Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: OdovAZaymQ5uLyY//HMCCpedlte+9PiRXyyWN/2uOis=
Subject key identifier: 80:1D:24:DA:A8:E9:3C:A1:F3:CD:47:EA:F1:86:AA:E2:E6:93:50:A9
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01983EAAEA042BE79097EDCB3D53626B9EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0B72
Signing time: Thu 24 Jul 2025 23:00:45 +0000
Manifest this update: Thu 24 Jul 2025 23:00:45 +0000
Manifest next update: Fri 25 Jul 2025 23:00:45 +0000
Files and hashes: 1: KNngLPUEeJfGeGvW_sjNLwrjlmo.roa (hash: VdgpRYVhUpsamPtzdnV+HbncE6iEYGQS6JyumMp2yn8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: CXdms2l6QlP+FPj5/nFkCIb1Omed/sqHzpzoT0z19fE=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: aJuKlK4Eyd-5-SWqzCamWBjJAOA.roa (hash: JqxrD9CIJNSFvb9h8lx5ybgaqxfxBBfuz3mHyoez/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:aa:ea:04:2b:e7:90:97:ed:cb:3d:53:62:6b:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jul 24 23:00:45 2025 GMT
Not After : Jul 25 23:00:45 2025 GMT
Subject: CN=801d24daa8e93ca1f3cd47eaf186aae2e69350a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:58:fd:b3:a6:db:69:2b:69:da:28:92:a3:
39:a2:12:3b:c5:67:a8:2e:59:f9:c1:0b:4d:a3:38:
0d:3e:07:c0:d2:6d:cc:f4:0c:79:01:ce:86:b9:26:
ee:53:fa:ee:34:bf:59:05:78:06:71:ca:3b:37:ca:
04:20:b3:3d:7e:c5:9c:fb:67:dc:19:66:6e:93:8c:
31:4d:8c:69:de:17:cd:e0:20:5d:a3:3f:12:cf:72:
f7:0c:75:1d:d0:22:07:82:f3:d6:d8:f5:9c:15:a2:
58:f4:0d:c4:9f:15:78:d9:f9:a3:18:fb:cb:33:fd:
09:42:e0:2a:05:47:bd:6f:51:83:a6:1c:f2:de:87:
89:2d:c6:9b:de:cc:2c:12:6a:55:0a:28:e7:fe:5c:
6f:77:de:1a:3c:00:62:3c:f1:70:fb:9f:a3:88:a0:
31:8b:a6:5d:79:3c:3f:24:1a:08:73:dc:25:c8:6e:
16:13:53:f9:e7:b3:64:b9:90:b0:20:fb:ee:3b:6a:
c9:99:24:22:ee:59:db:4b:3b:3b:5a:ca:02:2a:3d:
bd:15:78:ab:ff:50:2e:56:53:e9:c7:95:27:d6:5a:
86:80:49:2f:d0:99:91:a5:68:ff:71:62:b7:88:d0:
b0:c5:5f:4e:44:c5:78:5f:73:f3:a4:01:54:73:8c:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:24:DA:A8:E9:3C:A1:F3:CD:47:EA:F1:86:AA:E2:E6:93:50:A9
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:5a:bb:a3:18:aa:96:ee:a4:39:86:0e:5d:d5:73:7b:59:
94:02:10:65:72:af:26:26:a2:34:f7:df:7a:18:c5:83:46:74:
0a:69:8b:36:77:21:35:6e:4f:2c:92:a3:36:bf:63:a5:43:25:
57:9a:b3:de:44:93:77:12:62:ec:30:df:77:67:58:1b:56:9b:
1c:a9:66:7b:d9:23:34:ea:d0:10:fa:87:bb:64:c2:09:bf:2f:
dd:1c:c1:9a:ce:2c:d1:52:2c:51:70:1a:87:5d:af:1b:e7:eb:
dc:07:5f:e6:f8:0d:54:c3:63:be:a3:ce:ba:07:6b:16:a2:14:
98:95:9f:a0:cf:a0:75:21:ac:ca:bc:ef:f7:bc:22:27:a7:07:
04:34:12:25:99:4e:16:73:31:f8:c1:52:36:b3:5c:a8:8a:f4:
80:a5:dd:70:a7:79:a4:4c:5b:2a:9e:46:3a:9f:a5:9c:ab:5f:
32:37:1d:66:39:98:67:23:de:6c:65:01:25:29:7d:d7:89:99:
dc:d9:95:9e:48:f7:de:b5:46:64:9a:02:02:4e:37:9d:92:39:
d3:9b:db:8a:b2:4f:3a:c4:09:55:e8:43:ce:da:fc:e8:5c:d0:
08:65:ef:81:74:ad:d8:f3:18:3f:33:41:95:63:6c:c8:6f:88:
91:58:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:22 2025 by rpki-client