Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
File: R_hjAUxgM_HYkkKz5elWFIn5wmo.mft (raw, json)
Hash identifier: RhpN7iALfXfxkic57Im00ZAVRvszA60lwwboYlxTCN4=
Subject key identifier: 6D:0E:50:A1:5C:85:60:97:79:DC:5E:BC:6D:97:31:65:EF:53:01:A6
Authority key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Certificate issuer: /CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Certificate serial: 0198A6BD0EA163DCF79022A317FBA53F0AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
Manifest number: 14
Signing time: Thu 14 Aug 2025 04:01:04 +0000
Manifest this update: Thu 14 Aug 2025 04:01:04 +0000
Manifest next update: Fri 15 Aug 2025 04:01:04 +0000
Files and hashes: 1: B9bjJc5Oae9PEKPXIiXsKsSs9WQ.roa (hash: KKshRszJ3ZpgC0vij+vjmzbzFw7agfxG++MlKjyF07Y=)
2: R_hjAUxgM_HYkkKz5elWFIn5wmo.crl (hash: lIwaBnQ261Y86Hmpuy93SBPF0JLIUTPttPoKJnTh7oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 Aug 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a6:bd:0e:a1:63:dc:f7:90:22:a3:17:fb:a5:3f:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Validity
Not Before: Aug 14 04:01:04 2025 GMT
Not After : Aug 15 04:01:04 2025 GMT
Subject: CN=6d0e50a15c85609779dc5ebc6d973165ef5301a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:67:3e:9e:76:c6:47:dd:19:30:9a:b6:1a:
85:f7:6e:70:dc:3d:32:81:a6:d8:21:46:16:42:1c:
7c:15:19:2c:24:ea:5c:03:9e:ad:29:dc:09:e8:95:
f2:52:a6:76:20:bb:74:7a:8c:18:a4:c9:23:dd:66:
4a:70:e5:61:e6:43:61:97:8e:a9:5a:09:27:be:b9:
a7:b4:d1:d4:23:f4:72:4f:c7:00:17:b8:68:07:28:
96:72:01:74:fc:13:14:ed:cc:fe:00:3c:32:5b:38:
8f:8d:e5:5c:3a:6a:ca:7a:b2:61:cc:47:9c:94:8d:
e1:b8:98:54:34:db:b4:9f:2d:72:57:46:e0:d8:7a:
5c:5f:7e:6f:cd:07:1d:9c:70:1d:ca:e4:75:8a:71:
82:a8:a8:0f:f0:cb:40:19:26:ce:02:b2:b0:67:4d:
5b:15:e0:b6:19:2a:50:0d:09:fb:c6:98:65:04:a2:
3a:c0:c9:42:a7:c0:63:ad:79:19:8f:a3:f3:48:2f:
46:1a:93:df:b5:0e:39:d9:4e:a4:65:2d:a8:b7:2b:
a8:f5:41:a6:dd:ef:ab:9b:f6:b7:9d:10:15:11:61:
4f:30:64:c8:b6:87:d0:a0:af:41:da:4d:8c:49:c0:
94:e7:d8:aa:8e:d2:8d:73:6c:f1:31:ae:d4:29:6e:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0E:50:A1:5C:85:60:97:79:DC:5E:BC:6D:97:31:65:EF:53:01:A6
X509v3 Authority Key Identifier:
keyid:47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b6:61:df:24:2c:bd:1d:b1:20:6a:9a:75:1a:df:2c:1c:12:
d0:6d:c0:f4:fe:4d:69:01:c4:a0:2f:ad:3d:ac:e9:71:93:c2:
e1:be:d8:d2:ce:e5:c5:01:31:1c:60:11:65:3e:c6:1d:b7:60:
e4:7b:c7:17:2c:04:73:66:ba:f9:bf:39:b3:69:ce:1d:34:fc:
cd:ee:a3:d2:85:35:e5:f1:4e:54:81:24:b4:a9:54:b4:ab:ae:
2f:63:8c:01:d7:11:db:39:cd:31:b2:22:07:bf:b6:e5:34:9a:
55:d5:e6:53:af:7f:64:a3:e4:cf:8b:fa:38:f9:3f:5e:6e:56:
f2:58:95:71:f1:79:cc:3b:b9:c4:1c:f9:7b:f6:1c:12:5e:5f:
f7:cf:f9:8f:00:e7:13:a8:8a:cd:4c:52:f2:a8:ca:54:1d:1d:
d5:2b:26:a3:37:f5:3d:7a:a0:34:90:52:c3:f5:7d:69:59:ac:
3c:41:bd:7c:0e:09:aa:08:4d:79:ff:8d:95:c1:8f:30:5d:75:
13:60:ab:6e:04:de:dd:9a:4f:82:9f:d3:b2:5c:b7:f7:b7:f3:
93:1b:48:2b:0c:73:f6:13:ae:6e:03:2d:ef:47:d7:c2:42:cf:
87:4e:c0:2f:cb:30:cf:c3:8b:e5:0f:9e:bd:d6:f6:2d:bc:17:
fe:ce:fd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 11:05:48 2025 by rpki-client