Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: DGe9RDwVURvoGTwIrujmko5JTwZYZyTbOjonFl/X8Pw=
Subject key identifier: 47:C1:A8:FE:A8:73:9F:C5:86:82:87:F4:B0:55:73:89:8F:3E:1F:B2
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 01987F78803D25D49379DF23B43740CF74D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0935
Signing time: Wed 06 Aug 2025 13:01:00 +0000
Manifest this update: Wed 06 Aug 2025 13:01:00 +0000
Manifest next update: Thu 07 Aug 2025 13:01:00 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: J+x7ZcDoYqptjKRLQCF6l7o1ey+LlTVSvAZRuajWGmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:80:3d:25:d4:93:79:df:23:b4:37:40:cf:74:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Aug 6 13:01:00 2025 GMT
Not After : Aug 7 13:01:00 2025 GMT
Subject: CN=47c1a8fea8739fc5868287f4b05573898f3e1fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:1f:fa:e0:e4:57:e0:47:7c:39:f9:24:92:
b7:88:a7:75:5d:63:cd:1c:93:a1:af:5e:97:a1:69:
02:e2:cc:3b:ee:31:f7:fe:fd:29:82:e1:37:8d:63:
c1:62:23:c8:30:b3:d4:09:7a:c5:0f:3c:79:ac:c2:
3f:8c:3e:35:b2:9b:25:9c:69:af:e4:cc:35:d7:e1:
08:b8:51:04:3b:de:1c:07:0c:c0:6c:15:52:82:c6:
39:91:6a:dd:65:32:ac:9e:7a:b9:84:54:5b:1d:0d:
7d:8b:94:8b:7c:b5:32:d0:88:9d:28:6c:6b:d4:b1:
81:5f:07:8b:46:15:80:a9:d6:47:9d:6c:02:b8:99:
f4:cf:95:b7:01:ee:8b:4a:09:f8:61:51:f8:23:cd:
4c:c5:02:16:12:b8:26:9c:22:30:e3:9d:22:8d:a4:
1e:3f:79:cb:b0:80:72:41:b9:79:92:8f:fb:04:a5:
c5:6b:03:d9:56:d3:18:26:e2:7c:c7:62:b3:cd:fc:
a6:e5:8c:30:01:a6:22:5e:e1:d2:42:f5:cd:4a:8f:
69:6c:b1:6f:76:04:b9:17:72:5d:25:bb:1a:1c:f4:
aa:2b:04:94:36:71:90:fd:7d:d9:2b:c8:e8:52:c2:
39:c2:cb:f2:75:6b:22:5b:d7:25:e3:25:8a:db:0b:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:A8:FE:A8:73:9F:C5:86:82:87:F4:B0:55:73:89:8F:3E:1F:B2
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:71:09:27:46:c5:2c:1a:95:36:c3:62:9c:dc:66:b8:70:99:
14:c0:ef:47:34:0d:11:5f:95:61:47:23:5b:ba:06:0d:1d:9e:
d0:f5:53:2e:29:06:75:1f:49:f8:48:ad:d8:a1:2d:80:b6:d8:
1d:94:5b:9b:c1:da:b4:7a:f0:67:c8:40:e8:d1:8a:cd:9a:89:
ff:a2:c9:da:d9:d8:f5:2d:ee:7e:fd:33:9a:fc:e5:bb:d6:a2:
91:05:36:76:7c:10:e4:c0:5c:cc:60:5b:4d:fc:d3:fe:62:cb:
21:ca:44:f0:62:89:f3:35:ef:53:43:4a:e9:25:66:1b:8c:aa:
ac:4f:ca:94:4f:79:38:5c:d1:5b:36:9b:90:40:3b:69:08:cc:
87:11:10:6a:71:b1:55:88:f8:18:6f:5b:e8:6a:e9:1f:db:a2:
e7:c8:7c:96:f2:00:fa:4b:13:e8:55:69:18:56:f1:84:1f:93:
b5:d7:cf:4a:9a:54:59:7a:2b:0a:16:d3:f3:ab:25:d0:d5:ce:
c2:02:44:06:12:99:ac:b7:6e:8b:84:fc:fb:51:3f:90:61:83:
11:c7:90:85:fe:c3:77:e0:e3:b4:0a:e7:bb:8a:d9:fa:09:30:
7f:0e:37:36:37:39:8f:44:b8:6d:fe:53:03:b2:85:f4:88:87:
d2:b3:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:52 2025 by rpki-client