Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: 2K6ncUf1KsS/yCjHmYtqmfZ421p7nTpBgQL/CzbsZe0=
Subject key identifier: BB:8D:BC:B7:3F:37:F0:35:1E:99:3D:28:41:D4:7A:DA:A5:44:FD:50
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01987B9D4D36B8108D1ECF781DE2B8B3609E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 0322
Signing time: Tue 05 Aug 2025 19:02:43 +0000
Manifest this update: Tue 05 Aug 2025 19:02:43 +0000
Manifest next update: Wed 06 Aug 2025 19:02:43 +0000
Files and hashes: 1: 6Q2HcS2RcDd9Dr_MYHyibugbWc0.roa (hash: +al/CVwN5+E5qhE2z1hKzqr2S4yV6SQ/qbFlSTBTEk8=)
2: YJ38H1JUnUf4GaAI-4_L--wUJZI.roa (hash: GvPm+IdYGRMKJSr2LCsRHgR1/00CHHLsiEJ+iJ60p6s=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: zbDGFGZBNepm4RRuKeDw51d5ExRnEjsndNVrYygP7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:4d:36:b8:10:8d:1e:cf:78:1d:e2:b8:b3:60:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Aug 5 19:02:43 2025 GMT
Not After : Aug 6 19:02:43 2025 GMT
Subject: CN=bb8dbcb73f37f0351e993d2841d47adaa544fd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:ba:c0:88:15:f5:8b:4c:7f:19:86:f8:5a:
ea:9d:ba:fa:00:64:11:00:fa:bd:63:45:ae:e0:39:
78:0e:7f:e5:1c:f1:c0:df:cb:7d:7a:14:9d:f7:3c:
cd:94:e2:a9:07:ae:b2:02:68:a0:18:fc:cb:fe:77:
37:35:69:31:95:28:81:61:fb:92:ed:ec:d5:b1:9c:
34:78:c6:1d:8a:eb:bb:33:dc:04:c9:89:ae:d4:6c:
f3:ed:34:48:98:55:68:ac:2a:cb:bb:39:56:64:16:
26:32:89:86:97:5d:fe:f1:e8:7c:01:ce:59:91:3e:
c3:66:1b:fb:22:01:5f:f5:2b:04:09:88:07:00:f8:
a2:cb:c9:36:04:06:91:59:f3:89:5e:2e:e4:7e:bc:
7d:fa:99:e1:ce:a0:bf:6c:de:8e:3a:88:2f:99:49:
26:13:0d:03:6a:d5:98:e8:09:42:c0:a4:05:2f:98:
26:72:44:6b:e7:03:37:f6:6c:cf:5f:98:1b:8a:3f:
90:ea:85:79:84:16:a4:52:75:0f:ca:b3:a8:3c:c2:
01:c1:5b:61:21:13:27:f8:85:a4:75:ea:c6:f5:f2:
78:d5:cc:75:78:e2:d6:15:ee:d1:3b:68:b1:96:1c:
a6:18:fd:c2:9d:c6:cb:78:2c:9d:e1:06:d6:21:72:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8D:BC:B7:3F:37:F0:35:1E:99:3D:28:41:D4:7A:DA:A5:44:FD:50
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0b:42:9f:dd:af:f5:a5:ef:b2:4f:45:00:e0:b3:df:7a:50:
91:f9:8e:d6:f9:57:b1:4e:3b:37:ef:15:1d:e4:99:1d:71:75:
d4:96:38:86:0a:32:a0:f0:95:ad:19:5c:83:b6:7f:69:a8:ff:
3d:73:29:83:39:44:8f:6f:c7:fe:fd:11:b4:3b:9c:b4:a9:26:
39:3d:eb:ea:52:6b:de:c6:45:49:fa:f1:f5:cd:7a:36:9a:6a:
0b:cf:a3:c0:a3:7f:ab:af:96:5f:ff:7a:7a:9e:bf:8b:38:1d:
c1:18:49:a0:93:bd:81:1b:0c:67:85:78:01:dc:6e:e1:3b:46:
f3:14:e3:df:3b:36:d4:f7:70:70:cd:30:e0:73:c5:80:ca:25:
b7:51:62:21:58:09:c1:06:2b:58:02:d1:18:25:fd:b6:fe:d3:
52:98:f9:28:74:cd:c6:7c:05:d1:47:b0:59:5f:64:79:03:53:
46:47:4e:72:00:80:6a:32:ad:8a:b6:1d:77:4e:ed:f7:7f:18:
54:9b:e4:f2:b6:72:25:6a:3e:ba:d6:7a:c7:b7:58:25:4d:07:
83:79:eb:21:6e:26:90:c5:3f:1a:98:1d:7a:80:c4:b3:d3:71:
28:1f:70:bd:39:91:ae:ee:15:34:cc:0d:d9:57:24:66:d0:ae:
01:16:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:08 2025 by rpki-client