Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier: 6x7itT3khKbvZ7dx5y+ISroQap09VTgmlHGkhFVTuxQ=
Subject key identifier: 5D:EF:1E:55:07:F2:8B:39:9B:F4:23:84:24:09:7F:FF:B7:12:B6:04
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 019872D014B044FD052B03205444A41AC253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number: 044A
Signing time: Mon 04 Aug 2025 02:01:36 +0000
Manifest this update: Mon 04 Aug 2025 02:01:36 +0000
Manifest next update: Tue 05 Aug 2025 02:01:36 +0000
Files and hashes: 1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: LICvpuPHky1fvDtnZRMFSXfk4xFaRjznlTOELxZ+v9Y=)
2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:14:b0:44:fd:05:2b:03:20:54:44:a4:1a:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Aug 4 02:01:36 2025 GMT
Not After : Aug 5 02:01:36 2025 GMT
Subject: CN=5def1e5507f28b399bf4238424097fffb712b604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:fb:cf:3c:9d:10:c6:f8:33:e5:00:3a:7a:
bc:40:c7:2e:51:a0:3c:1d:c7:1b:ed:4a:3d:5e:0c:
98:93:9f:ad:b8:2e:27:a4:cd:b3:41:0e:07:f9:42:
4c:f0:d3:2e:6e:70:6f:af:5d:14:f7:af:4e:2e:9e:
03:93:1d:7d:0c:3c:c1:ce:ff:fd:92:8d:8a:1c:da:
12:55:47:6b:8e:90:25:f7:ca:f9:bd:73:d9:91:6e:
8f:b2:70:a7:36:90:08:33:35:70:18:58:d5:21:28:
f3:56:f7:99:c1:9d:c4:82:ff:6a:4f:08:1f:a7:89:
41:21:cf:65:fb:28:cf:35:f2:5e:27:f1:13:84:cb:
0e:cc:cb:f0:fe:8b:c7:67:64:23:8a:c5:5a:08:39:
d6:4f:9f:6b:54:52:b3:33:5d:08:ee:b6:38:76:d4:
0c:33:81:b3:b6:1d:42:57:66:14:8b:b7:38:91:64:
e8:33:54:4c:5d:12:b9:58:6b:ca:a5:6b:d2:b2:6f:
2b:8f:8b:f0:4e:4a:fb:b8:4e:70:d3:2b:55:0f:6b:
85:bf:d9:5f:ae:6d:f3:17:84:73:b8:44:4f:f9:da:
da:7c:64:6a:e6:86:a4:b7:56:41:14:56:f2:67:55:
c9:9c:fd:d8:30:a8:61:a1:d4:ae:06:1f:46:fa:a4:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:1E:55:07:F2:8B:39:9B:F4:23:84:24:09:7F:FF:B7:12:B6:04
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d5:8e:3e:fd:91:b6:0e:ae:9b:34:6d:62:17:19:93:9f:d0:
37:62:41:1f:b8:f6:b1:fc:44:3f:b0:82:d5:55:06:94:8c:79:
38:1f:66:d4:78:b6:fb:ab:ae:8a:b6:42:68:b6:f0:82:e2:af:
44:79:05:6a:53:10:43:07:ce:91:29:bd:63:58:cb:18:17:a5:
7f:df:56:f3:e4:f6:1c:06:8d:02:96:ab:1e:e7:57:70:d0:9b:
29:d8:3a:18:48:e8:1d:41:a9:1a:6c:4d:3d:2e:85:3b:89:ca:
36:21:a4:da:d7:5d:88:1b:d2:84:03:a2:1a:f1:9d:67:59:99:
58:c8:e9:af:3f:f0:5c:21:8d:ee:6f:39:d7:07:4f:30:45:ca:
68:87:9b:83:d6:f6:6e:c6:63:df:35:c8:54:c1:7b:15:02:33:
64:96:9e:80:24:31:59:03:e1:05:8f:ce:5d:90:22:01:72:b7:
7f:19:d1:a0:39:ea:23:60:0e:71:44:a7:8d:c7:b6:de:3a:4c:
f1:8b:61:40:3e:87:1e:78:b6:68:6b:87:76:6b:db:cf:3d:aa:
ee:8c:22:fd:5e:08:be:94:ad:1f:df:7b:7f:ee:72:a7:85:47:
a0:f3:59:6d:0e:44:25:c1:43:61:68:10:d7:16:51:5e:97:1f:
65:c5:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:08 2025 by rpki-client