Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: huxpDB/bLkkFHcpHdeauGNngPnCGJbJAdDPRzM2KPi8=
Subject key identifier: E1:B3:27:30:E0:FC:0F:1C:51:80:67:16:16:8C:20:4A:FF:C9:0C:2B
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019873E3C43E6513A0B3C4C75D65B6AFBE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:02:43 +0000
Manifest this update: Mon 04 Aug 2025 07:02:43 +0000
Manifest next update: Tue 05 Aug 2025 07:02:43 +0000
Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: sspE/VX6qRY/Y7hXcsg0OFMeiIr0qXY4qoSuurmjFWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c4:3e:65:13:a0:b3:c4:c7:5d:65:b6:af:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Aug 4 07:02:43 2025 GMT
Not After : Aug 5 07:02:43 2025 GMT
Subject: CN=e1b32730e0fc0f1c51806716168c204affc90c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:e2:c9:94:e2:4a:b8:16:2f:42:03:c7:f2:
76:0a:1c:1f:07:31:04:bc:18:31:ac:a6:3c:87:d9:
1a:57:ff:ec:af:89:e8:3f:ab:db:50:31:06:c9:98:
21:a3:fb:4d:48:10:9b:45:d7:f5:f1:07:2a:35:b2:
26:8b:30:1e:01:e4:1f:8c:4a:d3:9e:14:7d:cb:42:
c5:ff:7d:b0:87:e7:b6:d2:da:c0:c7:b3:fa:82:7d:
72:39:ff:98:66:b7:8a:75:32:68:62:c7:89:a4:90:
ee:e5:0d:84:ed:39:5b:68:94:2c:90:d3:3b:ad:16:
d4:ec:92:43:53:e7:91:1b:1c:5c:91:71:ba:6d:a0:
c6:a8:b7:8e:e1:d0:c2:42:93:63:09:f3:2e:f2:e2:
81:14:57:96:ab:fd:bf:ca:c5:42:8c:d1:11:3c:f7:
79:b8:b2:31:c8:33:82:91:53:18:7d:f2:37:a8:b4:
6b:66:6d:e9:aa:7c:4e:fb:b6:af:1b:15:9c:1c:5f:
c1:ff:7f:5e:4d:65:ea:39:1b:c8:3b:eb:41:54:c2:
79:78:b9:a8:5a:07:cc:3f:8f:e5:27:55:b6:96:8b:
fb:c7:17:c5:b2:59:ba:24:1c:9f:09:dd:28:02:1a:
69:12:96:0b:42:78:4f:3e:fd:6b:31:65:44:31:17:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B3:27:30:E0:FC:0F:1C:51:80:67:16:16:8C:20:4A:FF:C9:0C:2B
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:da:7f:15:3e:5f:f1:d6:9c:e8:5e:37:5b:4d:36:8f:db:8a:
2d:d4:ca:9a:a0:1f:17:d5:87:9b:70:a6:08:ab:b3:7b:47:ce:
72:ff:73:63:24:d2:05:96:83:e3:cf:e6:e2:fd:7b:e1:87:38:
46:b1:7c:35:4a:08:58:6d:03:a6:13:10:00:29:2f:ae:4b:16:
62:90:a4:1b:e5:48:1e:49:4e:09:f1:d4:b6:f3:c7:6a:6d:68:
58:68:4c:88:53:e6:f9:82:15:56:01:7f:90:78:d3:1a:90:8a:
58:04:09:1b:59:7a:ef:bc:74:b3:bb:4a:f6:39:d4:11:a6:03:
cd:1a:af:23:84:28:29:2f:fe:4e:28:c1:f7:5d:67:8c:f5:f8:
f3:13:6d:ce:62:3d:3c:23:99:11:19:17:72:7a:92:68:97:0e:
f4:22:53:bd:49:a9:ad:64:93:1f:51:9a:66:59:31:b4:fc:18:
60:a3:27:d6:0c:eb:ce:c5:1c:10:23:d6:46:25:71:9f:04:52:
08:44:40:22:6f:93:53:27:7c:3e:64:bc:68:48:a9:08:d5:43:
f6:21:fc:32:1e:e5:f5:58:62:61:6b:24:11:ca:a4:25:af:74:
6b:f6:16:95:6b:42:5c:be:4b:e3:65:27:c7:9d:d0:6e:32:29:
dd:b8:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:10 2025 by rpki-client