Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: aqk93djxwoDjKMobAm0TTSwtVvvRcQNTLjSysiTuCBU=
Subject key identifier: E9:C2:A0:46:57:03:9C:72:0F:2C:C6:8B:88:4B:C8:0B:2F:2C:22:78
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 0198469B0E578902E652CEBF2A5C58D64656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 12:00:23 +0000
Manifest this update: Sat 26 Jul 2025 12:00:23 +0000
Manifest next update: Sun 27 Jul 2025 12:00:23 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: /HTpoDPvdHHgljHejpgfycJx50NqwEauOChcXUnbulE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:0e:57:89:02:e6:52:ce:bf:2a:5c:58:d6:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Jul 26 12:00:23 2025 GMT
Not After : Jul 27 12:00:23 2025 GMT
Subject: CN=e9c2a04657039c720f2cc68b884bc80b2f2c2278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:91:e6:b9:10:fe:48:62:7d:8b:7e:ac:00:
96:e4:89:b6:4d:39:b4:42:96:df:b8:65:06:eb:5c:
df:d7:de:fa:bd:4b:ba:a5:b4:cc:3f:87:08:62:0d:
d3:f3:07:20:0d:e2:86:32:2b:9c:01:14:36:3d:40:
b4:ed:32:0c:a2:c3:66:2a:3c:9d:e3:74:33:69:ad:
95:4f:05:c6:2a:5e:47:54:79:25:d4:fa:e6:51:27:
e3:db:97:cb:9e:8a:55:0d:d3:ee:e4:6c:dc:13:d8:
54:fa:a3:20:c5:91:6c:de:37:64:1d:5e:72:18:eb:
83:ba:ca:da:3d:99:0d:29:6c:88:7d:41:1b:fd:65:
24:77:12:86:7c:62:1b:e1:e6:3c:cb:a9:bd:cb:ea:
0a:cb:c1:f0:ed:c1:ea:9e:37:e9:4f:b3:22:3a:20:
e8:80:07:f0:33:25:5d:8f:08:cc:c5:83:69:90:27:
68:eb:67:f8:37:fd:5b:7c:c5:54:3b:3a:e9:e7:16:
e6:11:df:c1:83:0a:58:a7:70:60:fd:9f:4d:5c:e8:
dc:7c:97:0c:11:b2:e8:df:e7:3c:87:61:f3:ca:c9:
6e:3c:52:62:43:90:cf:22:bb:0a:b9:3c:bc:4d:2d:
c2:fc:dc:f9:85:69:80:53:27:a0:5b:56:74:37:44:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:A0:46:57:03:9C:72:0F:2C:C6:8B:88:4B:C8:0B:2F:2C:22:78
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e9:eb:40:ca:1a:fd:57:46:2e:2c:8c:a0:33:0f:cc:eb:f9:
2e:a8:f5:d3:67:24:81:09:ff:9b:cc:0b:5c:bf:84:8a:c5:8f:
a7:1e:af:78:ea:5e:47:b3:b9:98:ec:3e:3d:56:23:bc:d0:9b:
18:90:fe:60:fe:02:75:4b:a5:09:d5:ec:87:02:d0:7f:eb:25:
23:c4:af:88:7f:aa:af:9c:76:ad:15:1a:b2:8a:fb:21:7f:2c:
9b:89:c6:02:a9:73:e8:1e:9a:e3:f6:2d:53:9d:52:3d:79:4c:
53:4e:3e:06:cb:18:c5:dc:13:eb:2e:a1:6c:73:00:8d:01:cb:
77:af:df:eb:e5:ae:21:41:6d:2d:51:88:93:fc:aa:49:93:1b:
01:1f:f6:23:4e:80:81:ef:65:1a:63:97:0e:9c:29:d5:85:ad:
a8:ab:86:80:b7:f8:30:d7:d1:1d:62:af:cc:8d:5c:05:6e:d8:
8f:e4:2e:2c:c1:63:13:4e:23:2f:9b:f5:94:4a:4e:47:ec:55:
54:47:49:c2:60:06:82:36:94:a4:6e:8a:81:17:26:50:06:f7:
9c:42:62:a6:69:96:c0:eb:4c:f4:ed:74:cd:ce:a5:87:77:b3:
58:b2:14:65:46:a5:83:fe:71:7b:61:c2:aa:cd:25:de:ef:02:
85:e6:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:40:23 2025 by rpki-client