Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: owvUgUfJdpqDgXRaUpdamqelM3/t+weW22t/tc0LMpw=
Subject key identifier: 4E:5F:EA:97:B9:4B:32:95:28:94:8F:A3:20:CF:D4:F8:D7:AB:27:8D
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019847E4636B7A09AF40E9BB17A6402AB841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 1497
Signing time: Sat 26 Jul 2025 18:00:06 +0000
Manifest this update: Sat 26 Jul 2025 18:00:06 +0000
Manifest next update: Sun 27 Jul 2025 18:00:06 +0000
Files and hashes: 1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=)
2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: JvYFIoae1jL6eqj4/98Lg52or7AsagsZDKqGcs/8diA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:63:6b:7a:09:af:40:e9:bb:17:a6:40:2a:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Jul 26 18:00:06 2025 GMT
Not After : Jul 27 18:00:06 2025 GMT
Subject: CN=4e5fea97b94b329528948fa320cfd4f8d7ab278d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:17:44:8c:34:ee:4a:d6:df:da:b3:f5:2c:be:
16:2f:13:14:50:6d:3e:65:28:b1:96:c8:99:7e:02:
3d:8f:e5:56:2d:68:dc:a9:0f:48:45:8d:92:fa:6f:
f7:2b:99:66:d4:2b:c5:9d:1f:8f:5e:14:be:cb:cb:
5f:95:39:51:86:ed:e1:37:22:a8:b2:ea:2f:43:f0:
52:3d:84:21:d2:24:63:f6:8c:ac:a9:c9:74:6e:89:
fe:f2:7d:2e:03:54:28:76:85:80:a0:27:d1:21:24:
b7:da:34:bc:aa:bb:61:88:e6:3b:d9:31:c7:d7:e9:
fb:65:40:15:31:55:a5:b9:f0:e3:d6:ca:bc:ca:3d:
10:9e:a6:dd:ef:77:b2:d4:ef:6a:c7:47:c0:ab:aa:
d9:90:a1:cf:58:c9:23:f1:8c:91:3d:eb:53:f4:87:
d4:82:34:e3:93:06:42:f2:54:81:08:bf:1c:5d:bd:
ff:cb:45:cc:e6:49:d5:d6:9f:65:f5:56:88:72:14:
2a:1f:b5:b2:72:68:ff:be:d3:1b:3e:d4:89:d2:1b:
f7:2b:95:ed:7c:bb:9f:52:cd:68:7a:68:d6:d8:b4:
37:c5:a5:8c:30:cc:46:ca:dd:94:88:98:fc:73:22:
23:3b:2d:57:1c:de:6d:b9:dc:31:5f:48:b2:5c:ea:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5F:EA:97:B9:4B:32:95:28:94:8F:A3:20:CF:D4:F8:D7:AB:27:8D
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f7:bc:9e:ee:ce:4b:72:cf:74:e0:82:31:7b:1a:0a:e9:58:
97:13:8e:31:f6:9a:5f:d6:a0:8c:d0:08:c8:4d:17:c0:1d:a9:
90:14:c8:4d:6f:74:b3:4b:0e:ec:ca:70:1d:f5:64:a5:79:6d:
57:9d:fb:95:a2:85:ad:35:fe:e5:b4:73:c0:72:49:78:a7:d3:
09:6a:88:cb:44:3a:bf:fb:31:0a:a9:89:b1:db:e6:a1:7f:22:
22:b4:29:cd:30:91:2a:d9:26:00:11:58:09:b9:f4:1b:2c:1d:
e1:d9:69:0e:75:4a:69:68:17:29:fb:a2:30:31:4f:5b:a3:1c:
ed:d6:86:cc:36:ec:d2:bf:b6:52:3f:18:16:9c:82:87:c2:2c:
6b:bf:e7:31:3c:d0:c6:6a:b0:3a:57:d7:c2:5a:fd:b5:54:a8:
24:d6:53:c9:41:f7:c5:dc:71:ee:7f:98:c1:67:0c:90:85:10:
b5:ff:40:a8:d0:99:6a:82:43:4b:d3:5d:fb:a1:94:3b:5e:21:
0f:95:f4:b6:c7:67:0e:91:da:5c:20:2f:73:3b:40:8f:1b:48:
07:19:ec:3a:eb:64:a3:01:f2:1f:d4:fb:92:74:c9:56:d0:99:
38:02:64:9b:d7:e2:eb:37:d9:29:24:cd:58:25:ae:c7:d9:37:
c6:09:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:24:05 2025 by rpki-client