Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: L13XXIKzGsvysk7HO1OVB1vd7LYfd/uyx4nP7cowyws=
Subject key identifier: 74:CD:87:A7:DB:68:A5:D3:99:E4:22:B1:A0:E5:CB:17:FF:67:86:E5
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 019892C8FA5CC39B702AAD5FDEC2B8EE11F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 07:01:41 +0000
Manifest this update: Sun 10 Aug 2025 07:01:41 +0000
Manifest next update: Mon 11 Aug 2025 07:01:41 +0000
Files and hashes: 1: P7kra4ub5VF3YEJjz3ym8CwbAXA.roa (hash: AJEYR0xnzVy6utllNh8R4LIoanjGY6stnMXm+hMmUEo=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: Bcw/53IooWLib0Ogk1gZEBf+ifL2A5cn1h3tNFVox+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:fa:5c:c3:9b:70:2a:ad:5f:de:c2:b8:ee:11:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Aug 10 07:01:41 2025 GMT
Not After : Aug 11 07:01:41 2025 GMT
Subject: CN=74cd87a7db68a5d399e422b1a0e5cb17ff6786e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:be:b7:30:b6:51:37:46:4e:dd:94:45:1b:
94:48:29:1e:f9:2f:3f:1c:57:f7:0a:dc:f2:63:7f:
1d:df:67:94:b5:df:c0:08:f8:a8:0f:c7:26:01:41:
e8:85:92:93:92:ab:7b:28:10:56:a6:78:df:37:09:
97:ea:72:dd:7e:83:59:81:60:16:56:8f:2b:8f:86:
3b:bb:cb:e4:8e:67:91:48:7b:2a:39:3d:cf:43:24:
c8:ea:9d:49:32:33:3d:fb:83:66:1a:3f:1d:35:cc:
08:2c:3a:8e:bb:5a:4f:7b:28:07:a8:f4:81:34:58:
73:4f:05:9f:3e:99:f1:62:56:47:e7:e5:2a:f5:83:
9e:52:f4:45:0f:a0:c1:45:a5:e2:f7:bb:da:ce:cf:
cc:68:7a:ac:4e:36:20:c4:94:bc:1c:a9:23:d0:06:
d5:1c:d6:0e:1c:60:7a:21:15:73:06:45:b6:54:78:
0f:e5:9d:a3:ad:3d:07:96:8a:34:ee:9c:98:a3:4f:
7e:5e:8d:fa:6b:55:ab:6e:d7:5f:10:86:53:8e:76:
1a:f9:70:cd:98:56:73:49:6d:41:98:85:e3:15:b2:
ce:33:d2:6b:7f:13:3d:39:7c:98:ca:09:30:7e:35:
58:c1:e4:58:dc:68:c2:c4:e9:16:22:14:5c:11:94:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:87:A7:DB:68:A5:D3:99:E4:22:B1:A0:E5:CB:17:FF:67:86:E5
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:04:60:ea:0e:32:9a:ce:76:d4:f5:bb:6b:30:78:ed:3a:fa:
e7:5d:7b:74:fd:6c:5b:df:d7:9e:b1:3c:d7:39:d7:14:66:00:
33:ed:c7:44:19:97:5d:17:88:52:05:f3:20:7f:64:46:0b:c7:
6c:89:3e:93:8b:81:27:e2:80:58:1f:98:8a:43:2a:52:d3:05:
35:91:cd:6f:12:97:b9:8f:dc:c9:39:25:ff:b6:58:78:51:23:
34:e8:b9:5c:81:76:46:92:e6:c6:44:00:a4:d7:47:56:c1:71:
76:17:3e:9c:d9:40:c4:82:29:61:6b:01:f5:b9:a4:3b:8d:59:
2e:6e:fd:95:d2:68:4e:29:59:df:67:66:e1:8f:2b:48:b1:f2:
87:1e:0c:0f:01:fd:18:67:ad:b2:02:05:37:b1:18:16:16:bb:
30:8a:25:7a:3c:c5:27:5b:fa:7e:07:96:5e:63:1a:8f:5e:a7:
8d:e0:69:0f:3e:e4:43:b6:3a:f3:3d:8b:d7:fd:ca:62:bc:ab:
ef:ed:7e:a1:27:0b:7e:ee:d2:e7:21:5a:05:8d:51:3c:b8:0e:
4a:c3:3c:48:b0:1b:44:0b:58:cd:9c:91:06:2e:e2:a9:65:cb:
ec:b4:7f:e4:73:61:22:f0:f9:05:df:67:fa:25:d5:eb:3d:76:
21:da:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:12 2025 by rpki-client