Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: K/TvLG9+PkQ9LFtlbRMk6dwKU/3QVJFQv286wSQR0lQ=
Subject key identifier: 0F:B2:3A:F2:42:78:A3:D2:DA:9E:DD:13:BE:30:C2:B4:F3:22:2B:B1
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 01984AE5ADABEF440D3E296E2FF01A386493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 08:00:22 +0000
Manifest this update: Sun 27 Jul 2025 08:00:22 +0000
Manifest next update: Mon 28 Jul 2025 08:00:22 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: gTHI//hD9SCxqr1Elu7jx8hzmx3zeBIl5H1kSXl2/I4=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ad:ab:ef:44:0d:3e:29:6e:2f:f0:1a:38:64:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Jul 27 08:00:22 2025 GMT
Not After : Jul 28 08:00:22 2025 GMT
Subject: CN=0fb23af24278a3d2da9edd13be30c2b4f3222bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:a7:0b:38:78:ad:58:83:9b:c9:94:7f:b1:
bd:8d:8f:56:79:16:1f:0f:56:2a:33:50:10:13:78:
bc:e1:e7:b7:c3:14:f4:d0:fd:03:28:48:86:3a:58:
93:41:7e:c5:f3:c7:21:fb:89:08:73:b4:b6:1f:ea:
04:3a:98:82:26:4d:db:d5:00:98:79:6b:3c:d7:f4:
fa:6c:c0:a2:37:07:6c:a2:d6:57:78:cd:69:ff:99:
76:2d:ab:4f:b5:ba:f5:68:a3:4a:52:43:61:43:78:
7d:b9:37:3d:a5:ed:8a:b8:4c:e6:7b:73:a9:fa:61:
eb:98:5e:7e:09:82:28:72:98:ee:70:6b:29:7b:36:
70:a1:38:c2:84:35:eb:52:99:14:e9:3c:a4:7e:f7:
ff:61:e0:90:e7:2d:d4:f2:cf:8b:97:73:7b:73:cd:
b7:96:ea:4f:2f:82:a7:37:a5:ed:f4:1f:93:82:2a:
10:03:63:cf:86:b1:46:7e:92:32:5d:8d:98:f2:5c:
4c:78:54:df:48:47:96:0f:b1:e8:ec:25:b6:90:5d:
4c:14:f8:84:86:b4:75:e1:a0:2a:e8:e6:1e:02:36:
09:b2:0d:23:da:9e:e0:fc:84:90:16:79:33:15:63:
15:fb:ca:8d:68:99:92:0a:e6:d8:e7:02:ec:cc:08:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:3A:F2:42:78:A3:D2:DA:9E:DD:13:BE:30:C2:B4:F3:22:2B:B1
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:39:88:fa:64:86:aa:c3:b3:c2:a2:c5:39:d9:fc:ee:39:78:
11:3c:f9:ef:88:15:fc:96:49:1a:ee:99:e0:71:3c:55:a5:b7:
b6:cf:a6:8a:74:78:c9:fa:57:93:72:bf:71:8d:2d:f5:35:8f:
c0:b2:2d:f7:10:20:6c:fd:30:de:8a:8c:59:d8:4c:0e:23:1a:
ae:2e:64:12:92:b2:e7:0e:fd:92:76:b3:62:6d:5a:fd:1c:49:
ed:a7:e3:eb:54:3a:26:8d:42:41:9d:bc:09:77:04:79:04:ad:
89:4e:ac:7d:9f:4e:08:92:dd:06:81:0f:d4:8f:46:d7:4a:52:
e7:b7:d6:03:e3:f5:cd:93:94:dc:fc:60:62:af:b8:18:d1:15:
39:9e:a0:48:c6:e6:47:1f:46:31:01:2e:bd:a2:b4:5a:7b:60:
79:f5:f5:12:c4:f9:bf:70:75:0b:bb:70:d9:09:87:97:25:e2:
76:19:bf:cb:e4:c6:3e:01:82:a1:11:de:02:13:92:07:be:24:
ba:78:7c:08:af:9f:49:ed:a0:1a:67:91:73:eb:7a:9d:4f:52:
ce:15:b2:81:db:b4:e5:92:86:f3:b7:83:d4:1e:c8:d8:20:49:
1b:68:9a:c3:ac:8a:f1:29:d7:da:29:b7:7c:db:ee:ff:55:a0:
0d:17:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:06 2025 by rpki-client