Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: 4B9o/uqDrifC8WrxI0RrGTkys4jlX4kGObGAW3xPPSI=
Subject key identifier: 61:E6:B8:9F:98:52:86:28:E1:2B:97:A5:49:FE:BA:1A:EB:91:A7:1C
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 0198917E9609FE6624AC9119065286F8D4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 01:00:48 +0000
Manifest this update: Sun 10 Aug 2025 01:00:48 +0000
Manifest next update: Mon 11 Aug 2025 01:00:48 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: JDi6j5K/4QrYULtUubFOv6jQ2KvVPG2/3nWek1jejdg=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:96:09:fe:66:24:ac:91:19:06:52:86:f8:d4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Aug 10 01:00:48 2025 GMT
Not After : Aug 11 01:00:48 2025 GMT
Subject: CN=61e6b89f98528628e12b97a549feba1aeb91a71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:e2:73:bb:dc:ae:7b:83:68:5d:66:2a:cc:
df:6d:15:11:f9:68:29:66:68:a0:2f:8a:8d:aa:e1:
81:76:65:cb:bb:c0:44:c5:22:d9:23:c7:41:9c:22:
04:ed:c0:35:d5:79:d8:ab:b8:64:e6:e7:66:6b:a7:
c1:67:d3:c8:19:3e:ce:ca:8d:f8:e4:d9:fc:15:ce:
cc:d7:4a:f7:e1:fc:55:dd:be:1d:f6:0d:f1:31:cd:
98:c4:93:21:66:53:3f:b5:96:b5:c9:9f:9a:eb:50:
78:12:bc:8c:df:78:25:8c:1f:f0:64:54:de:03:cb:
75:09:1a:d9:6d:62:67:17:55:89:fc:ec:ef:48:60:
b9:09:09:df:21:8a:79:cb:41:8a:74:ec:6e:0a:51:
fa:b2:3c:77:7d:75:76:25:87:e2:df:c5:0d:33:6e:
ad:a5:47:b5:96:81:bb:bc:db:ff:77:7a:09:4e:e0:
45:1b:2d:ac:7d:7b:01:39:83:59:3c:8d:67:80:85:
dd:fd:2f:d3:16:cd:b2:c9:8f:05:18:a5:00:a9:8d:
51:72:c6:25:41:aa:6f:49:1e:aa:d1:30:d0:a0:9f:
d6:cc:9e:f3:22:f1:0e:85:4f:6a:2a:52:ba:ff:19:
78:15:54:8d:35:ad:82:8d:22:00:9a:20:fe:b6:cf:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:B8:9F:98:52:86:28:E1:2B:97:A5:49:FE:BA:1A:EB:91:A7:1C
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:18:e5:0e:08:dc:b8:65:de:a2:0b:c5:69:0e:74:34:b0:47:
bf:94:86:61:59:24:f2:28:15:75:69:1d:88:7e:f9:45:db:d9:
be:ce:5c:eb:26:cb:85:ba:e1:0c:3f:09:2d:de:aa:32:1f:20:
cf:8b:ae:1a:a7:6e:cf:ce:ba:c5:b1:d4:be:5c:a6:a4:95:b8:
a2:a6:9a:c9:32:c5:1d:f9:6a:98:fb:2b:d8:9a:ae:19:de:e7:
dc:54:9a:e1:80:7b:e1:48:9d:7e:36:bd:f2:fc:b8:f1:4d:d4:
18:da:de:d4:7c:bb:53:af:26:7f:c5:41:30:50:4a:e9:fd:ba:
93:c9:dc:e1:5a:e2:e2:7d:42:dd:cc:73:e9:42:e2:6f:fb:28:
5f:70:a0:e1:eb:a0:ae:d4:c4:9e:03:2b:89:93:7e:f2:91:54:
88:8a:09:ca:2e:e4:38:11:7f:d6:68:b1:ee:4c:e3:a3:e1:fb:
8c:fd:c5:f0:7b:a7:d9:d0:9a:45:ed:98:60:80:78:6a:08:12:
72:0d:24:90:0c:3b:68:2b:c5:e2:c7:1d:ce:c1:e2:9e:d6:42:
f3:09:97:1c:d2:00:82:ce:aa:cd:db:de:22:bb:9d:47:3d:98:
39:32:38:c8:7f:b2:3e:b4:98:9b:d6:94:72:08:d8:1d:45:3d:
0e:8b:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:37 2025 by rpki-client