Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: krAkYgllOOkDF6ULD6roueNExFZ4j649Wp7Vp7ocMdI=
Subject key identifier: 79:05:FB:34:94:87:E8:26:D1:5D:66:59:6A:61:16:FA:9D:71:F1:89
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01987306E481CBB3316AEB8BCD62EA8BD81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 12AA
Signing time: Mon 04 Aug 2025 03:01:28 +0000
Manifest this update: Mon 04 Aug 2025 03:01:28 +0000
Manifest next update: Tue 05 Aug 2025 03:01:28 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: zk2rrGuixxAfgnvmIm0cqHKQC1r0S0enZ7hAZCy0o3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:e4:81:cb:b3:31:6a:eb:8b:cd:62:ea:8b:d8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Aug 4 03:01:28 2025 GMT
Not After : Aug 5 03:01:28 2025 GMT
Subject: CN=7905fb349487e826d15d66596a6116fa9d71f189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:ef:86:d0:8a:41:08:f5:06:49:7e:b8:32:
da:e5:0f:e0:a2:d4:b1:15:8f:6a:86:9f:a0:29:20:
84:6d:fe:9c:f5:21:24:bf:0c:20:63:24:c8:2b:39:
da:64:a3:90:ee:71:3f:f7:24:fd:ee:db:28:b8:d3:
8c:9d:b8:a7:47:39:4e:a2:63:e5:3b:61:84:14:aa:
05:ff:12:53:63:e0:e1:58:83:2c:37:aa:73:d0:94:
59:e8:1b:61:55:6e:c9:fe:d6:e8:2a:3b:32:5a:ee:
fd:2a:13:1a:d6:5b:e5:0e:1e:e2:d5:1d:3c:bc:8f:
ae:06:3e:3c:d9:8b:70:70:cf:90:75:52:91:2b:d3:
81:18:e5:60:fa:85:5c:b3:60:f0:1a:24:ea:22:f7:
b2:19:11:4d:68:2d:33:e1:05:01:6b:a4:cc:8f:c2:
ff:6d:9d:b8:0c:e4:86:83:c0:a4:05:94:b6:1b:7e:
76:8d:3a:88:af:69:b1:3a:b9:d5:e0:f3:59:37:64:
78:8d:55:ef:30:11:b4:61:4b:81:cd:4e:b6:cb:12:
e4:8e:57:bd:0b:e7:f6:79:1d:dc:2c:cd:a5:93:15:
b9:ff:96:02:c9:3c:86:f8:1c:8b:3e:3f:62:ea:dd:
f8:ef:01:c9:4b:27:5e:71:d9:fe:a5:63:44:18:88:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:05:FB:34:94:87:E8:26:D1:5D:66:59:6A:61:16:FA:9D:71:F1:89
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b4:60:74:c2:11:49:99:80:44:45:57:b1:8f:85:46:e0:2b:
35:95:c2:c6:fe:f3:e5:e2:80:1f:9f:8c:05:82:60:2e:4a:46:
73:fe:15:46:1d:ce:23:89:5f:a7:ff:af:cd:34:56:d9:12:6f:
e3:81:c7:a9:d2:c4:1a:3c:ac:4f:60:da:54:ef:45:ab:56:d8:
a9:75:d1:10:28:67:7e:f2:70:d6:36:56:43:31:b2:3a:59:ad:
cb:5a:69:d1:cf:ce:47:7b:d6:8c:4e:69:09:d1:3c:a6:f9:2a:
aa:d8:03:87:31:1c:4d:ba:1f:30:00:91:43:f7:cf:7c:b5:20:
76:09:e9:77:cf:78:be:e0:84:a6:bb:d8:3d:9c:e7:cf:5d:63:
40:3c:47:0c:ce:e9:64:aa:d0:24:60:e5:f6:4a:6c:5e:c5:de:
80:ca:33:30:51:7d:5f:a0:24:ac:3c:42:40:6c:5f:24:ae:2c:
35:4a:2e:ad:b3:4b:4b:9b:4e:31:71:36:2d:da:c5:d0:18:31:
38:30:0d:56:7a:da:ef:4f:98:e8:eb:f6:3b:b7:05:55:07:5f:
cc:5c:8b:fe:0a:3f:2e:57:ea:9a:ab:7f:77:dc:af:21:ed:41:
79:f8:d0:f2:dc:85:76:c5:75:f1:14:32:20:ac:62:c9:ca:aa:
67:89:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:21 2025 by rpki-client