Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: wISJsIEftS6+Ff9ILUAmv3pBktz52kx7nBylgkXRQ9g=
Subject key identifier: E1:45:DB:C0:CE:6C:4D:65:A7:43:B0:32:75:2C:79:71:60:D6:B8:90
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 0198443F070E2B275C51C02EC2CEBFCB5AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0726
Signing time: Sat 26 Jul 2025 01:00:37 +0000
Manifest this update: Sat 26 Jul 2025 01:00:37 +0000
Manifest next update: Sun 27 Jul 2025 01:00:37 +0000
Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: v8D65V8d9z0iS7yE0VJPkm1E32ALVl8PsHZCDyF5qvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:07:0e:2b:27:5c:51:c0:2e:c2:ce:bf:cb:5a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Jul 26 01:00:37 2025 GMT
Not After : Jul 27 01:00:37 2025 GMT
Subject: CN=e145dbc0ce6c4d65a743b032752c797160d6b890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:aa:58:3f:fb:67:83:b3:ce:9f:0b:3c:34:
26:d0:f5:f1:c7:b7:e2:52:2b:9f:5d:9e:cb:5b:31:
d6:ad:ce:07:8a:2a:35:84:6f:55:84:8f:f7:f6:67:
12:b5:4a:af:2e:3b:b4:e3:82:54:f4:e8:e3:02:78:
1b:47:d9:39:fd:5b:de:4e:52:00:0e:1b:d8:3a:1f:
1a:e4:46:42:ee:d5:49:8e:45:e0:d4:72:f9:d3:4f:
d3:37:ef:6a:9e:e8:e5:13:18:b9:bd:38:64:19:bf:
7b:e8:c1:2d:b2:3f:e9:12:9a:41:8e:f8:6b:c4:af:
f4:8a:5f:21:06:e1:ff:5f:57:20:9b:61:78:d9:56:
41:50:f9:d3:09:a7:a5:ed:84:8e:84:52:36:1b:bf:
c5:80:15:67:21:06:4d:02:58:2f:fb:ad:bd:07:da:
df:9f:2a:50:1c:a0:46:c4:63:40:4a:78:8a:2c:b7:
36:18:b5:a1:55:a5:c7:d8:38:de:6e:0e:87:c4:77:
69:22:c3:a5:5f:a5:bc:e7:44:2d:06:cf:81:cb:5d:
7c:65:2d:e0:9a:41:66:9a:6a:8f:32:f0:ce:5f:a6:
dc:1f:96:c0:aa:23:69:83:09:b4:7a:95:73:69:cc:
dd:56:32:b9:d6:db:b8:a9:54:8d:b2:b8:0d:05:b9:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:45:DB:C0:CE:6C:4D:65:A7:43:B0:32:75:2C:79:71:60:D6:B8:90
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c2:6c:8c:f6:d8:d9:67:75:19:d6:4d:5f:9c:a2:ef:cd:b7:
01:cb:56:2a:cc:53:18:6c:54:a5:9e:0c:a4:aa:28:78:c3:fa:
ae:37:17:0d:b0:1c:5e:7d:4a:93:cc:8e:53:5b:9f:04:33:ce:
5a:12:9b:b5:60:a8:1f:8a:3a:b9:a8:56:ff:ab:d0:fd:a8:19:
12:3d:9f:58:6c:73:a1:6a:41:f2:33:34:d5:6a:73:0d:62:2c:
cd:d8:3d:5d:80:0c:0f:bf:0d:9f:4c:62:79:d3:71:0c:5c:5d:
b8:38:bf:dd:a6:2d:b5:d5:15:a8:34:57:8a:72:2b:39:4e:d1:
2c:97:0a:9d:f0:bc:19:8f:97:ea:2c:7e:db:d6:cf:54:02:8d:
2e:55:28:a9:af:29:11:fb:c3:4a:7b:57:ce:00:f6:4f:4d:e4:
50:d6:30:35:c6:5c:4a:16:cc:92:8d:50:4d:83:db:8f:15:31:
a6:56:16:2d:70:aa:fa:21:55:35:22:77:a5:0d:99:98:18:36:
1e:86:7c:b2:1c:cc:0f:24:c6:99:17:a6:c9:92:21:66:10:a4:
8f:2f:3c:0d:3c:ab:98:40:39:10:2a:ca:87:4d:83:32:13:50:
4b:52:83:34:ea:af:b8:cc:6a:2d:11:da:0b:ac:d8:1b:93:a1:
2c:19:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:37 2025 by rpki-client