Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: IO20/78A7aRxvV4wgwpHvAMpIz2M8VDQ0EdnpZeHWg4=
Subject key identifier: 7E:6B:D4:9A:8E:DC:CF:35:FA:41:35:B9:7F:2F:E1:4A:A3:B2:3D:53
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 0198529F8A5F74465FD337D3A62F90BFD715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 160C
Signing time: Mon 28 Jul 2025 20:00:43 +0000
Manifest this update: Mon 28 Jul 2025 20:00:43 +0000
Manifest next update: Tue 29 Jul 2025 20:00:43 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: HETsIdIWIpH/+5s6UzFF20ITQ5fF7tCK94lk+pNgPdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:8a:5f:74:46:5f:d3:37:d3:a6:2f:90:bf:d7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Jul 28 20:00:43 2025 GMT
Not After : Jul 29 20:00:43 2025 GMT
Subject: CN=7e6bd49a8edccf35fa4135b97f2fe14aa3b23d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:81:05:fe:23:84:16:92:e7:ec:39:e4:93:
a1:a6:c6:21:29:6b:84:77:c2:c3:c7:2e:fd:4a:78:
23:da:72:fb:e9:bd:4b:4a:d9:ab:82:2e:08:8d:a1:
3b:df:a9:6a:cc:87:e0:e8:2d:ef:53:2b:ce:28:6d:
d9:53:df:10:b1:fc:d4:bc:6c:0f:07:0b:93:ea:38:
c3:6c:20:13:65:22:ef:16:3c:60:dd:7a:ad:bc:19:
3f:e5:d6:b9:b3:24:9f:b0:0f:27:a8:af:ca:3c:b0:
bd:b8:f2:02:74:43:be:65:83:de:38:87:90:da:b1:
70:83:53:1e:da:60:82:41:27:ee:81:55:d8:22:86:
06:2a:8d:05:c0:a8:30:d4:12:05:71:fd:04:0c:4c:
6f:3f:1f:f9:8b:e2:a7:8e:63:91:52:56:88:6d:d7:
59:45:87:92:ad:41:ad:3a:ff:e9:56:44:22:21:9f:
83:dd:86:8a:fb:51:ec:9c:5a:fb:04:2a:a4:59:38:
1a:eb:de:02:c4:a8:10:50:a5:83:2b:8d:f7:e1:19:
19:fd:eb:31:85:2f:c6:6b:96:8c:86:09:0a:dd:50:
e2:a4:e7:a5:e9:45:2d:81:ac:1f:5a:05:ca:d7:3d:
26:95:91:fe:d5:d1:99:39:2f:51:d4:8b:a6:19:b9:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:D4:9A:8E:DC:CF:35:FA:41:35:B9:7F:2F:E1:4A:A3:B2:3D:53
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:80:f8:a4:99:ee:78:0d:8a:90:ba:5f:3e:69:09:b4:90:48:
f5:2c:20:a6:99:cc:3b:d9:de:91:34:f2:b8:7d:63:ac:e4:d4:
82:ca:38:fd:49:d6:b0:db:80:14:18:76:fc:73:a9:0d:da:59:
51:73:61:23:9c:f8:26:20:db:b4:8c:ba:14:2c:ed:ca:d5:56:
d5:3e:83:ed:81:06:01:4e:d1:3b:c3:79:af:69:d0:ed:27:f8:
b1:de:cd:ac:f5:fb:97:a1:f6:c7:e8:c7:66:fb:97:ac:c1:d9:
cf:73:74:f8:49:99:bc:3e:d1:a6:67:79:1b:36:1a:da:0c:17:
18:34:e4:87:18:97:cd:9d:98:16:56:16:34:74:81:ee:53:91:
2d:3a:12:77:4a:c4:e3:d3:ea:40:e8:1b:7b:01:b2:78:6b:6a:
16:56:36:a3:0f:7b:97:a8:6f:ac:a3:f5:d0:57:84:ec:38:51:
9b:f5:31:d5:b7:7b:f9:dd:5e:ce:9e:36:8c:59:b3:3a:fa:dd:
a2:6f:ed:98:22:62:41:b8:17:ca:f6:09:e1:b8:eb:6d:a1:bd:
4e:b2:53:6b:5f:49:b2:9d:70:47:b1:3f:7b:ca:c4:65:61:0f:
4c:03:3c:89:f8:9c:6d:76:9e:4a:60:39:e8:c4:72:52:f6:af:
c7:93:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:17:41 2025 by rpki-client