Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: aBbE86PdvbwoG1Yp9aeZpP16d/mNyI3c5Ws1wba893I=
Subject key identifier: 96:15:0D:F7:BD:9B:C7:1B:C5:5A:10:B5:70:11:71:A4:C8:7E:28:87
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 01987298DB7F38E6E3720784CF740C2B6A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 01:01:16 +0000
Manifest this update: Mon 04 Aug 2025 01:01:16 +0000
Manifest next update: Tue 05 Aug 2025 01:01:16 +0000
Files and hashes: 1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: 1F9W2FPFexJN4dp0cTdI+h2ZtwX5F251X+pLrIax9tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:db:7f:38:e6:e3:72:07:84:cf:74:0c:2b:6a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Aug 4 01:01:16 2025 GMT
Not After : Aug 5 01:01:16 2025 GMT
Subject: CN=96150df7bd9bc71bc55a10b5701171a4c87e2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:3f:78:3a:d5:4e:0b:58:fb:84:6a:13:a3:
af:98:96:b4:75:e7:9b:d1:94:ff:c5:06:58:ff:31:
9f:c0:dc:49:33:a4:4b:79:0b:a6:fd:f7:aa:a1:ee:
59:e8:00:b0:5f:31:3a:ca:b8:bb:37:cd:16:f6:38:
b3:16:ac:27:42:7c:e5:85:a9:5d:e0:cc:78:f1:5b:
8d:8e:ec:37:89:c4:64:e4:3d:10:cc:e4:1f:84:29:
28:99:d0:32:c8:75:46:4f:28:5d:a7:d7:a1:14:31:
7d:e3:f2:97:ff:da:f2:64:a1:7c:2a:e4:a9:18:9a:
0a:95:32:d5:46:2f:f3:78:5c:b2:27:ca:5c:32:df:
f4:b4:54:8b:1f:22:57:bb:51:e4:65:6e:c8:47:1f:
83:26:40:6f:7a:4b:5c:72:9d:f2:e2:53:74:7f:f4:
25:00:c0:85:33:ff:56:ec:9a:c9:e9:e0:11:04:bf:
ed:26:96:31:ff:9c:76:90:1d:ad:25:ed:59:a0:e3:
27:21:0a:a3:8b:04:d7:60:90:19:ae:d2:72:5c:38:
53:60:78:f2:0e:a2:62:96:7a:2d:8a:42:1b:88:cf:
2a:7d:08:64:f9:9c:e6:36:87:2a:f9:7c:3a:c1:0a:
2b:60:82:85:e6:26:16:5c:44:8f:31:cc:7a:a7:2b:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:0D:F7:BD:9B:C7:1B:C5:5A:10:B5:70:11:71:A4:C8:7E:28:87
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f3:83:88:0d:5f:3c:80:3a:c4:30:15:04:9f:6b:dd:06:90:
30:33:90:83:e3:ee:37:5b:20:39:e2:c5:5f:88:c2:d5:ea:f4:
b7:96:30:2d:34:c3:8c:2d:5f:6b:e9:cd:85:e3:f4:77:24:aa:
8d:1b:ca:a1:39:53:23:ae:55:a6:9f:ce:78:e1:11:3b:91:af:
b5:46:dc:c5:4b:d2:53:49:9d:39:43:7a:6d:2f:5b:44:ad:ab:
6e:02:88:5b:aa:6e:39:4f:d2:e9:a2:14:46:59:c6:8b:bf:1a:
4c:f3:8c:e1:ed:4e:18:37:89:70:f4:f0:da:fd:82:bd:f9:29:
76:f3:ea:3c:92:9c:a2:c4:70:54:8a:e6:e1:92:d6:4d:b3:a3:
b7:62:ef:b3:95:d9:87:37:61:19:c2:24:5a:d1:1a:09:70:eb:
31:b2:90:56:6c:dc:b2:d0:69:38:90:31:b5:9c:03:9b:52:49:
db:ff:3c:26:13:b0:69:a8:7b:5d:44:e5:6d:59:e6:c4:c8:2d:
04:30:51:fb:ec:a8:91:a3:e9:33:d6:e2:f1:ac:db:85:a3:bf:
76:63:55:f8:79:d0:98:fa:3a:a8:b5:94:c5:da:65:1a:3b:1a:
7a:87:6b:5d:d5:a3:3d:4f:ea:9f:e3:2e:8c:9e:a8:e5:dd:91:
64:02:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:50 2025 by rpki-client