Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: SyLROwUy1NqSA2jB0ILkX1XTYbZMOtPSM9ksKu3LDJQ=
Subject key identifier: 40:1B:C0:AD:35:3C:B9:06:7C:A9:F5:5D:EA:90:22:6E:DC:DD:E8:EA
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 01989335DA755E64C785D873CE93EA304D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 068B
Signing time: Sun 10 Aug 2025 09:00:36 +0000
Manifest this update: Sun 10 Aug 2025 09:00:36 +0000
Manifest next update: Mon 11 Aug 2025 09:00:36 +0000
Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=)
2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: sMnXN+oO9zPzGhWA6jxKaDy5M2zqM5m4vSH5BqxzZh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:da:75:5e:64:c7:85:d8:73:ce:93:ea:30:4d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Aug 10 09:00:36 2025 GMT
Not After : Aug 11 09:00:36 2025 GMT
Subject: CN=401bc0ad353cb9067ca9f55dea90226edcdde8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:3b:89:69:fd:4f:ca:5f:63:89:6f:f8:b3:
4c:b0:75:e2:81:04:4d:f1:ad:7e:3f:13:5a:7b:9f:
79:cf:09:03:50:9b:bf:99:e2:cf:e1:05:50:63:b8:
68:e8:bc:9e:50:3e:71:15:45:8c:df:2c:a3:d9:97:
ee:07:fa:78:b4:f0:70:57:47:2c:17:69:7a:8d:55:
7b:61:59:41:79:93:f6:e6:71:c5:e1:07:32:43:e3:
6e:5b:3e:6a:52:a1:84:70:95:68:86:cc:49:ce:57:
6b:af:4b:0a:6c:d9:b7:13:47:5d:46:db:08:4e:32:
c9:24:43:10:c3:11:31:4a:81:0c:48:3d:a8:de:bd:
f0:ba:6b:9b:a1:8b:d9:49:4b:e0:80:95:b2:07:9c:
ec:b4:e4:be:8a:c6:ed:39:0c:82:da:3e:e1:f5:00:
60:09:d4:a4:1e:53:b0:43:60:a8:1a:6f:ad:ff:8d:
b2:64:f4:df:82:45:1d:7a:40:3d:8a:de:f1:03:59:
69:09:1c:56:f3:bf:06:93:2d:e2:08:20:c0:94:d1:
c8:bd:93:b7:40:ec:bd:8a:3e:3e:90:37:90:24:a5:
c4:32:38:2d:59:d5:a3:71:6d:7a:83:96:89:f9:c5:
d7:8b:1a:3e:0c:8e:e1:ef:91:2c:af:2f:b5:e5:32:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:C0:AD:35:3C:B9:06:7C:A9:F5:5D:EA:90:22:6E:DC:DD:E8:EA
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3b:fb:e1:3a:75:48:84:ef:88:b0:bd:61:d9:fd:78:82:aa:
c4:dc:49:30:a9:fb:f9:95:8c:c8:6b:9d:b6:de:ec:b0:29:87:
4e:92:ae:6d:1b:1e:5d:c6:6f:5f:71:6a:34:0c:09:02:70:7a:
1d:8a:17:fd:69:ac:01:85:79:b2:69:26:63:4d:a8:29:9b:cc:
9f:77:df:e0:90:7e:d3:bb:fd:64:e0:7b:d3:b4:e6:19:5d:38:
cb:43:c4:88:35:59:04:72:71:88:f5:23:26:46:93:10:f3:98:
b5:57:3a:64:9d:d3:98:cd:b2:5b:ad:35:4f:2e:74:8c:f0:1a:
c6:07:c4:3c:58:ae:ed:29:ac:01:e3:e7:28:d0:be:fa:03:3b:
ab:e5:0a:09:77:6e:c9:d5:54:a3:04:f5:e3:d0:81:a0:b0:95:
9a:32:3d:ad:56:dd:5c:b5:5a:1b:9a:cd:f5:3a:55:1c:18:27:
20:c2:93:0e:2c:77:b9:1d:df:55:77:81:d7:f3:b3:97:53:7d:
60:08:d7:3f:56:59:87:72:e2:40:12:07:f9:d3:3b:ab:c3:ea:
aa:42:42:49:ba:89:55:14:06:a4:b1:86:87:86:6a:d6:3d:f6:
4a:3c:9a:28:cf:bb:1a:3a:1d:18:ad:6b:4e:46:e7:e4:59:f6:
85:5b:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:36 2025 by rpki-client