Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: ukw7DlpNqqUOGv/S+dnrUt0LvdQnV8/1Y8APvT8pKVw=
Subject key identifier: 67:CA:DF:15:0F:27:CE:DD:80:C7:7B:B0:F0:7F:0E:35:64:28:2C:96
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 0198827A1079DD166B099D3C2B5FA6C10A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 14A5
Signing time: Thu 07 Aug 2025 03:01:34 +0000
Manifest this update: Thu 07 Aug 2025 03:01:34 +0000
Manifest next update: Fri 08 Aug 2025 03:01:34 +0000
Files and hashes: 1: XhZd4AXcprYaSWJWAkCvII9n7bo.roa (hash: +WoaFZAXvgLhbONkinxfr9JdPcFsQuGimoN13TlQ0XQ=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: hnhjL40y9DxykUIS2GGB9AsnHUK62oL02OcRS6twSPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:7a:10:79:dd:16:6b:09:9d:3c:2b:5f:a6:c1:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Aug 7 03:01:34 2025 GMT
Not After : Aug 8 03:01:34 2025 GMT
Subject: CN=67cadf150f27cedd80c77bb0f07f0e3564282c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:40:4c:e9:0b:ac:be:9f:7a:16:5f:c4:55:
11:ce:ff:93:db:e6:96:8b:b0:08:1f:af:09:24:79:
54:da:a0:22:0c:83:e9:fc:93:3e:8c:35:6c:6b:d2:
71:9c:69:75:73:31:d6:a0:d7:d2:a9:d5:28:fd:ce:
d9:1a:6a:e0:a9:5d:75:84:40:89:fb:75:8f:03:7e:
f5:33:6c:93:cf:b5:05:0d:3e:3f:3d:0e:8a:fb:0a:
86:00:85:1e:da:b8:8b:b2:5a:43:d8:be:1a:3b:ce:
c5:f0:90:2f:ac:8d:73:43:94:0e:d0:91:50:36:e8:
6d:af:23:e9:b2:94:d9:41:2a:bd:3b:5f:1d:ee:3c:
a8:c4:ec:83:71:08:cf:be:a5:db:ad:04:41:f1:0c:
fb:17:de:18:44:77:b4:13:dd:5c:20:95:81:f0:0c:
e0:6c:e2:97:b9:2e:00:d1:56:b6:7b:97:c2:81:32:
8f:36:2a:81:0c:31:ee:d8:3c:c0:d4:7a:94:a3:f3:
bf:d4:d1:e9:eb:00:d1:70:3a:8a:76:8b:5c:05:03:
e3:f2:82:20:8a:12:33:32:3d:92:b5:44:cf:cf:50:
7e:93:85:6c:95:d0:98:b2:41:b6:c1:be:07:88:95:
2e:4c:fc:a9:2a:d8:f2:90:c2:47:3b:ba:33:b5:d1:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:DF:15:0F:27:CE:DD:80:C7:7B:B0:F0:7F:0E:35:64:28:2C:96
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:89:77:34:c1:9c:84:6e:0c:bb:55:ab:d6:41:84:6d:2b:
4b:00:3f:ac:ca:cf:1e:4b:80:2e:b6:db:03:61:82:93:86:4d:
7b:2d:b7:0b:69:95:39:52:0e:00:60:5c:49:75:f0:31:b4:ee:
22:94:64:75:d1:83:2f:b8:61:d6:02:aa:b6:b5:b5:0c:cf:f7:
7c:ac:04:40:7e:94:9b:94:2a:ff:f1:34:d7:05:09:46:e1:bb:
94:ef:5e:a9:50:fe:65:21:91:78:ab:47:4b:fe:18:ae:7e:2e:
30:60:5c:95:1b:db:4e:c2:56:0d:64:c5:df:ca:82:5a:20:19:
21:4d:91:5d:d4:12:8b:ce:e4:fc:99:ae:4a:44:a2:1d:a8:70:
2f:4d:b2:18:07:fe:c4:c9:be:d5:cb:88:4f:80:9b:ef:e4:50:
37:45:4f:61:5f:fb:4c:70:9b:2d:78:ed:81:54:f6:d9:63:0a:
6a:5a:27:dc:d6:fc:dd:17:e3:46:82:27:7c:d7:cf:97:fb:c7:
d2:32:9f:c4:9d:96:d7:9a:73:56:20:1c:fc:06:5e:bb:37:ed:
7c:d1:cb:ce:80:cf:75:9a:7a:c2:c8:11:01:38:01:b3:5f:4b:
6f:7c:a3:43:ac:ab:67:e0:9f:71:3c:25:f2:9a:f5:59:69:b5:
a5:86:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:16:15 2025 by rpki-client