Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: wpbVGWWWOYy3FTKuCyet4DCMTRko+INxXyblBuHhfEo=
Subject key identifier: 50:DE:09:57:00:99:F0:FD:BC:1B:10:0C:C7:0F:E9:50:D5:EB:B4:6D
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019842193929DAEAC8414BD146A5E4C5AE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 02DC
Signing time: Fri 25 Jul 2025 15:00:05 +0000
Manifest this update: Fri 25 Jul 2025 15:00:05 +0000
Manifest next update: Sat 26 Jul 2025 15:00:05 +0000
Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: 3xl7AAfMKKK/QigM3Iv1V8enTTtaSxo+Mz4bri8Nrh4=)
2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=)
3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:19:39:29:da:ea:c8:41:4b:d1:46:a5:e4:c5:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Jul 25 15:00:05 2025 GMT
Not After : Jul 26 15:00:05 2025 GMT
Subject: CN=50de09570099f0fdbc1b100cc70fe950d5ebb46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:93:2e:64:f7:bd:aa:2b:ca:2e:6c:36:34:
fd:7f:4d:02:53:4e:72:01:68:6b:65:5c:22:a8:72:
08:cd:0d:5a:17:c4:75:b2:90:06:1c:bd:dc:8f:3f:
de:1f:86:98:a8:7b:1e:dc:d4:e6:46:41:f9:00:56:
f2:4d:8a:99:ed:4b:3c:e1:57:87:98:91:e1:d3:98:
d9:18:fe:01:c3:82:c0:89:a5:8f:b4:98:f8:29:af:
6f:30:d3:7c:4d:63:59:74:4a:cd:7c:7f:d1:ce:1c:
73:20:f1:f6:ea:54:2e:0d:21:40:61:d8:38:1e:c9:
46:cd:37:e9:58:4a:f1:f0:6b:e9:51:ce:6a:8f:cd:
ea:ea:33:f4:ce:3b:fb:2c:57:2c:4d:b7:11:d1:df:
f9:53:3e:ed:da:dc:5e:23:db:9e:aa:15:71:1e:98:
58:a1:15:ac:59:6c:3f:a1:97:91:a0:5d:85:d5:22:
25:00:21:e0:2d:ff:d4:8f:81:02:9d:57:d5:98:c3:
17:dd:f0:c1:2f:52:44:21:21:b5:ea:70:af:f6:e1:
ee:e6:47:2f:12:04:6d:3b:2b:ef:58:e3:9d:fb:b1:
9b:f0:b6:cd:41:89:e8:e0:cf:af:ed:f5:7f:db:ce:
e3:42:1f:b8:7d:fb:f2:c2:90:71:9d:63:ff:70:3e:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:09:57:00:99:F0:FD:BC:1B:10:0C:C7:0F:E9:50:D5:EB:B4:6D
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:27:65:e3:ec:b3:33:1f:cc:2d:a8:3a:f0:6a:23:e3:34:9b:
26:7b:64:a1:9c:cd:7b:00:04:61:33:4d:18:47:64:6e:9e:2c:
5e:14:66:5b:d0:e2:8e:98:e4:60:7e:bf:52:06:b0:e4:b8:60:
1b:74:f8:5f:e2:12:f7:67:21:58:bf:3c:9c:f3:fe:63:33:78:
73:fb:b5:0e:1f:6e:c5:14:63:27:fc:7f:3f:56:ae:de:e4:35:
cc:28:b3:b9:94:70:ce:ac:2f:b7:76:58:e4:a7:38:48:7c:b0:
eb:3a:69:9a:f9:9f:b9:86:7c:ae:92:57:d3:4f:14:c3:05:c2:
a3:1d:dc:df:01:05:b8:97:6f:f7:7d:fd:90:9e:fd:2e:c2:6b:
b0:e0:0a:97:d0:a8:8e:d4:f4:6a:04:18:a8:c4:58:55:94:53:
eb:2b:5e:5f:ec:4e:d8:72:5d:ca:2a:f6:8f:43:d9:2d:ff:6a:
89:13:e3:ff:69:70:5a:86:23:e0:fb:b2:64:c4:88:b4:94:44:
10:ea:83:f6:81:8f:4c:df:42:3d:b2:85:de:e6:49:2b:18:23:
80:ce:b7:7f:ec:17:6e:88:53:0f:13:42:bd:8b:3e:37:be:65:
94:3e:74:ec:79:32:be:6f:d6:0c:f0:8c:a0:8d:aa:6c:57:7a:
a3:70:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:32 2025 by rpki-client