Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: kg8YyA53fD5RXk8hI2O1n/67VW7erGmFuyNd6Bt4vdo=
Subject key identifier: 27:07:9F:17:55:7A:40:D3:7E:CE:0F:92:48:BA:5B:94:F7:5F:31:F6
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019874F4C3957F914427702046B2D3FFD817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 12:00:54 +0000
Manifest this update: Mon 04 Aug 2025 12:00:54 +0000
Manifest next update: Tue 05 Aug 2025 12:00:54 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: AsQ1gdSOc0zZ7eHFVzVJS3rlYX2orh2zUdN41Plwogg=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:c3:95:7f:91:44:27:70:20:46:b2:d3:ff:d8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Aug 4 12:00:54 2025 GMT
Not After : Aug 5 12:00:54 2025 GMT
Subject: CN=27079f17557a40d37ece0f9248ba5b94f75f31f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:da:6a:90:41:cb:42:17:55:c4:41:20:e7:
4c:14:ea:a1:21:08:ac:f1:a8:4f:e9:b7:fb:3f:14:
73:60:74:87:3b:c6:90:db:f6:7b:95:2e:6d:a4:f4:
da:73:40:fa:4a:5d:8c:56:7b:21:69:46:1d:1e:0d:
2c:2d:1e:a4:f1:c7:16:34:d7:a9:ab:a0:9e:73:b4:
96:38:21:e3:13:ab:4c:45:96:08:42:8e:8b:ce:9b:
bd:40:91:7a:52:98:b4:c7:dc:68:07:8e:8d:c6:56:
4c:eb:d6:a9:6c:4a:97:25:ab:eb:4a:bc:9d:c5:87:
a6:a5:0f:82:91:d0:a4:af:6e:4f:40:07:3b:b6:6a:
91:5e:8c:09:d7:37:ce:25:65:57:ae:c1:f6:18:73:
2b:8f:e7:64:01:79:c1:f9:36:b2:e3:30:3c:b8:29:
50:30:13:73:0b:49:0c:a5:f2:05:ce:9a:90:c4:77:
15:01:69:94:c6:4e:89:93:0b:58:a6:71:a1:db:5b:
19:81:fe:55:a8:a2:54:2c:ac:bc:03:01:97:31:29:
60:a0:54:0d:ac:9a:e7:05:2f:7f:bc:05:72:7b:3a:
f9:b6:5c:e4:34:9b:45:c9:15:7e:0b:c6:e6:e3:0c:
f0:e9:27:25:dd:1e:38:41:55:19:de:80:c4:69:e3:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:9F:17:55:7A:40:D3:7E:CE:0F:92:48:BA:5B:94:F7:5F:31:F6
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:44:59:71:37:bf:34:fe:3f:a5:05:6b:ac:6f:0b:c0:0b:45:
ad:df:02:ec:17:33:a3:b0:82:94:31:25:20:23:7a:31:a3:0b:
ca:da:07:72:d4:80:0c:3a:40:01:2c:9d:4f:87:d5:a1:35:79:
cd:4b:31:ed:39:3e:1c:aa:d8:83:c3:78:13:c6:36:ec:30:d8:
69:e9:79:80:9f:76:97:15:6e:e8:b6:0d:c1:fd:d0:82:0d:8a:
04:d5:74:91:24:e5:d7:32:d2:e6:ce:4a:fc:68:f3:13:19:3d:
9d:d6:40:c8:79:7d:2a:ee:50:5b:a7:ee:41:63:53:1f:2c:7a:
5e:13:a5:5d:19:e9:ae:e2:c4:ac:e8:c9:b7:d5:43:85:ed:18:
5d:48:c0:a8:2d:4e:33:ec:ee:98:f4:eb:9c:47:9b:52:eb:3a:
de:83:d6:b4:36:39:09:46:26:23:2b:8a:81:5c:3e:3c:2e:bd:
3e:49:c8:61:bf:f3:dc:68:ac:bc:ce:5d:9f:1d:e9:d0:66:5a:
d1:83:b3:a5:e0:74:6f:ca:a3:ef:00:7b:a3:f3:e1:19:b2:d2:
4d:ef:31:13:dc:1f:bf:2f:98:48:79:6c:c5:4b:8d:74:2a:9c:
30:83:53:e9:f0:8e:40:e5:f6:cf:94:1f:2c:7a:6f:3f:80:ad:
8f:46:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:17 2025 by rpki-client