Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: L4apBBqB2QfTseVUIuOsD1b6eoFleVgtNLvUKnr+91I=
Subject key identifier: 96:90:3A:13:B4:B3:1D:B1:B0:97:8E:4A:7C:51:C9:58:04:53:82:6E
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 0198808AF7A34346D01ABFFF3053069CB6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 06E5
Signing time: Wed 06 Aug 2025 18:00:47 +0000
Manifest this update: Wed 06 Aug 2025 18:00:47 +0000
Manifest next update: Thu 07 Aug 2025 18:00:47 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: XSXf59jkYzVupJxsUU0kpZ4Eq9gnq6KyqvmbC5Ssf9k=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:f7:a3:43:46:d0:1a:bf:ff:30:53:06:9c:b6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Aug 6 18:00:47 2025 GMT
Not After : Aug 7 18:00:47 2025 GMT
Subject: CN=96903a13b4b31db1b0978e4a7c51c9580453826e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:ae:ec:9b:c5:34:5e:b5:a5:c6:81:61:df:
0f:df:39:03:35:dc:ec:a7:14:00:40:1d:20:69:1d:
48:02:bc:7b:8a:57:77:fb:52:c2:10:bb:fe:4f:a1:
b0:db:26:e6:73:ef:fa:05:ff:65:75:da:a7:dc:61:
e8:c3:fd:18:5e:fe:14:34:d7:5b:ab:4b:a7:cf:51:
28:2e:1c:d7:a7:da:6d:04:06:a1:ce:1a:13:3f:7d:
59:a3:3a:b1:88:0e:12:96:fb:f8:a7:b0:11:1e:9e:
ff:2d:83:34:a0:64:cd:a5:a2:06:4a:13:ee:cc:fc:
3a:66:cb:b3:ed:fa:d0:dc:60:80:73:9c:ef:88:75:
09:29:89:6d:5b:3e:65:61:5e:a9:03:33:a0:01:0d:
70:6a:4d:a0:44:eb:ea:90:19:4d:7e:46:eb:81:39:
be:81:5f:f3:b1:4b:77:18:d0:c8:b4:8f:1d:c6:7d:
56:bc:cb:5a:2f:00:25:f7:68:de:23:84:66:d4:a4:
8a:1b:f9:bd:08:72:62:27:dd:47:63:49:00:18:6d:
c8:54:36:67:82:db:b4:07:f2:ff:e8:37:b3:41:fa:
e7:19:b3:e2:7f:4d:fc:47:32:5f:30:b3:4b:b3:cb:
3a:e1:34:d3:fb:f0:79:be:79:81:54:20:26:e9:93:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:3A:13:B4:B3:1D:B1:B0:97:8E:4A:7C:51:C9:58:04:53:82:6E
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c6:0d:ba:b0:3e:06:f2:69:54:07:90:b2:94:4e:6d:8d:5a:
2b:f2:b5:d4:33:18:ca:53:49:7b:b2:dc:35:cb:f4:e8:20:72:
5e:22:40:7a:a4:1e:bd:6c:ea:a8:e9:9a:61:ce:4d:d6:f3:8e:
6e:c5:75:42:62:e1:45:35:36:cf:b1:1e:19:9e:c4:f1:8b:32:
c5:4b:22:8f:14:97:14:2a:32:5c:fb:70:e1:f9:43:a9:89:14:
53:6c:a6:e1:20:ce:ab:8a:90:86:64:16:e4:06:c1:e1:86:0e:
9b:6e:76:e8:02:b6:ad:28:a2:d8:16:c4:35:28:32:8f:96:20:
1f:2b:91:db:d0:77:79:f9:5a:7f:3e:6d:16:c6:a7:38:de:c6:
6a:60:9a:2e:97:62:9e:9a:5b:e9:9d:dc:fb:f2:8b:09:f5:a2:
d1:44:98:d9:ba:82:88:cb:4a:c4:86:25:33:c0:cc:a7:c9:9c:
7f:b7:f1:a5:4c:a4:ab:ea:40:46:7d:2a:94:7e:df:c0:42:06:
63:db:eb:d1:41:6e:e7:8f:6f:34:54:4b:dc:d1:c5:73:e5:5a:
09:e7:ba:3e:be:00:59:98:fb:47:6a:b1:38:1b:fd:67:f3:a8:
31:c5:6d:af:8e:0c:3c:c9:c9:16:d2:a7:26:1b:4a:ce:da:4e:
fb:ef:5d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAivejQ0bQGr//MFMGnLbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3
NTk1M2EwHhcNMjUwODA2MTgwMDQ3WhcNMjUwODA3MTgwMDQ3WjAzMTEwLwYDVQQD
Eyg5NjkwM2ExM2I0YjMxZGIxYjA5NzhlNGE3YzUxYzk1ODA0NTM4MjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v+u7JvFNF61pcaBYd8P3zkDNdzs
pxQAQB0gaR1IArx7ild3+1LCELv+T6Gw2ybmc+/6Bf9lddqn3GHow/0YXv4UNNdb
q0unz1EoLhzXp9ptBAahzhoTP31ZozqxiA4Slvv4p7ARHp7/LYM0oGTNpaIGShPu
zPw6Zsuz7frQ3GCAc5zviHUJKYltWz5lYV6pAzOgAQ1wak2gROvqkBlNfkbrgTm+
gV/zsUt3GNDItI8dxn1WvMtaLwAl92jeI4Rm1KSKG/m9CHJiJ91HY0kAGG3IVDZn
gtu0B/L/6DezQfrnGbPif038RzJfMLNLs8s64TTT+/B5vnmBVCAm6ZN8AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaQOhO0sx2xsJeOSnxRyVgEU4JuMB8GA1UdIwQY
MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt
MmY3Y2Y4NDQ2YTMxLzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx
LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8YNurA+
BvJpVAeQspRObY1aK/K11DMYylNJe7LcNcv06CByXiJAeqQevWzqqOmaYc5N1vOO
bsV1QmLhRTU2z7EeGZ7E8YsyxUsijxSXFCoyXPtw4flDqYkUU2ym4SDOq4qQhmQW
5AbB4YYOm2526AK2rSii2BbENSgyj5YgHyuR29B3eflafz5tFsanON7GamCaLpdi
nppb6Z3c+/KLCfWi0USY2bqCiMtKxIYlM8DMp8mcf7fxpUykq+pARn0qlH7fwEIG
Y9vr0UFu549vNFRL3NHFc+VaCee6Pr4AWZj7R2qxOBv9Z/OoMcVtr44MPMnJFtKn
JhtKztpO++9dfg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:09:52 2025 by rpki-client