Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: 39FSWXbLAInZWheDktXb3pbFvygncGI0lawxP6vHAbg=
Subject key identifier: FC:E4:00:C9:24:A0:93:6D:FC:3A:9F:C2:E9:10:46:8C:B3:5D:41:2E
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 01984889682349E122B3AF22A00BAF002B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 05A4
Signing time: Sat 26 Jul 2025 21:00:21 +0000
Manifest this update: Sat 26 Jul 2025 21:00:21 +0000
Manifest next update: Sun 27 Jul 2025 21:00:21 +0000
Files and hashes: 1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: qQ04WzNsSS0mXd2bOt8USnhEst16EISWPmwll1MaLcA=)
3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:68:23:49:e1:22:b3:af:22:a0:0b:af:00:2b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Jul 26 21:00:21 2025 GMT
Not After : Jul 27 21:00:21 2025 GMT
Subject: CN=fce400c924a0936dfc3a9fc2e910468cb35d412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:fa:cb:66:71:e4:2b:3b:ba:24:90:d1:4e:
8c:20:fe:78:4f:2a:ce:34:ab:00:b0:62:39:02:6c:
4e:fc:c8:3e:fe:eb:58:d9:d5:08:fb:58:53:26:f1:
68:90:f0:69:92:c8:c7:2a:88:45:7b:e7:04:e7:1a:
98:6f:5e:d6:a3:38:44:c0:41:f5:bf:01:cc:78:d8:
f4:0a:b4:78:17:cf:7b:de:b1:6d:50:8c:4f:fc:bf:
83:7a:82:df:cb:54:70:5c:b3:26:b6:d3:bc:09:f9:
fd:34:63:11:12:d5:67:4b:3b:e6:24:52:39:d8:e6:
af:5a:3c:45:0e:6e:12:f3:4b:da:9e:52:db:25:e0:
95:6d:70:0c:15:dc:e0:b0:7b:06:60:9d:54:df:66:
75:bb:22:1f:19:6c:25:1d:57:cc:14:e0:6b:8d:61:
3b:b5:30:c1:2b:5b:e8:c7:d1:73:5d:14:1e:8d:88:
cc:d6:25:f4:d6:f9:22:63:09:db:92:e4:6c:95:da:
27:96:bf:d7:1c:ce:ec:71:80:c4:14:63:18:6a:c1:
a7:93:f0:41:1f:3c:71:4b:24:5a:85:7e:bd:fb:34:
12:97:61:dc:28:7b:05:a7:91:3a:3d:c1:c5:83:a1:
dd:34:ba:e7:c2:13:24:2e:06:6d:89:b9:be:67:de:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:00:C9:24:A0:93:6D:FC:3A:9F:C2:E9:10:46:8C:B3:5D:41:2E
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:dd:61:dc:ff:1e:38:68:9f:21:bc:7a:2a:71:e5:c9:ea:07:
93:23:b8:bc:81:75:a7:92:0c:f7:66:ab:b7:7a:eb:b4:a2:a6:
79:ac:df:8e:14:81:be:dc:bb:69:92:0f:9a:80:a4:89:f2:aa:
7a:59:3e:26:02:35:72:66:c6:66:84:d8:19:12:61:39:48:8a:
2b:42:1a:50:12:86:ad:12:cf:b0:30:9b:bf:90:c9:b5:71:2d:
aa:d2:44:80:e3:2e:15:bd:a8:66:b0:02:0d:2e:e2:e0:39:ca:
16:92:4e:53:52:90:31:c7:db:f5:b5:70:27:e6:ac:10:d2:4e:
e7:c4:16:8b:29:ab:8f:15:ee:4f:cf:6a:b2:32:e5:2c:fc:56:
e7:ff:36:44:c1:9b:99:6b:4d:35:1d:89:71:62:69:99:ae:d8:
32:15:91:1a:0e:84:cd:3d:b7:80:73:a8:eb:98:a6:64:a9:58:
52:ba:61:21:bc:f3:d5:ea:fe:b4:18:8c:2f:94:56:2d:e0:dd:
5a:71:85:cf:40:4d:03:6a:3f:d9:e8:7e:e8:c7:4e:f6:bc:97:
ea:e1:7c:a0:ac:d1:df:f8:9a:4e:e5:6a:c7:ea:e6:d5:cb:96:
d3:d3:d1:17:a1:2a:4b:28:ca:00:8c:03:f9:57:03:b5:69:a9:
94:49:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:54 2025 by rpki-client