Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: 7ydY05/OQMk1gygiTs29xlqkYgfeGPxzlzodIvXqCIY=
Subject key identifier: AD:AC:A9:9E:71:F2:6A:20:EE:34:C3:F6:E0:91:1F:59:E2:DD:89:F5
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 01985231BBE488CD119FC76E08390AB610A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 15DA
Signing time: Mon 28 Jul 2025 18:00:47 +0000
Manifest this update: Mon 28 Jul 2025 18:00:47 +0000
Manifest next update: Tue 29 Jul 2025 18:00:47 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: lJy2zt0b5ZNkHOdKgZ2pVQVPuuPYfEMFxPlusnYzQn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:bb:e4:88:cd:11:9f:c7:6e:08:39:0a:b6:10:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Jul 28 18:00:47 2025 GMT
Not After : Jul 29 18:00:47 2025 GMT
Subject: CN=adaca99e71f26a20ee34c3f6e0911f59e2dd89f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:87:43:c2:17:41:a4:67:97:9e:22:a2:b3:
a1:3f:f3:4e:ea:2d:7d:62:36:e3:9d:0b:49:67:e2:
81:29:50:25:74:93:65:ca:a9:f5:be:fc:f2:c6:92:
6d:42:43:86:e3:9a:11:6f:c9:4e:02:fa:79:eb:77:
a6:be:e7:48:26:2d:41:5d:16:7d:e0:81:4f:c5:dd:
2c:5d:ef:ea:77:9b:6b:3e:2e:f5:ad:87:04:c8:74:
63:3d:94:de:c5:aa:a9:dc:a6:af:ba:b1:b9:e4:59:
0b:7e:8c:d9:54:b0:8d:be:ad:70:4c:fe:8e:34:6f:
37:95:8f:5b:f3:9c:42:62:d6:ba:99:28:6a:36:de:
62:92:1d:99:2a:5e:0d:13:fb:0e:6b:7f:f9:65:ac:
22:b2:18:b0:70:f4:77:cd:d3:e1:db:c0:b8:33:fc:
50:0f:1a:93:3d:ca:3d:42:e0:35:e6:dd:b1:57:e7:
63:7b:c3:55:7e:5b:76:1b:fe:1e:f9:0e:7d:f1:f2:
c0:67:37:61:d5:4d:2c:33:07:dc:d2:0b:1e:23:4a:
c2:7e:79:b1:2f:71:77:e5:85:cb:0a:71:f6:fa:86:
2a:88:6c:d3:52:7a:95:74:bf:da:3e:c0:03:f7:ea:
e0:1f:9f:e6:5a:78:2c:f3:28:d9:dd:e6:02:35:f0:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:A9:9E:71:F2:6A:20:EE:34:C3:F6:E0:91:1F:59:E2:DD:89:F5
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:b3:ce:6f:ce:da:a3:cb:8e:8d:6a:7e:78:85:18:28:6d:
17:fa:07:5a:fb:41:a0:e6:45:cf:c2:72:66:e6:21:9d:c8:c1:
a4:a2:37:9e:03:f9:2f:9c:30:99:6c:52:29:97:bf:63:ea:fb:
59:fb:db:7a:c6:77:b6:96:f6:ce:8a:df:64:e0:14:2f:56:9c:
aa:a0:6c:ec:bc:26:de:cf:e4:d7:81:a6:62:ea:4e:6a:30:0b:
5c:1a:bc:ac:d3:2a:80:50:19:26:e7:f7:0d:81:2e:e2:29:9a:
3e:92:28:9b:bf:da:f2:bf:09:a0:7e:2d:cd:7d:26:d4:f6:d2:
8b:1c:2e:d6:ea:e1:ec:bf:4f:9a:cd:9f:e2:f8:dd:cf:2b:40:
a4:bf:29:a6:99:7e:49:4d:ac:fc:1c:e8:0a:74:ec:1d:c1:97:
b2:79:3f:29:d3:67:03:4f:32:64:d0:4e:88:82:01:47:54:b7:
a1:da:3e:32:98:83:8e:fa:5e:aa:4f:a1:be:4a:1f:fb:b8:e1:
6a:49:6f:0c:86:e0:19:3c:9d:fc:8b:e7:e9:ad:fa:ec:df:df:
1d:a9:c1:a6:9b:1a:c1:c0:8a:c3:82:29:0f:93:c7:d8:74:ac:
50:c9:f0:91:74:be:82:ff:f0:b3:76:5e:4d:a5:ee:17:c5:f6:
c8:f9:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:25:17 2025 by rpki-client