Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: P0JLr7safZc88N87XM2bMkJ51a8G/YwhPdnOrcY+45s=
Subject key identifier: 3D:FD:D1:81:7A:E6:6C:83:69:BE:DB:7B:3A:B1:4A:10:86:94:79:6A
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 01984AAF1DC1027F5B0FA893A64D2A1061F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 0F0F
Signing time: Sun 27 Jul 2025 07:00:47 +0000
Manifest this update: Sun 27 Jul 2025 07:00:47 +0000
Manifest next update: Mon 28 Jul 2025 07:00:47 +0000
Files and hashes: 1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: WZd7N0gH5ShQq8hmn/+SMa+wY/AD4X4pdIrdZMjQIaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:1d:c1:02:7f:5b:0f:a8:93:a6:4d:2a:10:61:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Jul 27 07:00:47 2025 GMT
Not After : Jul 28 07:00:47 2025 GMT
Subject: CN=3dfdd1817ae66c8369bedb7b3ab14a108694796a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:62:e9:4d:80:83:8c:1f:de:40:a0:83:41:
a8:27:1c:c8:85:42:aa:f8:15:8d:bb:26:6f:d4:27:
af:01:8b:7a:4e:d6:9d:a2:69:be:88:c7:81:69:16:
15:5e:16:69:b8:ec:56:10:67:d4:11:bf:d1:58:82:
1f:b2:c4:6e:1a:70:db:d4:8b:5e:9e:28:e8:48:24:
5d:98:85:e9:38:8d:79:3c:7c:bf:14:08:1e:d6:91:
b5:08:7d:e6:c2:c2:24:1e:2e:2b:5a:c5:ad:d8:5b:
6d:ac:24:98:f8:60:1a:ac:4d:6b:3b:a9:fc:d3:98:
47:32:75:a7:a2:4c:3a:7d:af:ee:cf:77:90:29:8b:
4e:c8:4d:ce:b7:ff:2d:4c:ac:79:b9:57:75:8e:f2:
9d:df:e8:20:f9:45:41:ad:2d:6a:c7:13:de:30:44:
93:d9:37:8a:78:31:b1:7e:fa:8e:e8:8d:d3:33:e5:
ca:c8:a1:7b:f4:6f:65:22:00:cb:a5:22:95:8a:4d:
f5:f2:1f:32:9a:d9:b1:7a:4c:c7:af:71:d8:c3:9e:
bc:bc:d3:c3:b7:13:ee:1e:7e:e5:39:8e:cb:28:61:
cf:5c:69:da:54:51:04:f8:01:d0:81:8d:89:0a:af:
6e:bf:d1:06:08:26:ab:da:3f:10:c0:25:33:e1:25:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FD:D1:81:7A:E6:6C:83:69:BE:DB:7B:3A:B1:4A:10:86:94:79:6A
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ca:62:be:0a:6d:b3:a9:2f:af:be:d2:0f:f3:ce:26:30:e9:
f4:b5:9b:bf:36:c9:65:9e:9d:b2:65:dc:e4:89:dd:ed:7b:4f:
55:47:00:c7:27:45:1f:68:40:9c:d9:e4:e8:ac:e5:4b:07:8f:
b7:f3:cb:79:ce:c8:cc:3d:ea:ad:a1:5e:99:be:76:73:01:18:
9f:73:a9:a2:e1:9d:7a:cc:59:49:fd:a4:8d:8a:64:4d:60:31:
70:58:26:4d:12:0f:66:91:9f:9f:2c:32:f8:ab:09:76:1e:1f:
3e:f7:b1:dc:83:4c:12:99:5a:56:11:1c:77:e5:52:22:6b:50:
a7:96:07:3e:db:53:15:4e:8a:ed:06:c2:a5:5c:7c:58:4d:de:
7d:41:e5:3e:88:ef:d5:2a:72:27:6a:a5:35:58:c7:d9:db:ed:
9e:41:bc:89:60:38:a8:ea:65:89:bb:c0:f1:48:1e:5e:0d:2c:
3a:55:a4:27:0b:c6:53:79:28:0e:f9:a6:ad:b1:a1:19:2a:cc:
b2:47:49:ff:f7:97:43:93:6d:84:62:57:13:30:5d:63:e8:0d:
aa:1c:59:e5:b8:63:fa:a3:df:1e:10:21:c0:ba:9c:fa:e4:64:
aa:90:60:e9:49:05:31:68:bb:2f:e0:66:14:7c:1d:a2:ed:25:
3f:db:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:25 2025 by rpki-client