Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: sWOl8/OtW96AlurpOCFeOWRp6QT5GcqUgKte0Gsw064=
Subject key identifier: 15:DE:2A:37:DF:93:B9:54:12:6E:EE:9B:A1:A2:D3:56:8D:D8:E6:5B
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019848525E93A64D872AAD8388CF8583FA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 12B6
Signing time: Sat 26 Jul 2025 20:00:14 +0000
Manifest this update: Sat 26 Jul 2025 20:00:14 +0000
Manifest next update: Sun 27 Jul 2025 20:00:14 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: koXtuMYNvY5ZRVBjusBZARolaSsOCyFjHDVbVGRLNdE=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:5e:93:a6:4d:87:2a:ad:83:88:cf:85:83:fa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jul 26 20:00:14 2025 GMT
Not After : Jul 27 20:00:14 2025 GMT
Subject: CN=15de2a37df93b954126eee9ba1a2d3568dd8e65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:06:62:e5:e1:91:82:6f:eb:0a:ee:46:87:
5c:dc:9c:1f:29:d1:05:ed:3f:c7:8d:e5:c7:df:17:
b3:3d:f0:1b:d9:0b:a3:df:05:70:da:5a:6a:24:93:
75:2f:59:47:ed:e2:7b:fd:a0:7d:56:38:17:76:01:
b3:3e:93:c3:ce:d7:46:e5:40:21:7d:1f:f6:a1:f5:
59:57:5a:5c:dc:e1:12:93:be:04:e6:2d:35:a4:2f:
2d:d5:7e:35:7d:fd:f4:bb:cc:d9:b1:44:b4:26:51:
1e:b7:70:cb:d2:cd:b9:dd:cd:62:01:28:ed:42:66:
7e:55:24:c3:59:46:3d:26:31:4f:44:6a:06:35:bf:
9e:4b:76:56:ff:d3:8d:ce:8d:30:ee:c6:89:62:b0:
45:d4:25:70:ab:cf:74:42:f6:aa:79:e9:cd:c6:91:
2d:65:27:4e:62:e5:2c:86:f4:4b:d2:4e:cf:d1:22:
ee:8e:c0:c1:87:0e:ed:de:f0:13:b1:c9:d7:76:f1:
cb:94:ff:e3:5c:e1:c4:28:c2:18:df:ec:4a:50:0d:
26:ec:66:9a:b3:c6:50:8e:99:89:4d:eb:43:b6:17:
a1:11:d8:65:83:46:1f:00:97:94:da:39:f1:3f:99:
ff:be:3c:05:5c:1c:00:8f:cf:2e:2e:cc:d7:9f:4d:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:2A:37:DF:93:B9:54:12:6E:EE:9B:A1:A2:D3:56:8D:D8:E6:5B
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:cc:b8:8c:e5:12:26:92:2e:6f:d5:9d:2d:f8:be:c5:2c:
f7:bb:73:27:d3:82:b2:a0:a6:13:84:1e:58:eb:c5:d9:43:5e:
c6:f8:ce:58:67:46:97:77:40:bb:9d:57:6c:cf:a9:4f:7b:a9:
52:db:d0:ba:39:45:6a:07:f9:f8:5e:eb:d6:bb:24:d9:f1:8f:
52:8f:e7:ef:7d:a0:c0:4c:4f:5a:7e:b7:47:61:b4:66:79:79:
49:e1:cc:aa:8d:72:05:0f:73:c7:5e:73:a1:99:08:53:37:28:
df:da:24:c4:b6:b7:8a:45:98:0c:23:20:62:46:55:d0:6a:41:
72:d7:22:ea:3f:ca:f4:74:2b:5b:b9:60:05:22:5b:52:c9:47:
31:94:4a:bd:c7:2e:83:61:c6:9e:e5:92:27:c0:ee:e8:b6:83:
6d:bb:f8:5d:f1:66:05:a7:51:fc:a2:c6:ac:4b:f2:b1:2e:5c:
f5:f9:fc:7e:97:0c:9a:4a:9b:46:7c:0d:3b:1e:e9:e5:9e:81:
75:48:a8:c3:b0:71:64:f6:64:e6:06:ef:a8:18:d6:d8:2b:d6:
09:ab:d5:88:a0:64:e1:84:b4:7a:ea:c2:ad:5f:f2:d5:28:19:
34:95:2d:c9:c6:c4:1a:ba:4a:ed:1a:af:2e:5b:79:d4:fc:90:
26:1e:90:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:54:44 2025 by rpki-client