Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: a36Vl97TSpN3Nmpuf82CaTNF3YzOqp0wjyeEDCuwPZk=
Subject key identifier: 17:4B:13:74:0A:29:C3:06:51:30:66:E0:4E:E0:5E:19:82:F9:84:23
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 0198820BDB64CEDC480B993B838C31D6E17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 01:01:11 +0000
Manifest this update: Thu 07 Aug 2025 01:01:11 +0000
Manifest next update: Fri 08 Aug 2025 01:01:11 +0000
Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: 8swtDHnMhNCYzoQ60dFlb4pucirM15avrIut777PWXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:db:64:ce:dc:48:0b:99:3b:83:8c:31:d6:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Aug 7 01:01:11 2025 GMT
Not After : Aug 8 01:01:11 2025 GMT
Subject: CN=174b13740a29c306513066e04ee05e1982f98423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:cb:12:80:82:8c:af:76:b6:6a:c0:e9:18:
c6:bb:df:39:a9:94:1b:84:5d:fa:2b:8c:71:fd:07:
89:09:9e:61:6b:14:9c:4c:e9:17:30:c3:71:57:e0:
61:a7:56:a7:28:7c:0e:0d:aa:e1:09:35:47:6b:96:
40:95:db:05:3c:67:5e:88:b5:35:3c:42:17:b6:21:
bc:d3:b6:42:d1:50:65:7d:fd:65:24:37:8b:dc:f0:
6f:70:be:29:d5:ff:be:3a:b8:96:80:a5:32:76:de:
16:01:3e:57:c8:70:71:41:13:ba:49:af:7e:fa:42:
f5:7b:ea:43:46:6a:53:4a:ad:41:0b:bd:5c:55:82:
b0:d6:fd:84:e6:30:5c:1b:ba:f7:4a:87:7f:24:5c:
b5:c4:b0:52:0e:c6:55:05:a2:05:7c:8f:10:fb:30:
cb:59:7f:14:d5:bb:34:56:59:b9:9c:54:f4:89:98:
c4:f1:73:21:5a:9e:c0:8a:87:65:89:d1:80:d2:b2:
9a:5f:82:c8:a4:93:0f:df:c3:8a:5a:28:22:8a:0a:
43:35:91:a4:bd:54:3b:6f:d7:cf:ed:a3:21:2e:9e:
cf:6f:89:47:be:3c:0d:b3:0f:2b:48:7e:32:0d:a9:
04:03:5a:7b:1a:98:21:ce:45:c6:ad:ac:7f:bd:e2:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:13:74:0A:29:C3:06:51:30:66:E0:4E:E0:5E:19:82:F9:84:23
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6b:6f:6f:da:50:3b:f1:a9:31:83:31:2a:a1:42:2c:ea:28:
06:d3:81:16:8e:6d:f8:e2:b9:49:c7:5e:6b:15:75:c0:f4:73:
5e:24:c8:ac:43:d5:5f:78:ab:ae:25:3f:99:a7:26:12:a9:75:
4d:5d:78:be:6a:13:a4:4e:2c:8d:c6:ba:a5:70:eb:63:81:68:
4a:41:4d:dc:d8:10:d6:37:1e:1f:58:5c:03:cf:cb:fa:5a:20:
71:12:ee:0f:85:5a:74:fb:7a:e3:77:1c:b3:d7:ba:bc:05:0f:
74:79:23:4e:85:c2:17:57:cf:83:a9:ce:5e:aa:43:2e:27:e7:
25:fc:c9:71:99:13:7a:48:e8:7b:b7:b7:e9:7e:7f:75:2a:71:
87:be:a9:c4:3f:b8:e4:5f:84:18:8c:03:40:cf:53:c3:0f:0f:
7c:26:c0:6a:1a:65:bf:a5:bb:ca:8c:2c:1b:7e:bf:05:fc:ea:
ad:da:03:f7:5a:0a:0d:b8:af:20:97:69:86:93:34:77:66:d8:
ab:29:fb:1c:76:d5:5c:43:ef:e8:46:70:ba:82:bf:6c:72:45:
a8:0e:07:83:7a:2d:59:7f:ba:25:b7:eb:6b:73:8c:51:18:5e:
60:ee:18:8b:b5:ba:18:e6:8b:93:63:6f:c7:ed:2f:f9:99:56:
1e:e2:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:14:32 2025 by rpki-client