Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
File: hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft (raw, json)
Hash identifier: g/rldi0HckbJmf1S+bQ3u1agQCy/pbi6fiFMAa4ljZk=
Subject key identifier: 77:20:CC:1A:5F:A7:F0:1F:DE:B7:80:42:08:19:70:83:B0:E9:6D:5C
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 0198556A6051314DB8BBC1A020130B125D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
Manifest number: 1612
Signing time: Tue 29 Jul 2025 09:01:31 +0000
Manifest this update: Tue 29 Jul 2025 09:01:31 +0000
Manifest next update: Wed 30 Jul 2025 09:01:31 +0000
Files and hashes: 1: POUPcBO03DMIXVf_MFYgEgCOm2c.roa (hash: U70/4wMtnCfwgqCkp7u+PlnT2NS/US0B2K04xMH3TNI=)
2: hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl (hash: pqKw7OOdX8fJrJjpBuilvFnE9rn5/IHsyDM9mH0p43E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:6a:60:51:31:4d:b8:bb:c1:a0:20:13:0b:12:5d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Jul 29 09:01:31 2025 GMT
Not After : Jul 30 09:01:31 2025 GMT
Subject: CN=7720cc1a5fa7f01fdeb7804208197083b0e96d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:a0:9f:36:a1:64:18:5c:92:9d:7a:ba:e0:
57:90:08:f4:d4:e7:56:7e:2c:91:86:c2:6a:5a:19:
b2:da:b0:af:52:a0:ac:7c:1a:44:3e:b1:cc:88:4d:
7c:c5:8d:d5:0d:38:cc:72:1a:21:d8:15:35:62:89:
e9:37:04:c3:34:d3:b0:11:a8:d4:d5:c0:49:54:b8:
8b:a3:ac:e4:fa:0f:8b:89:b4:a5:97:74:bf:04:0b:
f4:32:0c:67:2b:3b:50:f8:83:ba:b4:9a:13:6e:4d:
1d:45:d9:bb:3b:fd:0c:56:17:bf:c9:61:09:45:9b:
25:90:72:02:43:46:44:87:4e:fd:22:72:6d:46:08:
db:dc:46:45:70:f5:14:89:85:b1:96:62:32:3c:ca:
a5:66:f9:2a:4f:6f:bc:ab:5c:6d:4f:dc:4b:7d:89:
0f:09:4a:bc:17:57:e1:b3:de:ee:b3:4f:e6:69:50:
be:ee:42:92:c4:9b:9e:45:1d:45:0e:1b:fe:ae:30:
06:ad:c7:34:3b:78:dc:80:b6:1f:91:96:5c:e0:bc:
cf:fa:5d:18:bf:5f:73:8d:2b:3e:28:3e:43:e2:93:
23:aa:0d:f0:e0:6f:34:de:0c:6d:5d:1d:1a:33:a9:
a3:c3:96:42:87:a3:94:04:a7:33:2f:c3:af:b3:39:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:20:CC:1A:5F:A7:F0:1F:DE:B7:80:42:08:19:70:83:B0:E9:6D:5C
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4a:2e:6f:6e:74:27:36:a3:6f:19:44:7b:49:95:5e:8b:6e:
4c:06:3d:8f:e8:5b:01:7b:3b:23:5c:44:4c:41:0a:04:5d:ae:
62:b7:c7:a5:ad:e2:ea:dc:5c:af:26:b7:d4:9a:3f:dd:c0:b4:
95:a0:07:73:48:49:7c:31:fa:d4:36:89:73:66:70:65:6f:c7:
28:cd:c2:70:ad:29:ca:3f:97:1c:26:f1:6f:14:57:96:6c:27:
4d:ad:2e:04:68:7e:a0:5c:43:56:46:79:70:79:c8:60:f1:62:
0a:8e:0e:98:62:cf:5c:bc:55:2a:23:a8:1a:4e:9b:04:2c:42:
aa:46:38:3c:73:d4:7b:a2:37:91:59:40:94:19:7c:24:27:49:
70:c9:f4:07:6d:8b:8d:d3:fc:4e:77:2e:d4:38:a8:a8:c8:6e:
5b:54:81:15:f3:e1:64:15:56:53:3a:65:55:a7:f7:19:c5:99:
c3:e6:8c:aa:a6:a4:05:ca:5a:5d:57:8a:4c:f6:57:42:d6:3e:
a6:10:b8:6b:53:66:fe:07:0a:f9:55:7c:53:34:6e:e8:22:9c:
03:93:22:f8:f0:ba:1e:2d:73:9f:45:69:0f:49:23:a2:59:02:
bd:b9:0f:a4:ae:9b:c7:a6:b9:66:83:6f:18:94:2b:c0:3f:9b:
da:c4:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:13 2025 by rpki-client