Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: byUxDRTQe1SCAp5RE29GnTDsKLmC4DeQ/g/VwedcsHY=
Subject key identifier: F8:92:61:18:E9:85:4E:C0:9B:A4:8E:BF:1A:53:B9:93:C0:7C:71:FD
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 0198469B64A24A620E8793B27194A4EEF960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0B98
Signing time: Sat 26 Jul 2025 12:00:45 +0000
Manifest this update: Sat 26 Jul 2025 12:00:45 +0000
Manifest next update: Sun 27 Jul 2025 12:00:45 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: sq/zujNkPI55UO713o2rnumg8rpZMZp7ZbLYoMfKwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:64:a2:4a:62:0e:87:93:b2:71:94:a4:ee:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Jul 26 12:00:45 2025 GMT
Not After : Jul 27 12:00:45 2025 GMT
Subject: CN=f8926118e9854ec09ba48ebf1a53b993c07c71fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:a3:19:03:a6:f8:03:2a:4a:1b:da:c9:42:
b6:65:53:dc:31:51:6b:f3:7a:b7:66:c5:18:d2:1c:
4d:cb:11:c4:e5:77:9c:a9:fa:d1:f3:09:53:d4:15:
76:22:14:cc:87:6c:25:49:52:3c:8b:07:4a:52:b8:
d5:30:bb:7d:12:78:6f:5b:5f:e9:56:78:5d:59:92:
f8:41:79:82:f2:fa:5a:e0:2a:9b:fa:c5:e1:89:71:
a8:0a:5f:85:f6:e3:40:87:15:cc:32:f8:a4:97:d7:
4c:bf:b0:3a:c1:97:65:17:c7:b6:ba:51:6d:aa:2d:
56:e7:4a:fc:2c:7e:74:7e:06:17:37:73:ab:53:61:
95:df:4e:f8:56:9b:7f:71:41:74:32:46:1a:4b:03:
ef:dc:55:7c:81:bf:d5:ab:e1:93:f0:c7:cf:96:3e:
11:80:74:49:3d:37:d0:f9:f0:e0:99:d9:eb:11:21:
21:0b:8d:d0:62:ec:07:1b:76:7b:21:ff:df:92:ad:
93:9f:af:1d:ec:72:27:0d:a3:1d:67:81:18:b7:3c:
f6:03:c4:1a:64:ba:96:3e:35:ae:e8:87:eb:a7:9b:
05:3a:34:a9:89:05:ce:42:0f:58:00:d9:90:72:3d:
8b:23:43:60:08:28:d6:35:47:8a:78:ec:6c:ae:64:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:61:18:E9:85:4E:C0:9B:A4:8E:BF:1A:53:B9:93:C0:7C:71:FD
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:70:f5:2c:2c:51:98:59:ef:2a:0a:6a:c7:48:c6:f9:87:66:
87:bb:c5:51:17:f7:a6:24:6d:d5:80:d7:96:98:01:09:10:77:
d4:92:ec:a0:a8:84:c6:2f:7e:39:35:c1:43:a0:a8:60:50:8f:
2c:46:fb:65:a1:ec:b3:3a:73:e9:10:2c:7f:d9:31:5d:47:ee:
8d:00:6e:7f:db:4f:27:76:df:e4:87:60:cc:32:28:7d:da:68:
14:b7:05:09:94:40:01:63:ad:a0:42:32:5e:49:38:9f:40:84:
a4:52:86:5c:c0:24:c8:2c:81:13:5e:b5:d2:49:d2:fe:35:c1:
46:f6:4d:37:9b:54:63:03:87:23:3d:39:d6:77:74:26:7b:5c:
df:cc:4e:24:09:a4:eb:c3:83:e8:00:01:09:eb:e2:45:c9:fc:
a1:93:91:70:0d:13:9a:ba:d0:8c:ce:ea:66:a3:7e:c5:66:05:
64:75:3f:8e:ec:21:5f:75:4e:94:54:19:6a:2d:d2:2d:a6:86:
19:3d:45:09:c7:8b:66:00:75:ed:0e:12:3b:f4:77:10:5e:5d:
35:cf:a0:32:59:88:45:cc:21:95:35:a4:a6:b7:0b:e2:3f:21:
35:63:cb:59:2b:8e:a7:5c:13:dc:53:3f:5b:dd:96:c8:08:95:
0a:f6:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:06:50 2025 by rpki-client