Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: ysRCQdjMAsel1W5BmgqucvuIBlNm1NZaQrRyx92rcrY=
Subject key identifier: 5B:1F:78:2C:36:3D:4B:96:DF:26:C3:FC:48:B9:6F:BD:32:B4:AF:D4
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 01984A77C6ACC4E17DEB4AC556C2FEF5177B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 1488
Signing time: Sun 27 Jul 2025 06:00:19 +0000
Manifest this update: Sun 27 Jul 2025 06:00:19 +0000
Manifest next update: Mon 28 Jul 2025 06:00:19 +0000
Files and hashes: 1: XhZd4AXcprYaSWJWAkCvII9n7bo.roa (hash: +WoaFZAXvgLhbONkinxfr9JdPcFsQuGimoN13TlQ0XQ=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: x+r7WxmKBcnrUlsVSl5OR30olYZAnakrwCMxkzq+yRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c6:ac:c4:e1:7d:eb:4a:c5:56:c2:fe:f5:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Jul 27 06:00:19 2025 GMT
Not After : Jul 28 06:00:19 2025 GMT
Subject: CN=5b1f782c363d4b96df26c3fc48b96fbd32b4afd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:c9:d8:20:e4:a4:e7:9d:ec:47:4f:53:6c:
b4:60:2a:ad:dd:e8:a3:6e:16:cc:db:33:48:67:80:
57:fd:68:2c:db:32:e4:41:8e:a5:6d:d9:52:82:fc:
f6:f6:c5:d3:84:eb:15:f3:90:24:41:cc:36:b1:26:
49:6b:01:5c:dc:20:ff:d3:b8:57:6f:d5:fc:d7:cc:
0f:59:6c:6d:db:44:21:74:1e:bc:af:b5:7a:c9:2c:
c7:18:eb:06:2c:c0:cf:d7:51:9b:ba:bf:ed:3f:2b:
c6:b4:4b:54:14:89:a9:76:82:56:36:8f:20:45:c9:
6c:2c:71:b0:9f:ee:59:27:5f:19:cf:f4:80:c6:12:
fe:3e:cd:e3:ce:a1:f9:0e:d8:9e:4e:55:7c:42:92:
89:2b:54:0e:94:f4:8c:fe:1e:a7:50:eb:75:b4:c2:
44:eb:d3:9b:be:67:0b:5b:05:26:e3:71:1e:21:a4:
21:b0:ff:b3:00:83:10:2d:0e:b7:fb:9f:d5:7a:76:
87:2a:9c:6b:11:17:c4:b6:a5:68:d9:d5:53:1f:73:
cf:58:b1:6b:62:46:0d:08:4b:4a:f5:28:da:44:d3:
6f:e9:73:46:c5:35:20:a5:34:d6:e2:66:18:86:d9:
e0:54:74:20:f6:3d:95:12:98:21:ca:66:ea:af:1b:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:78:2C:36:3D:4B:96:DF:26:C3:FC:48:B9:6F:BD:32:B4:AF:D4
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:19:92:6b:e7:ae:9a:6d:e7:b1:60:89:94:58:fb:99:34:4e:
f6:90:cd:ed:97:e3:ba:bd:df:96:a4:36:5a:55:4b:4e:5f:50:
7d:38:3f:0e:d3:92:3d:3e:41:dc:cb:af:89:ce:d9:f6:90:cf:
35:a6:52:30:c2:e1:04:b7:c4:f1:fd:74:21:31:b0:5f:3e:5d:
2d:e3:3f:c1:da:c4:ff:d4:43:d4:3f:f0:db:56:79:35:64:c1:
af:26:7c:0d:81:75:02:83:58:ff:8e:7f:97:77:e5:01:e5:98:
25:a5:bd:f2:18:43:59:61:8c:76:f1:8d:e9:e6:a8:c6:6d:a0:
16:1e:85:8d:ea:b0:2c:c3:51:ee:e1:08:ca:78:aa:30:e2:d7:
c4:73:fc:f5:b3:ff:8c:f0:17:96:46:8a:a9:f4:5d:12:44:8b:
fb:a9:06:ac:0f:0e:fe:d8:23:d8:0a:66:f2:a2:8a:51:c6:46:
a1:a6:b1:11:77:5a:72:08:96:87:01:d9:74:bb:f7:d6:54:4e:
f1:2f:9d:45:db:95:d8:ad:bd:4a:31:22:90:68:da:69:d4:c1:
34:1c:89:ee:65:fb:e8:43:2b:8d:aa:de:69:3f:6d:56:d7:7c:
2e:7d:37:3d:54:c1:37:bb:4c:08:ea:98:45:f6:83:77:21:02:
4b:4c:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:36 2025 by rpki-client