Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: AiVoB1c5yQbbjLjqKTQ2paYJdRunuAstroi77XslBAc=
Subject key identifier: 96:7B:E9:CC:20:C7:52:56:7E:1B:CB:C6:4B:0C:01:C3:D5:44:CB:28
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019845F619B7A949B9B30AEECD3312E120E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0260
Signing time: Sat 26 Jul 2025 09:00:13 +0000
Manifest this update: Sat 26 Jul 2025 09:00:13 +0000
Manifest next update: Sun 27 Jul 2025 09:00:13 +0000
Files and hashes: 1: 0tHvPtdsZRMSdECFrWywHEFzjJY.roa (hash: wDxCLikDUetb91mXxU1f33qmz0PqiuAAUobRz5+KIoE=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: RUO9WnQstCMLQTSLgflxhpd4K17UkhyXtIEMVvnqZdc=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:19:b7:a9:49:b9:b3:0a:ee:cd:33:12:e1:20:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Jul 26 09:00:13 2025 GMT
Not After : Jul 27 09:00:13 2025 GMT
Subject: CN=967be9cc20c752567e1bcbc64b0c01c3d544cb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:0b:15:b5:96:78:97:0e:7a:68:36:d7:f4:
21:b7:ba:5a:2b:2b:36:cc:d8:b7:eb:b2:f2:4b:7d:
71:c8:a3:aa:fc:56:30:98:55:d6:1e:7a:1a:c4:9e:
6d:ad:94:fe:dd:0a:a9:05:9a:f0:11:d6:34:9e:63:
e2:fd:a3:ca:e1:88:59:d0:d8:35:15:86:44:61:3c:
3f:0e:7e:6c:d8:89:c6:ee:62:b3:eb:7e:89:eb:45:
bf:d7:de:56:8d:5f:6f:fb:f6:e2:86:76:f3:c6:6d:
22:24:8c:c4:87:aa:66:5e:d2:f7:66:48:9c:68:3e:
15:14:37:8c:12:65:95:42:06:09:3e:1e:59:d1:6b:
3b:f5:4d:d9:2e:a4:84:fe:e2:a8:32:00:02:c5:f0:
b9:fd:51:af:ad:56:f4:5c:91:0e:90:27:29:60:b9:
e9:37:49:bd:a8:53:f9:13:3f:4f:e6:65:99:13:db:
d9:15:fe:ff:9a:ce:be:8f:24:fa:e9:1f:40:38:ba:
41:a6:87:12:a0:d6:8c:bd:6b:26:82:7f:89:c1:f3:
aa:ab:19:64:02:cb:0f:d4:73:82:24:33:74:2e:73:
ba:66:d8:20:23:b5:34:18:ad:29:78:bb:7b:fb:5d:
6e:35:d7:30:ad:b4:65:02:77:9a:04:c3:de:9f:f8:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:E9:CC:20:C7:52:56:7E:1B:CB:C6:4B:0C:01:C3:D5:44:CB:28
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6e:37:63:c3:42:c7:60:15:e5:6c:7d:22:26:a0:11:ab:a6:
92:61:75:25:37:2d:f7:fc:1d:99:42:d5:43:c9:0f:6d:3c:a2:
b7:f8:f8:d2:1e:13:c1:cf:69:94:4e:e4:eb:85:49:7d:85:0e:
62:ce:52:1e:2d:61:8f:60:9f:c4:de:7e:3e:aa:9c:6d:25:07:
68:8d:b3:3e:5b:37:3d:fd:99:cf:12:f5:8c:59:c7:69:1d:a4:
da:de:18:15:86:27:ed:b3:a6:64:d8:99:89:55:5d:b4:5a:0b:
ae:ca:6b:93:68:bb:02:7c:66:03:75:f5:5c:91:4f:52:57:65:
56:0a:80:3c:fb:38:36:f5:6e:37:5e:e6:59:7e:c6:32:a6:f0:
2a:c1:ed:af:2d:38:2d:8f:b3:a0:b6:55:1d:0f:e2:4f:69:53:
b7:16:fd:f3:51:d8:9f:3d:70:13:17:f0:89:05:b9:d7:85:29:
fb:5b:78:9a:be:54:70:05:b7:27:95:39:4a:7c:b5:5a:e8:68:
5f:a8:35:06:8d:4d:5f:83:f1:f3:ae:84:db:aa:57:a6:e6:ff:
01:05:70:5a:31:22:51:5f:d5:7f:a3:c8:96:50:9e:e5:6d:89:
f9:22:09:97:1c:2b:5c:25:f3:37:83:bf:3b:c2:49:48:95:1a:
7c:fd:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:09 2025 by rpki-client