Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: VafdotGR18dV/fuZ0wjGj7kvnyA142z5pUPQHGMikeo=
Subject key identifier: DB:69:64:E0:14:0B:FB:CE:51:65:2D:5B:02:17:CA:FA:5A:EF:94:91
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019880F8E285D8B1C6CC5C4C313AC2EEEB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 20:00:51 +0000
Manifest this update: Wed 06 Aug 2025 20:00:51 +0000
Manifest next update: Thu 07 Aug 2025 20:00:51 +0000
Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: XNTgSvDYFF78PIKnCFvKNwIAiw0d4BNeMuEk/nCPeho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:e2:85:d8:b1:c6:cc:5c:4c:31:3a:c2:ee:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Aug 6 20:00:51 2025 GMT
Not After : Aug 7 20:00:51 2025 GMT
Subject: CN=db6964e0140bfbce51652d5b0217cafa5aef9491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:0c:18:99:90:90:bf:aa:a7:eb:a8:ce:e1:
20:6b:ed:93:60:2b:3b:dc:6c:27:b8:1a:17:1c:39:
dd:a4:66:f4:19:9d:f5:32:dc:0c:5c:a3:65:0e:97:
ca:55:95:a7:05:32:63:7d:a1:2a:a6:08:49:4b:c0:
5f:e0:dd:38:67:1a:df:89:ea:60:af:25:80:65:02:
0c:fa:d0:5c:be:69:b5:02:97:ad:59:42:f4:06:c9:
5e:9f:0b:c4:47:51:f3:5c:38:ef:df:9d:7e:7c:ef:
c5:e7:0f:ef:dd:82:8f:4e:97:8c:d1:05:29:a5:d0:
07:0f:fa:c7:e7:13:f6:a9:05:3c:ea:2e:ec:9d:73:
54:fe:03:71:42:03:41:dc:60:ad:c4:74:16:46:e2:
9e:1b:e4:55:db:a0:7a:f1:2e:67:02:39:d0:c5:ff:
d5:24:c6:fa:e6:b5:14:e5:97:e6:59:32:a8:57:51:
b8:72:bf:ac:d9:73:da:29:1f:fc:18:f8:1e:9c:01:
6f:f8:27:25:93:c7:53:45:d9:92:35:94:a3:36:d3:
cb:0e:77:03:23:03:ce:8f:2a:9e:ba:aa:a8:c1:ae:
68:0e:5b:e4:80:94:03:f9:f0:a1:ee:98:a2:0a:83:
3f:c3:22:f9:a6:7e:c4:3c:f1:96:38:bd:78:2f:7f:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:64:E0:14:0B:FB:CE:51:65:2D:5B:02:17:CA:FA:5A:EF:94:91
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1e:e0:11:be:61:a0:ff:22:6d:44:77:fc:4b:f0:32:95:29:
39:2f:35:80:3e:07:f4:86:5b:a6:39:2c:b2:ba:8a:88:91:d8:
34:5c:fd:bd:77:63:94:fe:1e:49:a2:24:45:89:bf:3d:c5:37:
3e:d8:78:be:7a:df:e0:68:19:91:41:bb:3c:31:26:4b:53:a0:
71:b7:4b:5f:83:d1:1a:17:d7:ba:32:c0:ea:cf:99:38:bd:3a:
10:fd:b1:4c:3f:38:87:56:1d:ca:10:ec:3d:d6:a9:d0:11:ed:
aa:d7:fa:15:d1:03:47:61:6e:c5:58:1e:05:62:13:d0:32:47:
6c:46:b3:bc:b8:c3:7c:b0:f7:f9:28:ac:ae:26:79:79:7b:59:
8c:6d:7c:5c:02:18:dd:b7:df:2c:dc:24:1b:e3:77:65:17:82:
ae:01:32:32:0a:f0:23:57:25:a0:d5:5f:6e:b6:46:d0:9c:1d:
34:0f:85:10:8e:f5:67:3c:ed:b0:51:1a:c9:91:0e:81:a3:86:
a9:22:93:7e:fb:60:6c:ae:1a:67:34:fa:02:25:f9:ac:c4:ed:
48:dc:76:fb:47:8b:35:36:83:7e:a1:b9:4b:ea:60:09:6f:19:
a0:23:45:3a:bd:76:ee:16:77:06:33:e2:ad:6b:fd:25:cd:ff:
20:3b:be:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:48 2025 by rpki-client