Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier: Cg19tk5qZX5P7hI6OW8fstOII7hw67+2Ix/LuQfUD/c=
Subject key identifier: 9B:AD:A8:EF:55:80:51:E7:CE:B2:2F:61:B0:FC:58:F5:69:34:7A:5C
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 01987675CF6FE0EECCBB005CBAC6700798B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 19:01:28 +0000
Manifest this update: Mon 04 Aug 2025 19:01:28 +0000
Manifest next update: Tue 05 Aug 2025 19:01:28 +0000
Files and hashes: 1: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: g/qAAllJ6b9k9v+KL0jaI19XjmRdU4QGrimFeD5zmRo=)
2: qsewLApSJANcPGT3dklt2zSF2HU.roa (hash: bPAVtg7OfBYMMJkAVdTPdE+2AmcR0ogISjqN5CtNEqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:75:cf:6f:e0:ee:cc:bb:00:5c:ba:c6:70:07:98:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: Aug 4 19:01:28 2025 GMT
Not After : Aug 5 19:01:28 2025 GMT
Subject: CN=9bada8ef558051e7ceb22f61b0fc58f569347a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:68:10:6a:58:1c:5f:0e:22:ae:d6:58:5a:
cf:1f:bd:db:87:99:bb:4a:9d:4f:5d:93:0f:98:34:
53:03:6e:a8:e2:ca:16:3d:ec:e6:e6:4d:81:d3:46:
82:55:72:96:d4:10:fd:ce:10:fe:b5:71:bc:b4:e7:
80:ea:73:97:02:7b:c5:70:59:37:6f:5b:bb:de:97:
66:65:77:be:1f:a7:a6:3b:94:6e:56:2f:75:3a:0c:
1f:97:5b:7c:1a:b5:96:c6:9c:96:e3:f2:e9:e1:b5:
e3:2e:85:7e:ed:bd:24:1d:75:9e:b6:eb:fa:be:96:
9f:dd:81:48:1d:c0:a2:7f:4d:9b:dd:65:7f:a8:47:
d6:c7:e2:8f:f1:13:86:28:95:e0:e4:06:b3:0d:42:
67:3b:f7:81:06:a0:f0:af:d8:d4:4a:2e:62:dc:85:
2f:6b:ca:bb:fa:fa:5e:73:89:d5:24:52:5d:33:32:
ce:4d:64:c9:54:91:7f:45:3e:13:ee:4a:49:65:4f:
f2:2e:92:e2:1a:5c:41:16:9d:e7:65:35:c4:d7:2b:
34:02:b2:d5:2d:68:fc:c8:c4:e8:13:2c:90:b8:3c:
a8:91:23:35:1e:52:0f:cb:4e:cd:cc:68:ec:63:ec:
cb:21:4d:a9:7b:70:f3:e0:fd:21:60:30:5b:5e:2f:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AD:A8:EF:55:80:51:E7:CE:B2:2F:61:B0:FC:58:F5:69:34:7A:5C
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:91:cd:c4:06:12:14:e0:09:26:4f:57:ff:14:ac:22:f3:3a:
04:03:f8:9b:20:c1:34:3c:d9:e8:30:96:d3:3d:c1:1b:81:46:
d6:d5:85:a6:5b:e5:52:2b:ba:80:30:d8:b0:72:ac:fc:3a:ea:
a5:49:94:61:d2:c7:e5:cb:e8:c8:9d:69:1e:f6:10:a8:76:61:
fd:99:bf:cb:2f:6c:50:e3:42:b3:48:36:ad:8d:4e:b6:a5:e2:
44:2e:dc:b9:54:9a:95:33:09:7e:4d:85:cd:ad:4e:e0:32:30:
d9:f0:e2:bf:e6:aa:57:e7:f1:8f:9c:c7:0d:01:c1:6f:50:e8:
29:ef:fa:ae:6f:03:1e:cd:9c:2b:e2:d2:4e:3c:80:e8:aa:7a:
1e:4b:53:3f:92:10:6a:33:9c:25:97:59:f0:ef:cd:9a:92:27:
3a:87:e4:50:f5:4a:40:36:14:f1:7a:5e:13:e3:eb:61:71:cc:
b5:8a:6c:e3:d1:e3:d1:39:5f:56:cc:fb:21:a3:9b:96:31:39:
ca:60:d6:f5:24:c4:f4:69:d6:2f:a2:6e:d8:48:a7:cd:00:fc:
a9:5b:cb:33:71:62:10:ba:20:f6:6c:94:9b:e2:0f:c2:fc:9d:
eb:e5:71:85:1a:f7:29:4e:a2:27:e0:82:3f:ae:ab:bb:14:de:
d8:da:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:48:06 2025 by rpki-client