Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: 1j7mulsly/V/Nr7p5UmeYRv73vnOsQStQOFIX+cRbo4=
Subject key identifier: 02:5C:FD:2C:6F:24:DA:7A:21:BD:5A:4F:AF:93:E1:9B:CC:CE:AF:D5
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 01984C2F2A4282AE8F99E8318B1753438885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 1006
Signing time: Sun 27 Jul 2025 14:00:15 +0000
Manifest this update: Sun 27 Jul 2025 14:00:15 +0000
Manifest next update: Mon 28 Jul 2025 14:00:15 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: wkXyPvKAieH+rsXXGc7QCDUfuTkLxW8/l4ZqU81+1dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:2a:42:82:ae:8f:99:e8:31:8b:17:53:43:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jul 27 14:00:15 2025 GMT
Not After : Jul 28 14:00:15 2025 GMT
Subject: CN=025cfd2c6f24da7a21bd5a4faf93e19bccceafd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:1e:6b:76:ef:4a:36:17:64:83:df:9a:3b:
38:8e:85:cf:88:e4:bf:fa:5d:d2:5d:bf:a8:15:e4:
ff:21:4f:9c:87:30:0b:bf:63:21:75:bf:8a:0c:18:
8d:e2:e6:bb:03:ac:e9:b1:12:78:ec:4e:3d:72:70:
70:46:eb:85:32:f5:4a:c5:3b:71:73:cc:c8:33:fd:
a5:f2:6e:f0:32:2a:d4:ad:3b:90:4f:bb:93:2a:6d:
aa:32:cc:85:81:65:2d:13:00:11:26:7c:32:b9:6b:
48:95:40:ff:d5:a4:65:4c:cc:13:d2:88:59:4a:78:
a8:62:e2:27:a4:37:79:fa:e4:8d:f4:63:dc:8a:b2:
b1:46:d5:e8:b6:59:be:c9:d2:8e:f1:fb:5e:c1:a0:
12:62:70:8a:d2:0a:45:58:f4:e3:ed:6f:0c:0a:b7:
d9:6c:17:53:1b:e3:2f:dd:ee:aa:75:05:b3:b1:f6:
4f:b0:70:a4:2d:e2:c2:c7:71:8f:a6:0c:ca:30:5d:
d8:a9:17:91:93:dc:5a:f4:9b:f1:37:90:0c:41:e9:
ea:3c:da:f1:08:70:61:73:b5:f1:ad:2b:30:8d:24:
21:de:f0:df:66:56:6c:f4:53:7f:94:a9:96:fc:f1:
b7:85:dd:93:0c:39:bd:ab:17:72:2c:91:93:43:e9:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5C:FD:2C:6F:24:DA:7A:21:BD:5A:4F:AF:93:E1:9B:CC:CE:AF:D5
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ba:d4:4a:8b:f1:88:73:70:6f:91:46:28:2e:09:e4:3e:53:
e2:47:8a:06:b9:a8:93:42:f4:e0:9d:e8:e7:7d:80:be:5f:75:
1a:ae:fa:a0:9b:af:44:74:97:87:0f:c2:49:96:bb:b1:9d:90:
80:88:75:3a:a8:2c:30:ec:ca:13:3d:f2:eb:b8:8e:43:42:1e:
1a:69:d6:27:35:e9:e9:41:a6:22:b3:07:a8:77:81:7a:5f:a0:
2e:ca:fc:90:7c:75:c5:ac:8e:da:44:de:bc:bc:03:fc:8a:0d:
84:3b:8f:75:dd:81:03:d4:1a:12:02:90:be:46:ef:18:12:0a:
e8:10:ea:08:da:40:bb:a7:b4:56:3c:06:5f:af:eb:bd:25:6a:
01:eb:e5:38:1d:8b:92:fd:4d:a5:ff:93:2c:28:4c:90:18:17:
a2:42:fb:3c:2f:87:40:72:4d:4f:f6:27:f0:8b:b3:9f:86:97:
02:4b:da:74:cc:c6:47:cd:8c:b7:8f:da:4d:cd:2f:97:64:c4:
be:26:1e:9b:3f:f0:07:ff:12:d8:33:f2:67:46:73:a9:89:85:
91:da:bc:4f:ac:6a:70:69:ce:9f:6e:76:76:e6:39:9e:db:ea:
68:ac:88:65:be:cd:6a:78:68:9b:0a:ed:bc:47:9d:e5:be:87:
5a:84:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:44:51 2025 by rpki-client