50:f5:8d:96:1d:21:5e:ce:db:6f:8d:88:fa:08:
9d:a7:e9:7c:23:1a:6f:89:09:75:91:c6:9d:5f:d9:c6:3f:e7:
60:ca:10:47:ca:8f:d5:bc:20:87:10:36:46:56:34:59:95:af:
f7:58:52:9f:fb:c8:aa:97:ec:88:76:20:e6:50:f8:25:0c:08:
05:00:56:d4:b0:22:23:ea:2b:4d:0c:23:1b:22:92:16:ab:38:
cb:93:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:40 2025 by rpki-client