Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
File: hbYRoLfUM0t6I5XozOew48m4OOg.mft (raw, json)
Hash identifier: L7kQUGhaqJ6RKoqdDJXh9+90qBvp8u3J83ma9SZZLgU=
Subject key identifier: 5A:7D:7E:ED:DF:E0:B2:20:49:32:41:91:13:C7:43:67:37:04:95:E9
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 01988CFCF331D6EB3ADEE6003CD37913AAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
Manifest number: 112C
Signing time: Sat 09 Aug 2025 04:00:44 +0000
Manifest this update: Sat 09 Aug 2025 04:00:44 +0000
Manifest next update: Sun 10 Aug 2025 04:00:44 +0000
Files and hashes: 1: GqM4YVlqC8-erWafuFUuhTFle_c.roa (hash: i4cVcC9yh3IAaqw92giD4QCQEZ24C42b9AxtQz5mdqI=)
2: V5ey2q7KwpxyFqlUebHjJUU7ouc.roa (hash: Yxgk3WfNc3AICgrW7BBAgfdy4JGwXPs53GHlVT7wvGA=)
3: hbYRoLfUM0t6I5XozOew48m4OOg.crl (hash: WvENaBN3af6asfTEjWOgnjuTtlL5vIVWvtOQAJjBSw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:f3:31:d6:eb:3a:de:e6:00:3c:d3:79:13:aa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Aug 9 04:00:44 2025 GMT
Not After : Aug 10 04:00:44 2025 GMT
Subject: CN=5a7d7eeddfe0b2204932419113c74367370495e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:d7:1a:7e:e7:96:70:cc:04:e0:d5:44:9c:
a2:47:5e:0c:9a:4c:00:0c:6c:f6:29:13:a6:53:0a:
4c:c0:ef:05:3c:bc:aa:a9:a3:79:92:b5:3a:aa:dc:
85:30:0c:40:42:bf:af:59:85:62:9a:c2:c8:cf:16:
5a:e0:7c:a9:4b:ee:e6:f1:ee:61:1e:ee:be:ac:a9:
52:27:05:7e:ef:2a:10:7d:af:24:5b:88:58:09:68:
74:ee:d9:c5:fa:22:e3:2a:72:6c:3d:e5:b4:f2:4d:
e8:47:28:e7:6e:c1:a9:69:96:d7:14:ce:f9:41:2d:
d6:40:ca:09:2f:bc:ca:8b:94:0a:5a:e3:9c:2d:99:
85:94:38:12:3c:6d:2b:bf:d2:1a:dd:a0:90:71:d5:
63:37:b6:ed:f3:c5:9c:6c:3b:17:59:5e:ec:5e:14:
03:9d:e3:70:0d:a4:79:15:03:58:f3:18:23:31:0c:
36:af:ef:f2:5a:08:02:68:f6:9a:68:63:69:4e:1e:
1f:35:9f:b0:f2:3d:6c:64:cd:73:22:b8:db:a5:06:
af:0f:17:20:9a:43:64:18:b2:0a:d3:40:14:fc:16:
6c:07:e8:84:3f:74:9f:fa:04:c8:f3:a6:25:45:d8:
18:60:99:e9:a6:2b:6f:96:8e:5f:3c:6b:68:cc:c4:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:7E:ED:DF:E0:B2:20:49:32:41:91:13:C7:43:67:37:04:95:E9
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:90:c1:60:4a:29:87:9c:87:2d:f8:0f:ab:d6:f5:3c:84:04:
d9:e7:84:03:83:e0:49:eb:c8:52:9a:2a:9b:ab:0f:55:04:7b:
d0:e7:73:f3:3f:a1:73:ab:7f:21:be:52:34:8e:d8:42:13:69:
8e:63:55:5d:be:10:af:42:3b:83:82:eb:9f:0f:35:75:36:0c:
53:0d:56:53:00:b2:6c:74:2d:56:21:01:cc:2a:99:3a:2c:fa:
1e:5b:af:bb:ab:78:28:a5:44:22:c9:04:07:a8:b5:90:0a:fd:
c9:fb:50:5e:04:fa:17:d3:b4:ca:6e:bf:ed:d2:95:7e:80:0c:
10:98:10:96:46:70:00:b0:7b:45:a3:0d:46:76:2c:16:ac:2c:
fe:ad:d4:eb:e8:ae:1e:f8:3f:98:3b:a4:ef:f4:97:f3:40:48:
25:27:82:34:32:c6:bd:41:bd:00:af:4d:1e:b7:5c:9c:f4:a0:
2c:98:79:95:1d:1d:f8:6b:c6:6c:3c:db:f6:e0:88:1b:cb:0e:
1d:fa:8f:b9:f6:b8:d6:27:da:10:f8:3f:d2:25:e6:63:a4:00:
91:45:38:e0:e3:0d:64:e7:74:79:ba:a2:d4:63:fe:b6:88:4f:
6a:98:c4:fb:66:b8:0b:04:2e:d7:e1:12:e2:63:b8:98:3f:af:
92:3c:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:40:50 2025 by rpki-client