Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: pxGn7lddW/CJdkhyizrGU8EvaFQhN6zIykSPN3rURYQ=
Subject key identifier: 7F:E4:02:9C:9D:68:B6:0B:31:6B:2E:7F:75:F4:E1:04:5C:A8:C5:6D
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 01987A51AC504825C753914C3CBA186CDE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0742
Signing time: Tue 05 Aug 2025 13:00:29 +0000
Manifest this update: Tue 05 Aug 2025 13:00:29 +0000
Manifest next update: Wed 06 Aug 2025 13:00:29 +0000
Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: Vl9Ch/E5+Npgeb1rKaS+hIjfY7aPnj7KhpEtM0eVN64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:ac:50:48:25:c7:53:91:4c:3c:ba:18:6c:de:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Aug 5 13:00:29 2025 GMT
Not After : Aug 6 13:00:29 2025 GMT
Subject: CN=7fe4029c9d68b60b316b2e7f75f4e1045ca8c56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:ec:74:d8:ae:80:18:b8:31:d4:26:67:d2:
a8:45:94:86:fc:48:07:44:41:12:8e:09:d6:00:03:
88:2f:b2:f1:62:af:58:57:bf:e5:7b:26:1a:42:f3:
a3:8e:48:71:2e:bf:fa:98:c1:5b:8a:24:21:a6:89:
58:16:64:03:8e:5d:c9:33:5b:ba:73:68:12:47:1e:
bf:0b:43:24:93:31:7e:a9:cf:18:9b:4b:3b:4a:81:
dd:d7:54:ec:d7:cc:c0:df:4e:0b:3e:3d:08:dd:1e:
e4:ee:38:e4:bf:a1:53:bb:37:36:29:bc:30:a0:89:
a3:ea:79:55:69:63:6c:7c:1e:f9:c8:5a:14:df:d8:
c9:bc:ec:eb:19:a0:c8:f2:a4:39:6d:98:7e:eb:69:
09:5d:0e:72:f5:bb:51:a5:1d:e4:49:24:c9:d7:8c:
7f:c7:44:fb:f7:08:e3:ac:b7:20:b5:30:e1:0c:50:
10:0a:8d:3c:1a:07:ce:88:84:29:ea:76:36:2c:e0:
39:b8:7e:b8:52:33:52:8a:b4:ef:5f:08:d1:a8:f9:
94:13:d1:9a:6e:47:d2:67:00:6a:38:bb:2c:88:04:
30:9e:ba:af:51:25:db:ff:5d:8b:40:c4:47:f7:dd:
72:99:ef:bd:18:b5:1f:f9:e9:8f:00:fc:38:d1:e2:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E4:02:9C:9D:68:B6:0B:31:6B:2E:7F:75:F4:E1:04:5C:A8:C5:6D
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:18:af:21:2a:6c:7b:5d:8a:58:2b:f8:56:d2:ff:52:a7:c9:
b5:1f:42:cf:76:84:44:0a:e5:0c:08:a4:f1:15:3f:d5:dc:fe:
ab:9e:62:8d:ad:0f:80:43:fa:5d:34:dd:ef:cb:36:a4:54:c3:
06:9e:2a:3d:68:17:ef:21:76:a9:3a:14:97:eb:d9:3a:f1:64:
bf:61:33:c0:4b:b7:8c:7b:6f:b6:1e:3d:89:92:cf:1f:bc:11:
af:6e:76:c3:e6:94:d3:50:23:b2:f9:46:b1:18:d2:6f:14:38:
7f:cd:23:c9:ce:64:79:ac:a5:2c:52:f6:8f:ac:31:8b:21:7a:
7a:a1:86:af:b3:dc:79:85:f8:0c:93:72:91:16:e7:33:be:80:
e9:9c:64:15:50:ce:f7:c9:d5:6f:ec:43:ed:2a:c2:8d:2b:63:
90:ff:53:be:a2:a2:d4:d4:94:ac:c7:ad:6c:41:05:f4:04:ce:
8d:5e:7f:14:45:08:47:76:47:d0:8a:35:4b:56:97:6f:3a:ca:
b1:d5:0a:7a:d2:b4:53:f7:6c:67:4b:39:d4:ae:ad:49:ea:6f:
ad:08:b0:8b:d5:c7:4e:fb:cc:00:c6:a0:69:21:36:e4:da:f0:
e9:e2:c0:1d:03:10:a3:c1:c1:2a:f9:ee:e2:17:9e:6d:89:58:
a8:10:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:32 2025 by rpki-client