Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: gL6y9IsUxztF8K+ecinzdNGwzJJcDmMJBtHQAkuTXPY=
Subject key identifier: BF:67:FD:E4:55:25:A3:87:6C:61:56:C0:31:7B:36:DD:77:0A:DA:A4
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 01984777E0ECD8C68C47FD47F817AA51333F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:01:35 +0000
Manifest this update: Sat 26 Jul 2025 16:01:35 +0000
Manifest next update: Sun 27 Jul 2025 16:01:35 +0000
Files and hashes: 1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: 1aU9zAplKEvF6nr9AsMCPfEAk2G+pGkW9IFR76RiGSA=)
4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:e0:ec:d8:c6:8c:47:fd:47:f8:17:aa:51:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Jul 26 16:01:35 2025 GMT
Not After : Jul 27 16:01:35 2025 GMT
Subject: CN=bf67fde45525a3876c6156c0317b36dd770adaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:cd:18:19:f2:40:7f:8c:90:70:ec:ae:51:
5d:c7:04:19:36:67:35:e7:ef:69:b5:7f:d2:7d:cd:
fa:77:39:ed:62:4d:07:28:ea:3b:cf:bb:ca:dc:48:
32:d8:83:ab:4a:46:2f:5f:e1:37:61:99:82:45:ce:
90:5e:27:c0:04:f7:25:eb:54:f8:17:07:d4:64:66:
3a:65:4c:06:9f:66:da:09:85:78:6b:2f:97:0c:3b:
d3:7c:39:59:b4:98:6c:ea:ed:58:25:06:45:cc:94:
f4:18:17:70:4e:db:48:4b:66:ac:80:65:99:34:6f:
a6:07:e3:58:8a:09:bd:bf:5f:e8:34:06:af:1a:0f:
bd:7b:f0:78:06:84:55:61:78:c4:a9:d6:e3:32:0a:
c4:c1:94:b7:13:bb:99:31:de:36:c2:40:7f:c7:81:
ca:6f:63:78:cc:68:80:3f:9f:17:48:80:90:99:34:
e7:66:26:be:d6:74:bb:ef:66:0c:a9:aa:9e:27:9b:
11:0a:62:0b:f2:ad:59:24:e3:0b:59:a4:69:97:bb:
2d:21:97:93:61:40:2c:d1:77:a4:ee:0b:62:5f:06:
36:f2:a2:aa:64:c4:fa:4b:71:b4:0a:25:44:7c:3d:
db:ec:36:f3:f4:a1:57:81:ec:4d:aa:3b:b3:68:ac:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:FD:E4:55:25:A3:87:6C:61:56:C0:31:7B:36:DD:77:0A:DA:A4
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3a:ac:d7:bc:d6:5d:90:15:36:95:bb:9f:c3:f1:26:21:2a:
35:8b:d7:24:f8:f9:b8:44:3e:c4:cf:c9:75:ac:3a:46:b0:81:
c4:a4:10:73:84:62:ec:a9:83:e6:39:ee:33:62:2e:34:9f:fb:
56:ef:e6:63:1d:6e:80:76:1e:9b:57:5f:9c:3d:3d:e4:0b:ea:
d6:ac:8f:e2:63:51:ee:3a:c1:66:f0:af:f6:10:3c:e0:33:9a:
6d:5b:f2:28:5b:36:5e:38:43:84:a2:d2:14:ca:f1:3b:18:ac:
f3:07:b2:05:91:f7:76:66:8d:f2:7d:97:36:57:f5:22:97:83:
ee:4f:fe:cb:a8:96:40:cb:2f:5c:b3:cb:2f:82:8b:f3:ac:5e:
72:f4:7c:9f:b9:a8:13:27:a5:0b:6b:8e:3b:68:cf:ff:9f:4a:
f6:9f:bc:86:17:90:4f:f6:2a:92:71:11:46:bf:03:ed:72:6c:
f0:2d:1f:c4:5b:fb:e6:39:59:9d:08:7c:79:a3:53:5b:d4:03:
4d:73:b6:e3:51:be:f3:e0:26:39:63:43:b6:e7:c7:f4:37:85:
b0:d6:75:f3:66:00:ee:0c:00:37:7b:66:c0:46:f5:74:cc:f0:
a8:00:78:48:39:fd:7d:ce:dd:bb:af:71:e6:0b:cb:04:2e:fe:
f2:d9:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:11:09 2025 by rpki-client