Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: wv4OocEy2gyDHpve3/pZ4rSONKs6QREEu/cpzi5vOmI=
Subject key identifier: 92:B7:0C:8E:87:12:2C:36:3D:F7:46:2C:69:07:DE:12:AD:23:B8:0E
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 0198744FF6DED06BB24E2AA24FD819456345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 1250
Signing time: Mon 04 Aug 2025 09:00:54 +0000
Manifest this update: Mon 04 Aug 2025 09:00:54 +0000
Manifest next update: Tue 05 Aug 2025 09:00:54 +0000
Files and hashes: 1: V4HzyqT3UdFuM-GyIseILy4xTfQ.roa (hash: 1TwXBA5f5XgP5uZG5yeFX6kZqTX4W9t72jbcfsBpAgw=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: 5Da65RD4vLQwkdktz8huJ1yChIlKZTWOKqkz+o+bSeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f6:de:d0:6b:b2:4e:2a:a2:4f:d8:19:45:63:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Aug 4 09:00:54 2025 GMT
Not After : Aug 5 09:00:54 2025 GMT
Subject: CN=92b70c8e87122c363df7462c6907de12ad23b80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:97:04:86:99:3b:32:82:88:03:78:dd:82:
f3:ed:ca:af:23:ca:87:ab:fa:0d:28:b3:8d:f3:66:
2b:f8:15:75:b2:38:f5:dd:d7:43:3e:ef:46:1d:f0:
d2:c9:9b:00:30:85:f9:ba:0d:bb:25:36:fb:d0:b0:
ea:2e:97:19:a5:bc:1b:94:12:bf:15:d5:b3:73:c3:
7a:69:bc:c5:24:cb:37:db:40:43:75:47:e6:ec:49:
f2:c0:25:c5:28:c6:1c:fd:2b:6f:e6:b1:e7:77:50:
fe:22:34:a0:d4:6c:41:73:cc:9c:a7:a6:85:2b:b0:
20:6a:42:87:00:00:46:bb:77:4e:37:6c:d2:02:79:
22:b6:17:fa:35:0a:76:cf:80:0e:a9:58:e9:37:39:
91:5e:9c:4e:5c:53:60:fa:89:d4:ac:30:3f:01:fe:
7a:4c:da:53:38:61:75:6a:f5:f7:b9:b1:a0:85:ab:
c1:26:0f:db:44:5c:3d:6a:7c:ec:f4:98:67:9d:5b:
45:f5:a4:cd:14:ef:6b:e2:1d:3d:f9:99:79:e0:6e:
2b:bd:fb:6e:c9:56:3f:14:c8:30:77:fa:99:a6:30:
35:56:60:28:0d:26:d9:9c:fa:46:c2:fc:f0:7f:cf:
48:a6:ed:55:1a:30:54:d6:40:8e:26:a7:e5:f0:e8:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:0C:8E:87:12:2C:36:3D:F7:46:2C:69:07:DE:12:AD:23:B8:0E
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:30:74:ca:41:a7:21:59:b4:7f:e3:49:15:5c:e3:d3:0b:c0:
4c:ca:ee:97:e1:ef:59:83:92:2f:d6:50:55:3f:96:0e:0d:59:
e2:4e:2f:f4:d8:fc:77:02:88:7d:f4:b3:33:2e:69:4f:54:a2:
1f:de:f6:d5:20:e4:fd:5c:c7:ec:7d:af:20:bc:ac:4a:14:5c:
01:69:b6:f7:aa:ec:ba:7a:33:dd:39:6f:48:91:33:16:82:12:
63:02:a6:8b:e0:d8:ae:d5:e6:ef:0e:c4:f1:76:be:24:f5:72:
0a:3f:75:58:7d:74:5b:2e:d2:19:d4:ad:3b:5b:af:7b:44:e9:
b0:80:e3:9f:33:9d:21:d1:4b:09:40:ea:18:60:6c:57:0e:b6:
76:dc:01:e8:54:0e:c6:7e:d2:f1:0c:6a:15:34:6b:03:3d:18:
d2:e1:76:b8:8f:9c:b4:5a:b6:8d:85:54:94:8e:cd:d9:b5:55:
7f:c7:b1:cf:f9:18:a7:3a:b7:4b:90:6f:26:3e:4c:d7:a5:90:
79:11:8b:19:0c:8f:13:45:9f:9e:04:e5:48:08:5d:00:20:01:
b7:f3:ce:33:e4:30:98:23:63:74:53:80:78:1a:30:f3:d7:cd:
24:78:b5:bb:76:72:fe:e2:e6:a7:c9:b3:09:84:6f:39:b7:6a:
c0:af:d7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:53 2025 by rpki-client