Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: I4znkvvV/UQC+93kq6ByXOvV7CHdhgSIr2hgyHcEkPc=
Subject key identifier: 35:59:A0:0B:52:30:1B:2A:22:63:5D:81:4B:DF:16:24:05:85:83:12
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 01987CE5033ECF1A9A2967D4BDA35FBE100C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 0295
Signing time: Wed 06 Aug 2025 01:00:39 +0000
Manifest this update: Wed 06 Aug 2025 01:00:39 +0000
Manifest next update: Thu 07 Aug 2025 01:00:39 +0000
Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: ejk7Xn1l3U3K7Dm68tIzMK4QKgxWdH6OGLUXOTrrZU0=)
2: lO_Mg3DZHEdW5_hWel-RB7XxrdI.roa (hash: mSvOkFvyMe8N8eCEVEp8qdqZ/KkLJkgUd3GK7ljSNTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:03:3e:cf:1a:9a:29:67:d4:bd:a3:5f:be:10:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Aug 6 01:00:39 2025 GMT
Not After : Aug 7 01:00:39 2025 GMT
Subject: CN=3559a00b52301b2a22635d814bdf162405858312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:8c:40:cb:25:2a:49:8c:5e:a0:c0:f9:2b:
b3:c1:76:94:4f:01:98:a8:a9:50:97:59:dd:bc:78:
6f:31:45:0c:c3:1a:a1:f7:b4:db:b6:48:30:22:a0:
f3:30:e3:80:e7:54:de:0d:dc:96:43:48:ec:3e:61:
ea:ab:41:b2:e0:f1:1d:bd:e4:a3:7a:3a:c3:dc:9c:
bb:1a:cf:6c:59:05:1b:f0:76:db:12:05:fe:16:ba:
36:1a:42:7f:01:cc:0e:40:96:5c:5a:c7:cc:dd:fa:
94:1a:dc:d0:15:11:79:82:f3:2d:4b:41:bf:97:12:
b2:e2:d4:45:e0:97:0f:55:ed:a5:94:f8:fa:73:75:
cb:29:a2:7f:4b:5b:33:e3:73:82:d0:9a:47:fd:f8:
99:54:41:d1:8d:2c:d0:6a:4c:84:9d:84:e2:92:64:
a6:98:a0:f8:e6:62:7b:06:64:b2:29:60:64:f3:4b:
2a:dd:be:cf:78:34:48:17:1a:dd:d9:b4:e5:7b:84:
15:79:43:1b:cb:fd:f5:b5:2c:31:b6:77:f4:ef:d6:
c3:cd:0a:aa:54:08:34:b7:c4:d9:05:4e:77:d6:c3:
28:2c:ea:72:77:ed:4a:06:67:8a:5c:04:26:56:de:
9a:d1:43:d5:3c:d0:93:8b:8a:5b:89:d7:c6:9d:43:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:A0:0B:52:30:1B:2A:22:63:5D:81:4B:DF:16:24:05:85:83:12
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:62:cb:b8:90:30:93:61:87:46:4e:f1:4e:ac:ab:55:51:69:
a4:3f:77:4f:5a:fd:6a:8f:15:66:ba:f6:dc:23:f4:b7:7f:bd:
b4:5b:11:02:db:59:e4:43:ff:e5:77:c0:32:9d:cc:85:f3:c4:
40:e3:89:95:87:9e:13:f7:23:a3:0f:29:50:1d:75:6b:b1:7b:
b3:bd:30:66:8e:a8:86:06:1c:b5:ba:68:81:98:09:1a:7a:2c:
8e:80:9b:df:fb:06:1a:23:00:62:96:87:49:f9:cb:b2:6d:22:
03:ee:9a:21:00:7d:5f:47:ac:3e:c6:fa:0b:d2:64:02:ed:1a:
4c:c4:56:2a:fb:26:99:46:66:d2:a6:63:4f:12:f3:f5:6a:c2:
b6:eb:7e:f9:2f:22:fe:e7:0c:87:39:51:5b:88:90:7e:1e:31:
3b:a8:44:b2:cb:f2:73:38:16:c4:d8:f7:0d:19:3e:80:2a:c0:
58:d7:64:4b:dc:a7:d2:7c:6a:6e:0c:cc:09:fa:5f:fb:3a:d6:
03:21:cb:73:d8:a4:df:47:fc:67:69:81:6e:34:86:d3:0e:2a:
ab:8b:d9:a6:11:05:e7:f6:1b:ce:d8:0f:a7:e9:21:22:59:0b:
22:4e:90:a6:1a:69:77:f9:a6:14:3a:fa:30:c7:11:ec:a5:02:
8b:b6:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:58 2025 by rpki-client