Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
File: hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft (raw, json)
Hash identifier: wkH/k2HAZKPHZoLx1eHL/l9kCBE2Ga9O9aJ/luIQDl4=
Subject key identifier: 74:E5:BC:A3:C3:55:FC:48:9E:78:68:85:03:85:9B:F2:FC:30:C0:98
Authority key identifier: 85:F8:70:11:9E:59:21:BF:12:49:5D:C9:02:DC:FE:3D:8D:4A:37:D8
Certificate issuer: /CN=85f870119e5921bf12495dc902dcfe3d8d4a37d8
Certificate serial: 0198748694B7D78796229D91AE83CFB13E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
Manifest number: 01C0
Signing time: Mon 04 Aug 2025 10:00:33 +0000
Manifest this update: Mon 04 Aug 2025 10:00:33 +0000
Manifest next update: Tue 05 Aug 2025 10:00:33 +0000
Files and hashes: 1: cllA8kNp-t480y7IfyyWuiklziY.roa (hash: 5bq8pPC98WVuN+UCw7i3OOCXOObrhETW5cCP805rEU4=)
2: hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl (hash: zxKyiQVrLoUOLVNuiNVlF/QoVtXYDHbZNogeZVeE4XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:94:b7:d7:87:96:22:9d:91:ae:83:cf:b1:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f870119e5921bf12495dc902dcfe3d8d4a37d8
Validity
Not Before: Aug 4 10:00:33 2025 GMT
Not After : Aug 5 10:00:33 2025 GMT
Subject: CN=74e5bca3c355fc489e78688503859bf2fc30c098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:9f:34:86:45:14:58:19:bb:52:0e:9d:f0:
3e:94:eb:b8:79:54:c7:02:2d:c5:05:5a:56:a6:0b:
b1:7d:e0:bb:46:a7:b2:70:02:7b:1c:ed:f6:36:07:
b2:25:d9:f3:38:db:a7:60:f5:91:2c:36:f9:b0:1e:
85:26:81:87:ca:92:b7:87:62:f7:1c:2e:f7:da:20:
ee:12:36:fe:8a:ce:e3:87:c0:22:dd:ce:3a:8c:5c:
c4:db:92:ee:60:dd:cf:c5:0d:4e:fe:ff:4b:d6:d7:
66:a3:2e:8d:e0:a8:4a:2c:32:bc:29:4f:7d:f2:a1:
72:70:f8:9d:93:28:0c:aa:4e:f3:cd:48:62:d8:61:
c9:93:0e:f2:8b:24:b5:1f:ea:33:e8:e5:3e:2b:0c:
a5:17:90:0f:6f:6b:0a:f7:02:6c:fd:5a:0f:2b:da:
1e:5e:d2:e3:a7:e6:3b:b8:f2:25:5a:46:ae:cd:70:
95:db:f1:90:73:4d:f9:cf:17:8d:da:db:be:e2:94:
19:73:b7:52:4b:d5:c1:22:7e:a3:e1:a5:c9:07:8e:
ae:16:84:fb:07:c4:bb:b0:50:46:ab:95:61:85:23:
30:d2:2a:fa:73:b7:60:63:18:b3:b4:bc:0b:19:a4:
6c:3a:ff:93:d1:f6:47:03:92:f2:ba:71:86:a1:22:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:BC:A3:C3:55:FC:48:9E:78:68:85:03:85:9B:F2:FC:30:C0:98
X509v3 Authority Key Identifier:
keyid:85:F8:70:11:9E:59:21:BF:12:49:5D:C9:02:DC:FE:3D:8D:4A:37:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:aa:3c:ee:ac:fd:8a:ca:c6:2f:82:42:b3:1e:8f:77:30:0a:
11:52:c1:1f:77:5c:7c:8b:db:d0:0c:85:03:92:53:fc:1e:d7:
26:7c:e4:af:f2:d4:17:21:91:ba:6b:31:21:af:f5:66:3c:a5:
63:03:16:7a:77:32:1e:3e:74:36:d8:69:8e:11:0f:50:15:4a:
2b:13:17:ea:98:1a:8f:28:84:e0:56:a6:e2:56:51:37:12:6c:
bf:39:ac:81:3e:ca:8e:70:ce:26:3e:ca:1a:1a:d0:df:04:ef:
90:e7:55:2d:5e:50:7c:a0:c8:2e:9c:e3:46:f3:d8:90:0c:ad:
aa:8c:28:22:e3:8b:10:ed:98:ef:60:6d:86:d9:33:4c:3c:ff:
02:b3:d7:1b:4e:ca:fd:a5:db:78:a0:f5:ef:f4:81:bc:75:a0:
3d:34:da:ae:cd:ea:c9:5b:4d:5f:0d:43:82:2e:0d:4d:be:b9:
ba:65:f9:22:94:63:a1:a6:25:eb:bb:c3:55:d6:54:18:1b:74:
bf:c6:be:35:55:ee:a9:35:cd:6a:e8:b3:a4:50:91:60:9b:69:
94:7a:21:c5:40:30:49:8b:ad:81:aa:03:d2:43:61:94:20:52:
e3:eb:8c:38:96:c2:4e:92:9e:aa:0a:4b:d7:3e:ab:f1:e0:01:
f9:41:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:14 2025 by rpki-client