Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File: hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier: KInICwmPGx+0bcNx6YWcl7bt90lh3fL/Fr5fthsq0Mg=
Subject key identifier: ED:B6:89:BC:D7:DE:5B:00:B4:2B:73:9E:98:37:7F:92:4A:77:1E:0F
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial: 019844AC7BC6CBD6FC6A50770F8A209F29B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 03:00:11 +0000
Manifest this update: Sat 26 Jul 2025 03:00:11 +0000
Manifest next update: Sun 27 Jul 2025 03:00:11 +0000
Files and hashes: 1: 4OM3TuNkPVdmDzic95IjszBtoQA.roa (hash: dt9wokazgTd6EaqSSQPyaNUyIvDqSau9vaZZ+2FBCWU=)
2: POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa (hash: ToulLGENoP/7yn7Jgz/qlwSorKjiORy0BAk4ycS9VNQ=)
3: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: E1pXfanQe92D18hYCl9cl+kjJyrdHvioMF4/RWr4qpM=)
4: qeftSyRSXmAOVqQRtKtHutbh0zk.roa (hash: VtULu7reN7PL4/u/6gxMFu7joJNl642+iClkA1K3FD4=)
5: tISHEAHtpJDdCS4l3Yug27J3cB4.roa (hash: MfAYQ6HspqhfS9luXY6/Ub4o3vZ2098dY5v7aRHURxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:7b:c6:cb:d6:fc:6a:50:77:0f:8a:20:9f:29:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Validity
Not Before: Jul 26 03:00:11 2025 GMT
Not After : Jul 27 03:00:11 2025 GMT
Subject: CN=edb689bcd7de5b00b42b739e98377f924a771e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:6b:a4:c6:f9:0d:4d:85:83:05:86:5d:37:
e2:95:de:b1:d5:97:3b:96:a7:f3:dd:3c:b9:59:7a:
6a:56:d9:c5:96:17:92:49:ae:11:31:48:60:86:cd:
94:d8:dd:93:ba:14:13:66:e8:3c:0a:ba:23:8c:92:
14:3f:dd:da:8d:74:f8:d4:1a:a7:97:c5:3c:15:fb:
a4:c7:9b:0d:13:39:c1:f9:d5:1c:ce:9f:17:0f:6d:
e0:88:f8:dd:c2:f1:3d:e8:71:28:3f:06:a3:b1:98:
5b:81:59:0b:fb:13:7e:98:dd:a5:9b:c2:45:b8:47:
e2:6f:67:fb:ec:3b:c7:89:71:df:5b:b3:fe:01:a4:
14:d7:63:6a:97:f0:1e:42:e4:b2:1c:3a:f2:fc:13:
d0:e7:3d:e3:7d:ea:e7:b2:50:da:df:03:c0:fc:84:
e4:5e:b0:de:af:00:f5:9f:29:b7:5e:0c:8e:73:93:
8a:e2:4f:93:41:be:cf:5a:5d:57:93:c4:71:d0:6c:
8f:6e:77:21:e6:97:8c:13:1c:9a:ae:ba:52:88:fa:
ea:12:e2:32:bb:71:45:1d:ea:4e:dc:56:b3:7d:88:
26:aa:86:88:d0:31:8e:af:17:21:b6:16:d3:30:19:
55:7f:2c:9a:4a:20:b8:bb:ba:01:eb:3d:1a:da:a4:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B6:89:BC:D7:DE:5B:00:B4:2B:73:9E:98:37:7F:92:4A:77:1E:0F
X509v3 Authority Key Identifier:
keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:34:63:1b:79:56:04:d7:d0:75:08:fa:39:8f:38:92:2a:06:
04:95:d8:33:55:a1:6a:a3:01:c6:d1:c7:5c:d0:10:5e:03:ca:
2e:5e:c5:34:b0:9d:c6:91:b3:30:75:0d:d9:84:ed:ad:71:9c:
c4:32:c4:14:5c:77:cb:97:c1:ff:ff:79:be:c5:79:1a:46:b6:
e9:4d:c8:4e:24:89:64:02:5a:38:29:96:2d:da:18:71:69:39:
1e:45:be:64:16:d0:16:9d:7f:2a:85:57:0b:50:79:6e:1f:f7:
6a:bb:f0:0a:cc:6a:1a:ad:29:25:ea:98:de:21:04:8e:aa:be:
75:38:37:e5:8e:e5:9b:8e:4a:c0:1b:80:e0:25:7c:81:df:03:
3d:ea:3d:c5:32:48:4d:d1:8f:09:3d:11:f6:ca:d9:c7:2b:49:
8f:7b:fe:b9:fa:fa:f5:2b:f1:2c:e3:50:21:30:de:58:60:73:
24:46:e4:fe:c4:24:0f:b4:c1:8c:44:5b:5c:22:0c:7f:3f:0b:
bb:9d:a9:1c:35:87:36:ec:40:d6:24:b6:3f:20:87:c9:e3:29:
d1:47:72:16:11:9b:e7:5c:cf:25:d2:c5:1c:b4:86:30:79:26:
9b:c4:8f:6b:00:1e:46:41:d8:1d:cb:31:de:58:68:7e:5d:12:
98:7e:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:27 2025 by rpki-client