Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: a/RZeL39VTMeKQVS5hvVCp5NwOf1kFZCH5as8unv8u8=
Subject key identifier: 06:42:7C:24:F5:A2:B5:31:C0:8F:E1:2D:7A:66:8E:52:3A:51:64:72
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 01987DF88D1EF94F0FD48FD557C066185241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 034B
Signing time: Wed 06 Aug 2025 06:01:37 +0000
Manifest this update: Wed 06 Aug 2025 06:01:37 +0000
Manifest next update: Thu 07 Aug 2025 06:01:37 +0000
Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=)
2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: Evs6lbBMVSFdi/Ofa8J4f8XNb9Jo0L3EqlFAEFWCya0=)
3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:8d:1e:f9:4f:0f:d4:8f:d5:57:c0:66:18:52:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Aug 6 06:01:37 2025 GMT
Not After : Aug 7 06:01:37 2025 GMT
Subject: CN=06427c24f5a2b531c08fe12d7a668e523a516472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:59:5f:fd:07:c0:66:a4:0f:f2:a9:a4:b2:
bc:72:20:3c:48:6a:21:65:f2:b9:86:c8:60:62:93:
f5:26:f4:07:25:ad:14:28:4b:6e:ab:c7:10:b5:f1:
e1:8c:c0:56:94:38:89:de:5f:e5:14:2e:c9:bd:5b:
be:be:94:08:90:da:7e:86:97:e7:22:25:97:d8:eb:
47:04:11:85:7d:c1:10:cb:39:f4:20:ff:07:da:21:
65:f2:98:f0:ef:0c:86:34:52:ab:e4:38:f8:fb:53:
26:92:3b:81:43:b9:7b:8c:71:6a:63:3c:9c:c1:6a:
69:57:af:62:9b:c4:c4:47:fc:e7:e4:da:3d:00:37:
c1:ae:b9:4c:b9:de:b9:73:f8:dc:d3:fb:a2:d3:56:
c4:1c:06:65:92:d4:e1:d3:e3:b6:95:99:9a:f7:9d:
0c:74:68:0d:22:74:a5:fb:5c:6a:69:3e:cf:3a:eb:
98:98:d9:76:d1:08:9a:4f:d1:43:6b:0b:6b:b9:21:
8d:c0:78:66:f2:3f:20:a6:6f:42:24:66:fb:e5:8c:
51:67:b4:9c:67:fc:d1:ac:0f:f6:d9:3e:27:ed:c6:
f8:0a:42:ed:66:7b:5c:34:30:fa:87:78:e2:ef:9e:
45:1e:d6:1d:8b:f3:6a:33:f6:96:5d:3c:7d:39:8f:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:7C:24:F5:A2:B5:31:C0:8F:E1:2D:7A:66:8E:52:3A:51:64:72
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:df:8d:31:4a:44:53:a0:1a:47:6e:e1:c7:a6:e3:ab:98:d8:
29:37:fe:22:e2:56:f4:62:e2:0e:a6:e4:df:64:0d:5f:14:14:
15:38:27:05:97:96:ac:50:98:0c:b8:0a:bb:99:7d:4a:ce:f2:
1f:52:5d:9a:0a:5b:65:df:16:54:1e:7b:b8:bd:54:84:bd:32:
cc:9d:33:ba:e4:c0:45:0c:3e:c8:0d:75:cf:c2:51:69:f0:b8:
70:52:79:5b:89:20:00:89:e7:29:00:18:ce:64:84:ba:e1:7f:
e1:dd:88:64:a7:2b:65:ba:bb:3a:4b:4c:a9:e6:4d:a1:26:58:
fa:64:3f:20:6c:12:4f:b6:4d:74:0a:87:dc:30:e2:7d:5c:17:
7c:57:85:fb:d3:e1:05:29:96:06:7d:fb:32:ce:ed:22:8d:29:
8c:29:05:00:3e:11:5b:c0:55:d0:0d:40:ff:6f:e9:53:05:05:
fa:11:ae:8a:c2:66:40:4b:9b:86:4c:0f:12:b0:d5:cc:94:77:
74:c7:5b:59:ee:21:eb:11:84:f8:3a:8c:8a:53:95:dc:4c:f7:
a4:93:26:1f:81:10:74:47:5b:bd:e4:c3:30:ac:13:a0:46:68:
c8:09:1d:c3:25:6d:80:cd:2a:88:05:c7:94:89:98:a7:4e:97:
e4:7c:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:13 2025 by rpki-client