Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: 5Ucge2UnyKl+HiHnjqAu+Fccnlyuo2CLTwTsh2PLg3w=
Subject key identifier: 19:5C:50:A3:4D:4E:FD:C8:4D:84:1C:3C:6C:C0:47:95:4C:25:17:0E
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 01987F78A7E0605E512C06593F6431DE3A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 154C
Signing time: Wed 06 Aug 2025 13:01:10 +0000
Manifest this update: Wed 06 Aug 2025 13:01:10 +0000
Manifest next update: Thu 07 Aug 2025 13:01:10 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: XVMp/CzXZST8DtAq1yJZaKDzfAQk0fIOA8gFGAyv8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:a7:e0:60:5e:51:2c:06:59:3f:64:31:de:3a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Aug 6 13:01:10 2025 GMT
Not After : Aug 7 13:01:10 2025 GMT
Subject: CN=195c50a34d4efdc84d841c3c6cc047954c25170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:a2:7e:7b:ca:89:ab:dc:1e:2f:56:44:13:
d3:bf:51:ae:ad:97:9b:a3:1c:dd:d7:fe:da:e2:da:
3c:3d:7b:36:3a:75:ee:ed:a6:08:c7:e2:cf:b6:f2:
87:2e:60:6e:e7:f0:e0:ad:06:d6:a0:bf:a0:21:d7:
62:2e:0f:b5:ef:d2:25:67:fe:71:58:91:7e:4d:ab:
5f:1b:9e:0c:30:0e:84:a1:66:42:aa:f6:e0:85:33:
83:37:54:b7:0e:1f:3b:56:01:1b:d9:81:a5:a3:eb:
ef:60:49:a0:a8:48:3d:94:7e:ea:47:95:a1:05:e1:
7c:2c:a1:f6:9d:5a:a0:a1:4a:0e:80:4b:2e:42:d6:
0f:c8:53:e5:9d:50:8e:a0:dd:e7:01:29:83:9d:9a:
10:c6:75:6f:6f:3a:5f:f8:30:2e:67:2c:9e:05:c6:
75:dd:11:8f:41:74:85:dd:04:e5:3f:6f:3f:76:ba:
19:73:72:08:77:67:c0:62:ea:28:af:d8:1f:1a:07:
b5:aa:77:25:2e:8a:55:89:08:cf:3c:01:e1:71:f6:
98:f6:a6:99:4e:09:43:3e:de:84:6e:9b:e4:dd:e4:
bb:65:91:48:09:a2:9e:20:79:79:55:9c:7d:58:8f:
81:31:12:7f:f4:c0:8e:51:ee:da:15:28:40:30:23:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:50:A3:4D:4E:FD:C8:4D:84:1C:3C:6C:C0:47:95:4C:25:17:0E
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d4:45:a5:1d:e1:a2:70:e4:21:9a:78:ff:0d:9e:dc:f7:32:
81:bd:68:d4:ba:67:0f:ef:0f:47:ee:04:0a:25:9f:87:df:69:
37:7f:8b:10:47:8f:0d:06:1c:40:bd:5f:03:b9:b4:b7:98:6a:
51:0c:d2:7f:ba:a7:f1:44:cc:9f:ae:68:44:e7:e7:5c:d9:d6:
db:9d:1b:0c:5d:d3:1f:a1:83:b2:eb:7e:31:87:0c:79:b9:0d:
ab:7a:9f:98:82:26:ce:a8:df:12:4c:6a:7c:1e:13:b6:6d:eb:
81:97:cb:64:ac:80:77:de:39:73:7a:ee:27:b3:56:58:ff:90:
38:74:e0:6e:61:78:c7:66:38:20:03:94:c1:1a:89:01:35:61:
38:88:fe:52:7b:58:98:b5:62:9b:49:5c:11:68:98:f1:96:68:
de:7d:1a:77:67:fd:2a:cf:ff:5d:fa:2c:ff:e9:42:e9:28:1b:
a3:4a:13:31:25:8e:96:e9:94:78:0c:b9:19:18:d6:30:e6:05:
a6:43:47:cd:94:a5:0c:36:58:bf:a0:45:96:49:04:48:34:8c:
38:a2:9c:7e:68:89:95:7e:f7:9c:bf:49:b7:a1:f8:b3:fb:d4:
59:20:62:f4:b8:ac:00:d7:24:f4:97:e5:62:ed:94:c7:19:62:
32:d8:2e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:25 2025 by rpki-client