Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File: hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier: H403FTkBYG5izLmocG9IgQczSQLN1Siug4+JKkpBXio=
Subject key identifier: CC:CF:6A:C2:0D:62:1A:71:3A:5E:F0:14:AF:10:E0:91:9A:FD:1C:9B
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial: 01988EEC80575B7603ED87341EEBE8DE070F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 13:02:00 +0000
Manifest this update: Sat 09 Aug 2025 13:02:00 +0000
Manifest next update: Sun 10 Aug 2025 13:02:00 +0000
Files and hashes: 1: SlIgtDyTd5cpyZ5qiIfHEefhUu8.roa (hash: cWooIQqAZCDw8Hk2WoTdEVBzSQhgQYC7c4wf4oYDYYU=)
2: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: ouTLdGN03fELbAQBRM4+eKH8FfAHyaokeYSMFj3EUEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:80:57:5b:76:03:ed:87:34:1e:eb:e8:de:07:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Validity
Not Before: Aug 9 13:02:00 2025 GMT
Not After : Aug 10 13:02:00 2025 GMT
Subject: CN=cccf6ac20d621a713a5ef014af10e0919afd1c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:7c:ee:3c:74:70:4f:3b:f9:93:99:f8:de:
7d:8a:df:78:35:18:6c:d0:e7:ad:e8:77:30:75:80:
42:5a:e3:a6:b3:f8:68:ac:e7:70:60:a4:15:45:86:
6d:2e:3e:ba:7e:65:4b:60:ce:5e:33:77:32:f2:ee:
64:29:d9:ae:a9:e6:14:ec:64:5f:b7:14:43:11:aa:
3f:ac:f1:aa:eb:7e:e1:da:03:b3:8e:86:20:52:04:
9b:79:1b:8c:3c:21:05:af:74:52:0c:49:e7:91:d3:
a7:5d:e9:f3:39:c9:63:73:6e:fd:f8:32:17:01:02:
8d:86:0d:6f:c0:68:67:68:9e:51:58:5f:0f:c7:c1:
0a:39:cf:e2:4a:30:ac:72:0b:86:5d:f6:a9:28:57:
16:2c:39:dd:da:95:0d:a8:cc:db:00:d5:42:5f:89:
f2:15:d4:b9:79:49:2d:bd:ac:9d:0c:bd:68:46:25:
37:94:0a:a6:fd:48:10:3b:28:54:69:89:fc:61:d3:
84:f8:06:21:17:de:82:fa:4c:4b:2c:6a:56:86:b8:
bf:cb:ff:1a:2b:d1:cb:59:d9:ac:ca:8b:78:b4:53:
bd:83:54:38:d9:6c:41:5f:47:5d:9d:0d:1b:c4:dc:
a5:08:3a:56:1a:1a:25:11:04:83:3d:f7:fd:30:fe:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:6A:C2:0D:62:1A:71:3A:5E:F0:14:AF:10:E0:91:9A:FD:1C:9B
X509v3 Authority Key Identifier:
keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8a:26:e0:a9:b4:eb:1e:f2:3f:68:50:84:60:a7:85:0a:19:
c1:d1:c8:6e:aa:4e:a5:2e:3c:10:65:11:13:9a:ef:75:0f:e1:
41:3a:f8:10:94:fb:79:ce:75:a9:14:b4:eb:eb:4e:cd:96:9c:
bb:ba:cc:3c:48:2d:25:d2:c4:7d:f5:1d:20:b3:49:bb:7e:5f:
06:13:84:06:6b:ea:d0:3a:73:2e:4f:0f:b9:4d:f8:cf:77:9f:
41:c0:cc:60:93:a2:5e:1f:21:36:55:14:ea:6d:2d:b1:06:a8:
2f:94:62:a5:45:a0:ef:c0:fc:9b:8d:c3:3c:7f:d7:ac:73:bf:
6a:c6:af:90:af:c4:3b:38:81:a2:6a:68:13:66:b5:49:07:3f:
c9:e2:c7:cd:13:5f:68:ae:fd:88:6d:03:fb:3a:9c:1d:e9:8c:
46:84:80:ac:74:29:cb:1c:9c:90:ea:ca:49:30:64:bc:80:fd:
9e:0b:53:37:56:2e:60:12:93:20:ad:73:31:ea:da:48:dc:2c:
c3:d0:1a:39:d0:66:03:5a:04:44:74:bf:86:2d:a3:7e:7f:c4:
99:91:30:29:48:e4:1d:9c:3f:c3:28:da:c9:e7:31:50:57:10:
ea:c0:ba:d9:f1:bd:82:a3:a4:b6:1a:16:1d:1c:bf:6f:b9:39:
99:4e:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:59 2025 by rpki-client