Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: FpWUOkfnFKhLcBtchdtXUsjfhChs5olU6NhKt9t9jSk=
Subject key identifier: 17:F0:A7:96:F1:D2:2F:E3:29:41:BE:38:7F:C0:AE:63:0A:42:67:4E
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 01984A09DAA03BFC257780081ECCA1B4C00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: tWuZMmomkWNVfsC44mTHfJuzEAWaH2/622LOC+4fQqU=)
2: zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa (hash: SDcPgjrr8y9zPr3/XTNgtJ+0oZH17N4IYV4VzMId4hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:da:a0:3b:fc:25:77:80:08:1e:cc:a1:b4:c0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=17f0a796f1d22fe32941be387fc0ae630a42674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:d9:fa:24:cb:13:a1:42:d1:f2:3c:b6:d4:
b3:83:d9:72:5a:19:3f:21:dd:44:de:08:21:18:07:
61:ce:77:bc:dd:95:6b:e4:20:3e:0e:ba:ec:55:7c:
9b:ac:eb:c2:cc:48:cb:f7:96:22:44:f7:20:fa:6b:
78:52:9b:be:43:02:fa:3a:36:12:e4:b6:47:47:9d:
ea:e4:43:a2:09:c0:f1:98:03:06:a7:38:b3:03:94:
f3:08:99:29:ae:6f:95:3a:cb:cc:77:b6:6e:17:22:
79:f2:78:51:31:55:86:dd:5e:45:9e:ca:c5:e3:ce:
e5:5b:4a:59:35:a3:61:c7:34:b5:cf:63:26:3e:f6:
f3:4f:da:c6:ad:44:60:e7:7d:44:a0:7a:c6:ed:30:
9c:39:f9:b4:b1:90:76:68:ec:82:5a:f4:7b:c4:40:
59:2a:fe:e7:d2:51:8c:49:5c:15:a2:58:aa:3c:ea:
2d:5c:bc:cb:37:72:4b:d3:6a:44:9f:24:02:ed:5c:
df:b7:f6:11:31:4b:a7:6c:b7:69:91:75:55:55:34:
22:0e:b9:71:a0:05:18:2d:d2:96:67:7f:ca:1e:5d:
d6:a8:7d:ca:ee:65:cc:a2:b9:9b:f0:86:ea:b4:b5:
61:75:be:7a:1d:35:e4:4c:6d:9f:a6:88:86:df:ed:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:A7:96:F1:D2:2F:E3:29:41:BE:38:7F:C0:AE:63:0A:42:67:4E
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:06:be:0c:b3:ab:db:c4:c4:28:23:5b:b9:d1:fa:8a:85:c4:
4a:5a:30:d8:b1:af:7d:dc:1f:2b:0e:48:bd:79:ef:bf:70:ad:
4c:8e:7d:25:6a:50:19:b5:65:90:b3:fe:a1:3b:99:0b:2e:c1:
93:93:e5:b5:bd:f3:f9:3b:b6:c7:b7:ca:5a:0b:22:a6:54:60:
a7:95:33:0d:d8:72:2b:fd:3c:6c:5b:5d:86:52:9e:17:a4:c3:
00:7c:ba:f2:21:16:29:fa:55:81:94:32:ba:98:3b:8b:60:24:
b4:b0:40:08:47:71:67:8a:74:bb:41:c0:02:dd:ce:87:fa:ec:
46:59:47:87:3a:64:0e:b9:10:5e:64:2b:6f:7d:58:f8:ba:b0:
55:45:c9:3a:dc:29:52:54:41:f6:87:9e:7b:ac:e4:30:8f:19:
a7:16:b3:20:f5:02:84:d5:b5:b1:b4:e9:cb:4e:58:c9:f0:37:
08:0b:96:db:9f:c1:f1:80:cb:65:b7:03:36:87:08:f7:22:07:
57:19:9b:72:2f:d4:12:a4:24:7a:09:1d:80:6a:da:37:9e:4e:
b0:03:a9:83:98:ec:51:e0:f3:b6:30:d9:b2:ba:22:71:09:11:
f2:9d:ec:28:fa:5f:45:29:04:65:75:de:60:2b:a8:e7:2d:be:
94:63:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:26 2025 by rpki-client