Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: fMf1JFKFv30aS0CTklZXwkOzVo2+IDxjq7OJnFDb3DA=
Subject key identifier: 4D:2C:6F:E2:1B:7F:E9:E0:28:96:D5:95:C9:82:60:0E:FC:AF:26:BD
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 01984AE59A19EC088E2399DF29975FBB6238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 12CB
Signing time: Sun 27 Jul 2025 08:00:17 +0000
Manifest this update: Sun 27 Jul 2025 08:00:17 +0000
Manifest next update: Mon 28 Jul 2025 08:00:17 +0000
Files and hashes: 1: gTuMJj4zNk4inmWeuwHt2oopg5M.roa (hash: zopPOsMBU8dt9Dr0i+LUD1TPbnQUzJ4uDKxUzfrnRiY=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: rxeoxkuOczbPv8Xq7E1i/G/ow/bgDU4UgiX17RroxcA=)
3: rnwY-7oYw6V-trqxlfGxfeIKZIY.roa (hash: Yep0/R2aV0HSvC5J3JSqbOslIcQ/KKdPdI5bChqi8Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:9a:19:ec:08:8e:23:99:df:29:97:5f:bb:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jul 27 08:00:17 2025 GMT
Not After : Jul 28 08:00:17 2025 GMT
Subject: CN=4d2c6fe21b7fe9e02896d595c982600efcaf26bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:cb:6d:f5:c2:50:a2:df:76:cb:9a:bd:48:
fc:a0:b9:56:93:2a:25:27:67:ff:ab:14:09:8d:6d:
0f:48:7e:23:d1:7f:82:c4:9a:38:42:05:c5:7b:ce:
25:3d:c3:dc:5f:d8:d4:cc:cc:1b:29:21:91:b5:a2:
cb:1d:2e:81:83:f1:30:45:07:fb:a1:10:4c:06:d3:
5b:e2:45:2f:3b:ac:1d:cc:cb:59:ec:5d:5e:24:99:
f5:03:6c:c2:c0:e8:c1:05:89:57:ea:96:0f:35:aa:
43:41:43:d9:5a:92:fa:4d:a7:17:65:1e:33:0d:2d:
0a:1f:fe:20:63:08:67:71:41:29:2c:2d:99:11:a6:
36:5f:59:04:22:eb:55:91:ec:9a:98:f6:33:73:cf:
70:a3:21:13:27:55:57:84:62:dc:c8:77:b1:ec:cc:
be:de:51:2c:7b:19:eb:c0:16:96:5a:d9:0b:e5:4f:
2c:d1:cb:c7:bf:ef:a4:89:c0:d6:d0:ef:12:5e:22:
80:f7:62:44:6e:20:96:93:30:6d:ad:bc:79:f7:82:
11:7f:2c:8a:cd:1d:96:28:24:61:56:e6:3a:d8:11:
57:28:a8:43:b3:bb:f4:72:09:50:1c:40:a1:18:28:
5d:53:b1:67:72:34:1f:5d:57:7e:42:b9:b1:43:29:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:6F:E2:1B:7F:E9:E0:28:96:D5:95:C9:82:60:0E:FC:AF:26:BD
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7e:cb:02:73:83:b6:b6:d0:b2:93:3b:78:08:10:dd:f8:75:
e9:78:94:18:1f:c3:1b:95:1d:ff:c9:3f:2f:a6:f7:e9:5a:71:
e5:54:f9:83:3f:27:3f:d3:0c:ea:db:a7:ff:61:53:92:ec:a7:
42:19:dd:8b:01:52:c8:6c:a7:f1:62:05:ee:6e:6f:67:58:66:
a1:dd:d6:b1:46:a6:9a:eb:03:dd:ea:87:a4:c9:74:ea:ca:65:
66:8c:15:41:f0:09:91:7b:ee:cc:34:a1:75:ab:6c:d1:fc:16:
dd:0f:3d:ef:b5:8b:f0:e5:71:0f:f4:32:20:d3:3f:46:7f:66:
9a:25:da:d8:6d:04:44:e9:d8:16:d2:2d:60:0f:8a:b2:f3:59:
f6:4d:9f:7b:9c:cb:f4:05:f3:f5:48:08:29:72:f0:fd:b5:e3:
c3:ca:07:91:dd:12:57:88:b3:8a:2b:f3:cc:1c:7e:04:52:af:
d2:89:56:fa:3c:b0:77:f6:33:80:eb:e2:c6:b2:65:3a:98:a8:
c8:d8:22:ac:b2:29:a1:41:ed:a9:af:f3:fa:f0:57:f6:2d:86:
05:df:f0:b8:15:3d:42:b1:75:89:6d:0f:3f:a5:ad:44:ec:d6:
e8:82:11:cc:b1:6d:22:b7:a6:39:5a:d9:9b:12:e3:e5:12:65:
98:b1:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:19:01 2025 by rpki-client