Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: AprEjXblahO/NATKLQLHwkvl64/86+JxMNqBC+Qdyxg=
Subject key identifier: 6F:00:8A:DD:B0:FD:08:68:5C:4D:63:E1:D2:6B:DC:20:16:41:82:45
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 0198499BEC08E8823E2FFC7956384271191C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 15D0
Signing time: Sun 27 Jul 2025 02:00:11 +0000
Manifest this update: Sun 27 Jul 2025 02:00:11 +0000
Manifest next update: Mon 28 Jul 2025 02:00:11 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: JQL3xoYY5FAcOpEqfhhrWPN5GTcw28jq/CS4wfuUmGA=)
2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:ec:08:e8:82:3e:2f:fc:79:56:38:42:71:19:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Jul 27 02:00:11 2025 GMT
Not After : Jul 28 02:00:11 2025 GMT
Subject: CN=6f008addb0fd08685c4d63e1d26bdc2016418245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:b2:73:f3:78:77:4a:61:ac:23:17:8f:60:
0d:e4:c4:3c:26:65:ea:54:94:5e:2c:e2:16:5c:85:
b2:b1:28:c2:b0:16:b9:d9:82:fd:3a:b7:76:af:04:
8c:b6:eb:11:d6:3a:73:19:4e:15:e8:24:8e:bd:52:
4a:18:19:0d:97:85:58:91:e5:24:2c:2b:2b:6f:19:
4c:7d:98:81:ae:df:8b:1f:fc:e4:0d:c6:38:50:6b:
31:ad:d0:54:5d:0d:df:40:ba:77:d2:92:cf:9a:d9:
c7:28:15:25:2f:93:6f:45:85:37:f9:c3:15:21:04:
6a:41:3d:23:60:86:45:f2:2c:d9:28:cd:b5:e7:fe:
43:b7:65:a7:55:64:91:17:5c:8c:90:77:cf:ff:6a:
17:ec:75:41:87:9f:c8:e4:a1:56:ac:d3:c6:2d:21:
84:3e:71:ea:29:a0:fa:d6:35:5d:89:fa:66:76:d1:
94:c9:1c:8d:2c:5b:2c:08:12:df:73:22:c0:4c:92:
bc:87:4f:3e:96:55:30:6b:48:93:bd:eb:e3:21:c3:
6f:d7:d7:e9:96:98:06:fd:05:00:55:79:cd:e1:54:
43:05:82:20:34:5f:7d:ec:f0:13:06:fa:76:71:e0:
30:d8:70:46:39:23:9f:16:56:99:9a:d1:3e:9e:3b:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:00:8A:DD:B0:FD:08:68:5C:4D:63:E1:D2:6B:DC:20:16:41:82:45
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:63:0a:2f:46:50:a6:13:d7:f9:59:72:4d:37:a3:dc:1f:40:
27:68:af:3c:2f:e9:e3:cc:14:5a:69:63:60:59:96:d1:0a:8a:
cf:eb:5b:bc:a8:48:4c:12:74:f7:92:4e:23:29:ee:9e:fb:03:
32:c4:8f:75:3e:01:1f:b5:5e:66:69:8c:31:23:47:0d:37:df:
88:00:f2:d6:97:e2:41:78:6e:68:d8:88:a7:27:cb:c8:c3:92:
17:8a:eb:0b:85:72:92:70:97:c2:3a:85:d9:a2:ff:55:3b:37:
84:7b:3d:11:87:de:0a:a6:48:09:1f:0b:dc:30:dd:98:b7:29:
a1:c8:5c:d8:a1:c3:6c:f3:06:3e:34:b8:74:83:a8:f7:9a:c2:
7f:1b:af:a0:e0:2d:5a:86:26:1f:a0:43:0e:5e:29:64:38:72:
35:0c:01:82:32:ca:13:a7:1c:cb:0b:ac:f5:28:23:b7:75:c3:
1c:a4:1f:21:c0:a5:62:78:24:03:16:02:8d:98:d8:9f:5f:56:
41:b9:fa:a1:a6:af:19:dd:23:07:d5:2e:df:08:d9:65:5f:fa:
4b:1a:94:c0:a5:78:ca:cb:31:c1:64:36:69:21:e5:97:13:0a:
1f:36:82:a6:ff:62:f4:81:ad:b2:1f:02:f3:30:8d:8d:84:db:
51:21:ca:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:05:45 2025 by rpki-client