Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: 2E+X8Op3ZNHmsZbE9NmC8RLLMZd2Bv49VLcJ+aieI+o=
Subject key identifier: B1:25:CF:89:4D:01:B7:92:4E:58:9B:30:10:AD:73:45:F0:A9:DF:DF
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 01984A0A1E62CA6F55D86711C60A6D1ED45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:33 +0000
Manifest this update: Sun 27 Jul 2025 04:00:33 +0000
Manifest next update: Mon 28 Jul 2025 04:00:33 +0000
Files and hashes: 1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: EuW7hw+Ooj+d35dybuL7OyzBlPMa9DnWHMgt6GOocwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:1e:62:ca:6f:55:d8:67:11:c6:0a:6d:1e:d4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Jul 27 04:00:33 2025 GMT
Not After : Jul 28 04:00:33 2025 GMT
Subject: CN=b125cf894d01b7924e589b3010ad7345f0a9dfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:2e:ba:b1:cf:41:cf:2a:5f:78:e3:75:84:
66:30:97:75:42:72:a4:70:22:92:00:66:33:f1:65:
7c:54:7d:65:33:ca:7a:a6:30:19:bc:68:57:d7:af:
b8:ac:3d:94:5c:2a:7b:fd:00:1d:cc:12:89:67:e5:
9c:85:1f:f8:ac:cb:1f:59:36:86:21:6b:1f:7c:a3:
a8:0a:22:46:c3:fb:b7:77:af:9d:65:96:28:e1:fb:
49:ee:20:ed:25:e5:c8:a9:94:43:a5:99:2b:81:4a:
ce:95:4c:23:0d:bc:71:ce:b3:10:df:29:cf:01:50:
5a:6d:22:4f:8e:60:23:b2:9f:fd:2c:bc:4d:0b:9b:
1e:03:9f:6b:9e:fe:df:74:9d:b2:a1:32:98:77:2b:
6d:35:ce:e6:c9:bc:cc:fb:21:e1:22:a2:fe:86:9e:
ef:3c:57:45:90:23:79:f2:20:14:ea:3a:07:83:41:
27:90:fe:e3:c5:58:83:3e:87:9b:29:a2:36:52:a1:
44:7f:29:8a:39:45:7d:25:5d:7b:8d:57:09:53:7f:
76:c7:2d:62:2d:ab:ce:2c:78:7c:ca:b3:71:0a:ec:
5a:25:9a:8d:2a:8d:66:45:76:06:66:bd:36:71:41:
2e:cd:74:e6:31:d1:f6:b6:c8:34:fa:ec:20:3b:f3:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:CF:89:4D:01:B7:92:4E:58:9B:30:10:AD:73:45:F0:A9:DF:DF
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:88:ae:d9:8c:6c:71:94:9b:44:71:0b:a5:ee:b0:fe:b4:87:
cd:c6:f8:eb:fa:d5:e8:d9:02:91:7d:ba:47:c4:f0:ed:20:30:
82:d5:71:8e:8e:44:d8:9a:3e:00:52:ee:b0:e8:7c:17:37:0b:
94:1a:b1:63:6d:c5:70:c1:1b:39:84:50:0d:9c:95:58:4b:60:
0a:9e:29:82:5c:b8:96:14:0d:54:0f:49:f7:07:e4:be:54:fc:
ca:cb:60:f9:41:9e:9b:4b:7b:fa:f6:35:5e:a4:75:54:96:43:
33:0e:0f:c1:1d:92:60:20:1d:ad:7c:02:a0:0a:85:17:a8:4f:
ea:30:1a:c8:c1:56:a5:20:6e:ff:38:f7:da:5e:5d:15:b2:4c:
20:61:f0:6e:b6:57:7e:32:29:88:bb:db:74:9e:1b:24:06:7e:
96:dd:26:58:5f:36:0f:59:ae:bb:94:2c:4b:97:f3:c5:50:c6:
5e:c7:7a:90:a4:74:94:e1:b1:53:bf:b5:16:6d:e1:c3:aa:dd:
1a:cf:cd:6c:90:00:43:56:7a:42:80:c0:f9:d9:cb:b6:bb:81:
79:2b:f7:69:d4:15:75:fe:77:7e:7c:72:50:d6:e6:0b:73:39:
89:20:6a:2e:28:ac:a7:4b:37:11:bc:48:bd:e2:e5:ef:65:c2:
88:9d:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:10 2025 by rpki-client