Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier: pALvriiC4XBTK2U5v3mAjcUsYjgZxIX6eHgLYHlUTQM=
Subject key identifier: B9:20:9E:94:D0:2F:4C:C1:C4:97:40:0E:97:44:5E:9F:85:57:44:D1
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial: 0198485312843F71C55D075B9D41B1254BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number: 1559
Signing time: Sat 26 Jul 2025 20:01:00 +0000
Manifest this update: Sat 26 Jul 2025 20:01:00 +0000
Manifest next update: Sun 27 Jul 2025 20:01:00 +0000
Files and hashes: 1: MbStNmXQF3r8BjIEIY6alBv8fXM.roa (hash: qBMHoSNp30r52ggSq1NF5Ja+ou1kpfZ0GNdRTXuZlMk=)
2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: 4Tq0MVFImpTOpxaRf6RAS3gORgcx13Fw2fAfcLMrFoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:12:84:3f:71:c5:5d:07:5b:9d:41:b1:25:4b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
Validity
Not Before: Jul 26 20:01:00 2025 GMT
Not After : Jul 27 20:01:00 2025 GMT
Subject: CN=b9209e94d02f4cc1c497400e97445e9f855744d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:f3:aa:ee:b4:a9:8a:d4:1d:3e:40:3a:e9:
de:c6:93:f8:ff:38:dd:85:69:5e:e4:f1:df:6c:31:
68:dc:73:87:60:30:0c:79:62:c1:ed:94:6d:83:63:
62:70:44:95:ab:e3:8b:92:8d:30:da:a9:c0:f3:f7:
29:c2:96:9b:f1:d7:04:dd:d0:84:de:59:80:1a:32:
6c:08:c1:24:ae:fd:ca:e6:27:43:57:99:ac:27:c3:
41:07:16:55:90:bb:4c:dc:8e:c3:e1:28:ae:28:00:
da:98:48:29:2f:56:5e:e3:c9:53:1f:2c:4c:c2:1b:
89:59:3c:8a:ab:6f:1c:06:85:39:df:35:58:44:e7:
98:0b:c4:6f:af:2d:f9:fa:01:1e:17:2c:67:fe:6f:
33:22:a0:39:9b:4c:07:16:c8:a7:a5:fe:3f:1e:0c:
76:d8:a2:9a:c0:c9:b9:67:f6:e9:f0:29:9f:ff:07:
ff:25:ea:5f:a3:21:7e:ec:85:c7:7b:e1:78:9c:47:
dc:63:34:5b:2f:b7:7e:17:db:e6:3a:d3:55:98:82:
41:18:c3:63:05:3a:2c:f8:2a:3c:3c:68:e9:0f:b4:
59:26:72:99:34:51:5d:47:87:25:1b:d2:b0:0f:4b:
fa:33:c3:c5:89:c6:52:b7:d6:be:22:79:57:ab:36:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:20:9E:94:D0:2F:4C:C1:C4:97:40:0E:97:44:5E:9F:85:57:44:D1
X509v3 Authority Key Identifier:
keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2b:5e:63:7e:c8:34:d3:46:81:1d:52:5d:af:a8:53:07:a2:
9a:17:28:bf:91:68:b8:20:87:1c:3d:88:e9:01:86:1c:3a:7e:
f9:e5:fa:c0:32:b2:13:15:79:ea:06:25:c6:43:4a:d0:4e:1b:
b0:12:ac:78:e5:38:d0:0f:0a:d0:43:a3:1a:a5:59:40:44:89:
36:eb:55:8c:73:b9:f4:a1:f8:25:a8:b2:e7:1c:19:83:fd:90:
2f:26:03:18:28:87:d6:66:49:da:4b:94:db:1b:b5:4a:b4:c3:
69:9a:97:72:94:f0:71:0e:6b:eb:d4:61:59:05:dd:08:93:65:
90:25:bb:40:62:d2:8e:45:3b:df:ca:98:6a:2d:ff:5e:1d:5f:
87:f2:36:d7:36:30:27:2b:17:82:06:18:37:fc:85:71:1b:a6:
26:a6:b9:65:9d:a3:f9:a5:e7:c9:57:b7:1f:76:5a:6d:cf:ec:
c7:88:b1:c0:ad:fb:95:d0:4b:ac:84:bd:6a:db:57:d7:67:b9:
e3:bd:8a:9e:26:94:6c:b5:49:3e:f4:2f:84:14:85:df:6d:ed:
5e:31:a4:bf:b8:0a:40:9e:26:f7:33:72:3d:fc:95:c8:d8:dc:
e4:bc:90:35:a1:12:4a:eb:cb:f7:44:9d:b2:13:d7:b9:5f:7d:
08:bb:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:38:01 2025 by rpki-client