Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
File: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft (raw, json)
Hash identifier: a8xQ2T3M/mG54AJmTf8dmDzQt0qayGVh2g+NoFRQ1Sg=
Subject key identifier: EE:7C:8C:47:E4:35:C9:4D:4A:44:DA:BC:C3:DA:F3:C4:2B:A5:12:43
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 0198496651D323E734A3B98249DBD473FAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:01:39 +0000
Manifest this update: Sun 27 Jul 2025 01:01:39 +0000
Manifest next update: Mon 28 Jul 2025 01:01:39 +0000
Files and hashes: 1: PbEykFk95Qp-GzLhGQEzPuqSxmk.roa (hash: Hvk7rTnua0DJqMwP5Nyh8b4Zk2rUSg2r4snTzFoJ1wk=)
2: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl (hash: e5AhWjGmhmSnBXdgg5OYak5kqRtQiUottO+sUK45u1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:51:d3:23:e7:34:a3:b9:82:49:db:d4:73:fa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: Jul 27 01:01:39 2025 GMT
Not After : Jul 28 01:01:39 2025 GMT
Subject: CN=ee7c8c47e435c94d4a44dabcc3daf3c42ba51243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:a6:9e:d3:c6:9a:ec:ad:f2:20:7f:cb:87:
c4:39:a5:36:00:30:3f:dc:d0:81:c2:72:7b:e2:fb:
52:7c:ee:78:15:fc:8a:c7:c9:5a:f0:5e:e0:6d:ce:
bc:04:90:f0:16:2c:8d:ee:2e:93:89:2e:bc:b2:eb:
48:31:0a:66:71:ff:41:e2:98:0b:1e:81:0a:0c:6b:
ea:f7:51:c8:ea:05:dc:32:ed:ef:bc:3d:fb:43:2a:
2b:eb:c6:e7:5f:41:e8:23:db:21:b9:8f:50:fc:05:
32:1f:90:c0:21:68:03:09:6b:c1:ea:24:e2:1f:13:
9c:d0:0e:23:82:f6:78:56:41:fe:ea:a6:59:b0:4a:
27:cf:ff:ee:35:52:80:4d:47:48:0b:a1:4c:95:9e:
89:96:3b:f5:c9:c4:30:3a:11:8e:39:a3:25:ad:52:
7a:e6:b2:ce:e0:e9:40:39:88:32:34:77:9e:75:89:
9d:ed:ac:49:44:5f:a5:85:e6:23:69:39:f4:48:d5:
61:3c:e4:21:f7:34:06:0e:ac:ef:ad:d4:2c:85:89:
20:f2:81:4b:92:c6:5b:0a:df:57:78:0a:f9:fa:64:
aa:be:19:f4:a7:b8:22:32:4f:a0:5f:20:52:8a:ea:
36:ef:64:cf:27:68:98:bd:48:50:c3:02:e5:c2:33:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:8C:47:E4:35:C9:4D:4A:44:DA:BC:C3:DA:F3:C4:2B:A5:12:43
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a9:33:00:ae:97:f6:a7:a1:e4:b2:a5:22:31:74:a3:4e:c7:
33:5b:35:31:ba:dc:ed:c8:95:e1:9e:40:3d:4c:af:8f:25:d4:
f3:54:91:04:8a:a3:5b:b5:e6:44:01:f2:d0:6a:46:d6:0d:35:
ab:ea:f2:bc:98:d1:70:33:13:2f:f6:78:79:c3:22:e6:d5:54:
b9:0a:d8:34:cf:87:6e:54:95:ac:d7:4c:52:07:47:9c:ea:37:
d4:ea:f5:f3:87:a5:05:82:12:46:92:01:c7:f5:83:e5:ae:ec:
b4:15:73:21:90:66:30:81:ae:4a:c7:17:38:1b:20:1f:43:14:
74:91:28:0b:7e:0a:92:97:01:10:95:0b:ea:52:b6:c4:f0:70:
11:c6:58:0b:f2:cd:03:9c:3e:69:ca:a0:59:09:dc:7a:49:13:
87:fa:9d:38:bc:df:6f:36:19:91:68:24:e8:25:c0:7f:2d:a9:
e7:ea:8d:eb:76:b4:83:90:1e:a9:98:06:f2:ec:6b:f0:c5:8a:
88:f9:6a:66:bf:11:4a:e1:73:09:fd:37:6c:9f:0f:80:4e:50:
53:2a:65:13:9f:22:ca:b8:fe:eb:73:72:d1:95:be:da:ed:75:
c1:38:dc:17:98:cd:57:51:8c:b6:0f:5a:4b:18:80:8e:ee:f1:
49:c4:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:27 2025 by rpki-client