Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: Otu+UnjoOMSF4pgvPRX58I4cl6FMhurOvUFNY+NwPPw=
Subject key identifier: E8:A6:08:2C:96:58:59:CD:D4:A2:11:CC:78:A9:AA:0F:7F:B6:78:90
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019864DD80212F1A79443D02A3DAE553F82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 1615
Signing time: Fri 01 Aug 2025 09:01:34 +0000
Manifest this update: Fri 01 Aug 2025 09:01:34 +0000
Manifest next update: Sat 02 Aug 2025 09:01:34 +0000
Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: c3ROJftyxDJOBHwT5sr6NylTkOXt1BbVredgbbjYnk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:dd:80:21:2f:1a:79:44:3d:02:a3:da:e5:53:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Aug 1 09:01:34 2025 GMT
Not After : Aug 2 09:01:34 2025 GMT
Subject: CN=e8a6082c965859cdd4a211cc78a9aa0f7fb67890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:be:98:51:6e:20:74:7b:0e:53:41:86:cc:
e7:a8:af:fa:4f:61:49:48:0b:5e:69:ef:c9:11:94:
e6:09:4b:82:af:36:f5:7d:a4:ee:1d:21:f5:08:99:
7f:ac:2e:5b:f7:60:7e:39:85:9a:a4:c3:b4:c1:c8:
18:c0:4d:53:da:09:c1:1d:0e:5e:69:a3:5e:d6:67:
95:59:84:17:e1:c5:d9:1d:4b:4a:96:38:fe:67:28:
7a:8a:5e:4b:b5:53:e7:2d:0a:a9:2a:8c:60:4b:bf:
7d:53:ab:de:05:25:c2:8f:bf:33:c9:02:68:2a:64:
07:f6:45:ba:fc:5d:d1:b5:95:de:7d:de:b8:c2:1d:
66:33:0b:fc:7a:b9:21:d8:6f:eb:93:a2:26:6a:7b:
d2:1f:c3:02:5d:4e:07:ae:0d:e1:80:97:2a:87:55:
cb:df:d1:68:c8:ec:b5:e4:72:1c:0b:ef:e5:12:d7:
3c:db:a8:22:36:87:5c:8a:59:fe:50:94:c6:53:26:
84:82:b3:76:4e:aa:fa:7a:3f:70:6f:44:fa:bf:8b:
dd:52:5d:0c:08:8f:61:8e:c5:62:f5:59:6e:a9:f6:
09:08:aa:1e:e6:3c:16:92:2c:b5:b5:a8:7e:63:49:
d7:21:00:9b:9e:cc:94:e8:b3:ad:f7:80:a5:de:5d:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:08:2C:96:58:59:CD:D4:A2:11:CC:78:A9:AA:0F:7F:B6:78:90
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:84:0b:39:95:9e:be:59:a4:1d:a3:f2:1a:b8:3e:f7:05:47:
d9:44:04:6f:71:71:7e:31:89:03:38:e6:29:64:a4:df:7d:51:
1f:93:bb:36:3c:06:03:db:f3:62:00:dd:0d:5a:57:0a:2c:77:
20:a7:10:1f:42:90:af:ec:1d:22:2a:58:04:9a:c7:a8:ba:ee:
bc:7c:29:45:37:49:b9:f8:1b:21:8a:64:81:e9:6c:ce:8f:a0:
6e:75:c1:96:78:29:a4:cb:0e:18:dd:20:ea:97:b4:96:48:6f:
7f:20:89:15:db:c0:0a:25:bc:d8:52:2f:9a:8b:6a:d3:d6:ff:
02:5f:e7:9d:f5:8c:99:f7:f8:9c:e7:fa:ad:ed:8e:1b:64:24:
3b:fd:1d:b3:d0:b7:ae:66:7f:7e:e5:2f:0d:30:b8:9e:7d:99:
8f:f9:18:44:0a:c2:a5:80:2c:b4:9f:11:a5:50:4a:08:95:a0:
9b:6e:48:5b:5d:9b:44:6d:4d:d2:5a:c4:bf:6e:d4:41:9c:b5:
73:03:c3:ac:20:66:78:3d:ef:a8:fe:7f:93:99:da:e5:a7:2d:
fd:f7:50:fb:00:b9:02:57:96:67:82:39:76:c0:b8:4b:04:23:
6b:e0:cd:3e:12:ef:be:ec:82:29:3d:e3:40:57:f0:15:50:15:
df:64:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:51 2025 by rpki-client