Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: U+++n0wuVGNhc7a9hLwE0hkspAqq2NuKPp1/oNRKRI4=
Subject key identifier: 84:C0:B9:B9:10:6A:E3:93:01:8F:0E:D1:8C:B8:84:29:25:65:27:6C
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 01987B9BAEDEF077A1A223AF205C9F6210FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0A5D
Signing time: Tue 05 Aug 2025 19:00:56 +0000
Manifest this update: Tue 05 Aug 2025 19:00:56 +0000
Manifest next update: Wed 06 Aug 2025 19:00:56 +0000
Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: xHcNid1Qu2HCBGgdU2aM3ZezTkbZodo+F3w7ORSl/5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:ae:de:f0:77:a1:a2:23:af:20:5c:9f:62:10:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Aug 5 19:00:56 2025 GMT
Not After : Aug 6 19:00:56 2025 GMT
Subject: CN=84c0b9b9106ae393018f0ed18cb884292565276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:8f:b7:14:e0:70:29:e8:36:0f:dd:85:df:
db:b5:9a:3f:07:36:5d:9a:9b:b9:9f:43:26:35:55:
f3:55:a0:b0:d8:5b:e7:e8:b4:81:31:fb:f0:b5:5d:
8e:e2:ba:b7:57:f0:96:04:53:a6:99:19:fa:80:68:
5c:99:e8:ba:1d:2d:bc:6d:b6:da:ec:fa:0c:e0:11:
e2:1d:b2:99:b6:91:63:84:ff:75:41:76:0a:41:83:
c6:d6:4b:3e:2b:2b:d0:5f:e2:07:8c:b5:ed:48:13:
48:04:3c:35:28:8b:69:1d:3c:fe:7b:a2:49:13:c7:
b6:64:42:54:33:f0:08:3c:6b:ba:6b:fd:87:d8:c2:
f5:f3:ac:a8:41:27:2a:cd:85:d4:84:32:99:4a:f6:
ea:42:09:ea:fd:a5:51:cf:28:88:17:7e:7d:c6:b6:
fd:b9:d9:d4:33:0d:81:11:13:0d:7e:37:8c:68:af:
c6:25:1a:10:5a:af:41:83:a4:94:a6:07:a5:84:90:
5e:36:11:35:be:a2:13:73:b2:ba:20:e3:d4:86:75:
ee:d9:4c:0d:6a:41:6f:40:ce:93:bb:61:70:26:23:
4a:db:87:3e:35:66:2a:a1:f9:30:20:f8:55:9f:03:
86:9f:ef:46:bf:03:b7:18:5f:c5:1d:0a:8c:73:22:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:B9:B9:10:6A:E3:93:01:8F:0E:D1:8C:B8:84:29:25:65:27:6C
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:01:69:dc:5d:3d:1d:12:44:8a:25:e9:57:49:f3:66:bd:2e:
40:69:a9:33:5f:85:e9:0c:f3:a8:6d:ff:17:e5:13:f7:1a:34:
bd:d8:43:f1:ba:b6:45:5f:23:e3:cd:7f:b8:d9:30:f5:46:17:
3b:29:b7:7f:c9:f5:94:c1:57:4c:ff:bc:52:b0:24:a6:a2:b8:
c1:84:89:0b:99:01:10:0f:64:b9:32:4b:45:d7:07:cc:38:16:
97:0a:7d:5f:cf:41:77:2c:40:77:cd:d8:70:af:df:4d:00:33:
06:8b:e3:33:49:00:07:8d:75:44:ab:7f:b9:c7:98:f5:c9:e0:
95:f8:ed:62:b1:d0:4b:a7:77:76:c3:44:84:f3:ec:a4:60:a0:
27:38:08:f3:3d:ea:44:21:67:32:26:7c:0b:d6:cb:4c:74:39:
e4:fa:ce:a3:be:a2:79:58:64:4c:c9:52:14:09:b3:cb:75:41:
b7:5f:3f:73:07:55:d0:32:c0:c3:dd:9d:65:2f:db:f2:e6:67:
3b:b5:d2:30:7e:2d:5a:83:0e:b1:cd:1f:72:61:04:9d:81:7c:
af:b8:1b:3d:e3:87:4f:bf:9c:3c:11:77:8a:ab:fe:b8:33:1d:
33:77:cb:63:4b:bf:27:14:3c:77:cc:8f:96:01:5b:3a:c3:7e:
70:12:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:11 2025 by rpki-client