Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: TNmnDADEW+9ocXmHR+4vWy+GFw15YE/0gHuXWrbX0/I=
Subject key identifier: 74:CD:54:09:FB:4C:F6:BF:BF:EA:F6:CF:16:98:DA:27:F4:58:DB:45
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 019849D2E7EAA30EA2CB3AB75724F8C5CC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 123A
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: V4HzyqT3UdFuM-GyIseILy4xTfQ.roa (hash: 1TwXBA5f5XgP5uZG5yeFX6kZqTX4W9t72jbcfsBpAgw=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: BTVWmtJWE0Ek+jf/LjOeUS5a0wSh/2vsdk4jKG4eOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e7:ea:a3:0e:a2:cb:3a:b7:57:24:f8:c5:cc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=74cd5409fb4cf6bfbfeaf6cf1698da27f458db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:12:45:e1:4b:8e:80:7a:dc:57:09:74:48:
15:c3:5c:92:e9:a2:f1:ad:f2:54:94:e6:d6:3e:cc:
18:8b:5c:75:3c:d3:73:0f:a5:53:c1:11:51:73:01:
30:54:9b:e9:8d:4e:f8:a0:8c:37:79:e7:fb:08:72:
f4:1f:96:fa:0b:83:1a:65:26:55:87:c6:39:b4:24:
6f:a3:8e:84:48:8b:d0:a3:cf:b8:01:04:cb:11:38:
34:6d:8d:c3:1d:85:de:e5:78:03:1d:a5:bf:4f:9d:
ad:e4:d5:d2:f5:d7:2b:ac:80:03:c9:40:85:9c:1c:
60:61:43:46:25:c2:0a:6f:95:fa:14:e0:14:e8:06:
b5:45:47:91:83:d5:9e:53:ca:1b:f1:9b:2e:bb:24:
16:73:e9:05:3f:60:c4:8a:e7:08:fa:55:ba:40:8a:
a0:78:e8:24:33:75:8f:7c:e8:29:34:e8:35:91:94:
af:ea:44:06:21:02:27:55:6f:87:91:75:6d:7f:de:
b6:00:b6:45:63:11:07:07:7f:05:6a:78:c7:f1:de:
0d:6e:19:9e:5a:67:89:05:32:09:e6:14:6e:d8:83:
c5:a0:fd:64:3c:4f:7f:90:60:a4:0f:57:e1:80:aa:
a3:86:9c:63:7e:a7:c1:56:03:66:58:ba:63:ad:55:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:54:09:FB:4C:F6:BF:BF:EA:F6:CF:16:98:DA:27:F4:58:DB:45
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:53:b4:62:e0:8a:0a:b3:c0:55:3e:e2:54:6e:2d:5d:6d:e5:
b5:37:1b:a5:13:46:ee:44:91:5e:f4:db:38:ca:86:fa:c4:b8:
83:ac:33:5b:51:e7:2f:b0:55:cd:3b:cd:48:ab:fa:bc:6c:ac:
dc:ec:db:28:e6:ee:ed:60:1d:2d:db:91:61:f4:83:e1:66:00:
c4:df:4c:5a:59:55:79:23:c2:16:ec:a5:6b:01:d0:d8:72:95:
b9:0b:7d:c4:d6:19:74:22:62:f6:b6:20:22:70:96:50:92:48:
1d:68:04:f6:d9:fa:e3:8d:a8:93:dc:c3:3f:2b:8b:d6:1c:93:
8a:26:b9:cc:fe:d5:35:22:a5:17:54:79:5e:68:ca:d2:d7:b7:
63:ce:e2:72:37:c9:4e:50:3a:d6:b0:f2:ad:37:3b:0b:e2:4f:
f6:e3:75:9d:b9:29:1b:68:c3:e1:fd:f7:a2:31:97:32:08:4d:
b5:25:71:14:ad:9b:51:75:9c:97:80:c4:6b:bd:e8:10:3b:09:
ae:99:6e:df:60:6e:d1:c0:b1:ef:0f:6f:be:81:e8:89:46:a6:
a4:94:89:28:a8:b2:a6:49:5d:b8:25:93:c3:c9:cb:cd:0f:83:
d0:f0:75:1c:63:27:5c:ce:20:27:39:99:84:03:7d:75:bd:0f:
d0:83:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:01 2025 by rpki-client