
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
File: hnWNin7SGnQXLM7sM4xk02sDeNQ.mft (raw, json)
Hash identifier: a/fOPelXAsZu8ymo+UrSF3CsP7iOFu7WYYHBpvJ/Rjc=
Subject key identifier: 21:91:80:F6:56:9A:43:5C:36:20:A4:1F:EE:01:74:6F:4C:7C:04:F2
Authority key identifier: 86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
Certificate issuer: /CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Certificate serial: 0198838C625F7A8880E9AE930CBFD2538CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
Manifest number: 0487
Signing time: Thu 07 Aug 2025 08:01:12 +0000
Manifest this update: Thu 07 Aug 2025 08:01:12 +0000
Manifest next update: Fri 08 Aug 2025 08:01:12 +0000
Files and hashes: 1: Tmqal5XUVoUE8c77AFlzaqU97c0.roa (hash: r3d2ZcS64ApbYh564RwP4TPidKg35TEhpwQ3BNXhcQw=)
2: hnWNin7SGnQXLM7sM4xk02sDeNQ.crl (hash: Glw+ci6vTsMW+is8S2n9mkhQw2LS/tJadQav4K4kJ7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:62:5f:7a:88:80:e9:ae:93:0c:bf:d2:53:8c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Validity
Not Before: Aug 7 08:01:12 2025 GMT
Not After : Aug 8 08:01:12 2025 GMT
Subject: CN=219180f6569a435c3620a41fee01746f4c7c04f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:94:f8:7f:53:16:f7:b3:46:63:da:67:03:
39:38:2a:3c:4a:65:71:22:85:a3:05:51:2d:a9:98:
ef:00:82:45:93:62:81:31:dc:79:ac:46:3e:30:bc:
ca:93:fa:a3:78:67:51:f6:0d:98:e1:8f:b0:0f:ce:
26:ef:53:b4:19:d2:e9:67:0d:4a:69:92:51:50:b1:
b3:79:f4:6d:e2:00:69:ec:e5:ed:77:9b:1d:0c:d8:
b1:9f:ed:31:50:36:88:50:ee:d0:b7:a2:d2:c7:14:
3f:44:34:15:bf:69:88:07:69:ff:c8:b7:9d:fc:a0:
d7:00:40:11:20:6d:1d:81:f7:f6:58:04:19:d1:77:
7e:a5:3d:8c:46:fb:ba:a6:21:c4:33:42:b4:b6:c4:
72:be:66:e5:44:e9:a4:6c:05:56:7e:a3:4b:c5:1d:
33:d6:6c:73:5b:8c:2b:25:a8:cc:19:70:6d:a9:ca:
68:9b:d2:b5:5e:a7:9b:f2:be:f4:90:2b:ec:90:50:
31:c9:f2:16:de:04:4e:19:b0:7f:81:76:ef:cc:a7:
a9:dd:91:1d:d4:57:13:f9:32:c2:a8:60:2b:28:f1:
fc:b4:57:1d:43:ed:9d:86:f4:9c:a2:17:a0:6f:11:
3e:79:f6:15:ab:6a:d2:46:0b:c8:f8:01:e9:7a:7d:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:91:80:F6:56:9A:43:5C:36:20:A4:1F:EE:01:74:6F:4C:7C:04:F2
X509v3 Authority Key Identifier:
keyid:86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:95:5c:7f:a3:c7:1f:80:fa:c9:8b:23:24:70:4c:7c:65:
0c:65:4c:37:5e:48:1c:b8:ef:a3:bf:87:87:4a:ce:2b:be:5f:
43:bf:7e:14:8e:9b:b2:43:7e:e1:dd:1d:f0:9f:04:7a:f1:dd:
cf:eb:6e:42:42:33:9f:18:3c:c2:3e:e6:97:07:64:0b:8c:c2:
e4:d4:a3:c3:5d:33:7a:f2:d8:cc:49:2c:9a:11:54:06:d5:c7:
11:b4:6a:99:8a:9d:bf:e4:a4:75:3e:cb:96:c0:9c:68:bc:e9:
99:2c:36:34:8a:2f:f7:3d:fc:d0:1c:6b:14:c4:24:d3:16:00:
a0:af:72:c0:4f:28:55:a4:b5:e1:4a:c8:76:e7:dd:21:fb:70:
2a:e4:62:b2:cc:fc:94:35:12:c1:4d:09:25:bd:d8:84:d7:8c:
cc:11:02:e0:2d:9b:68:91:ab:72:35:9a:80:0d:fb:e1:c5:a9:
1d:18:90:2a:15:5e:4a:57:7b:32:25:b5:91:a1:5b:33:20:bf:
6b:53:63:12:48:5a:2d:b9:b3:91:19:50:71:8b:09:da:47:7a:
f2:2a:68:f4:78:75:29:ea:8a:e6:41:38:ea:22:22:45:83:99:
e6:e7:21:a0:18:89:9f:a4:61:22:08:2c:f9:09:6e:4c:22:d7:
0e:fb:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:03 2025 by rpki-client