Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: zYKBc0TJK2fgXzaK0IlDVRfwUXd4XA9s/yGcbuPrk9Q=
Subject key identifier: D4:66:CB:6E:A2:56:28:C3:8B:61:5C:0D:CB:18:05:91:4F:49:0A:04
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 01984776C72D310071BE9EFAE3A063DB79C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0918
Signing time: Sat 26 Jul 2025 16:00:23 +0000
Manifest this update: Sat 26 Jul 2025 16:00:23 +0000
Manifest next update: Sun 27 Jul 2025 16:00:23 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: h50Fxe6/mAUF+hZfyOY/zKKqOugUo+bsXhZezVoKDJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:c7:2d:31:00:71:be:9e:fa:e3:a0:63:db:79:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jul 26 16:00:23 2025 GMT
Not After : Jul 27 16:00:23 2025 GMT
Subject: CN=d466cb6ea25628c38b615c0dcb1805914f490a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:3c:42:ab:6e:9e:cd:e3:24:86:2c:3f:8a:
f7:04:fc:74:48:8d:ff:77:fa:49:ad:3d:b9:03:d6:
40:d9:4e:54:0a:9b:be:09:2c:f0:36:dc:72:54:44:
47:80:74:e6:6f:95:38:40:b7:ee:56:0b:b1:a5:25:
68:78:73:3e:fe:de:ec:db:9b:63:20:46:7b:e9:72:
ab:b4:61:45:bd:bb:84:b1:1c:3e:6b:8e:67:17:a5:
8d:e3:ab:97:de:4c:de:05:bb:7f:33:4d:9e:d3:5d:
94:0b:2b:65:47:a3:d6:37:dd:af:9e:05:0d:1f:a9:
92:d6:b3:5d:be:8a:1e:9a:c7:b1:01:10:2f:9f:4c:
13:6a:58:3b:c6:80:d9:f9:60:40:d9:e8:94:24:7f:
c3:aa:6c:c9:d8:50:f9:20:09:11:e8:1f:4a:1e:39:
e1:0a:45:59:01:02:4e:87:a7:84:1d:ed:d7:8a:f4:
4b:4f:45:0f:01:f2:59:70:e6:c6:ec:62:81:f8:a6:
88:79:fe:bf:2d:1f:89:69:8d:da:2f:9f:74:74:99:
e6:11:36:05:1e:c4:5f:75:02:38:fe:51:25:81:31:
52:7c:a9:7c:9a:dd:79:37:0d:2a:90:e3:80:78:67:
fd:40:bf:b3:55:72:84:39:70:40:25:14:84:80:9b:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:CB:6E:A2:56:28:C3:8B:61:5C:0D:CB:18:05:91:4F:49:0A:04
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:04:43:38:5b:64:41:b0:b6:d8:20:d1:a5:a9:d3:3f:cf:81:
e7:32:ed:a4:7e:0c:84:ae:0c:09:31:c4:70:26:c1:9b:96:e7:
98:75:91:32:a2:83:0f:77:23:37:cc:39:11:7b:04:44:3e:2d:
f2:6e:51:7a:6c:1d:e9:c4:fa:37:6d:b4:8c:6f:ec:ba:2a:3c:
c8:b4:72:8a:3d:79:ed:be:ea:90:ad:b1:d5:d1:cd:7e:09:90:
7d:16:3e:33:eb:bd:49:fc:e4:34:29:1a:16:7b:da:b8:f4:0d:
fc:e6:6b:e7:fb:84:40:ec:8a:81:bb:aa:6b:de:8b:5e:85:82:
32:4f:e2:4c:b2:0d:f4:42:3f:c9:1f:a5:24:bb:56:36:2c:f7:
bd:b0:84:63:b7:ba:a0:36:1a:16:8c:b0:80:fe:00:50:88:9d:
e4:dc:21:8e:47:8e:2a:19:b6:5d:04:1a:ea:c0:15:bc:ef:be:
a7:13:c3:5a:f0:11:d0:92:fd:5f:05:8c:38:02:d6:37:b1:c4:
a3:02:24:e9:74:22:47:2c:7e:39:a9:df:21:b7:53:ef:ba:8d:
86:07:06:f7:b6:13:79:41:4a:37:9a:e0:82:99:40:bb:39:0c:
81:8d:89:3c:86:38:26:ad:f1:d8:b4:82:35:0a:87:ec:7e:db:
38:0d:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:48 2025 by rpki-client