Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: sWZTgvqQQnIxJi1Fht/KXzpNt7xaa6A9KXc3nm/MHao=
Subject key identifier: D4:DD:D8:92:46:0B:66:54:0E:AF:C6:4F:D3:41:67:3B:13:40:91:9D
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 0198530E8F69271E3AC4CE0FA74871A04B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 030D
Signing time: Mon 28 Jul 2025 22:01:59 +0000
Manifest this update: Mon 28 Jul 2025 22:01:59 +0000
Manifest next update: Tue 29 Jul 2025 22:01:59 +0000
Files and hashes: 1: 6Q2HcS2RcDd9Dr_MYHyibugbWc0.roa (hash: +al/CVwN5+E5qhE2z1hKzqr2S4yV6SQ/qbFlSTBTEk8=)
2: YJ38H1JUnUf4GaAI-4_L--wUJZI.roa (hash: GvPm+IdYGRMKJSr2LCsRHgR1/00CHHLsiEJ+iJ60p6s=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: G7EMqI08booDW1PmFW3hZgt/tHP+g+dzdmKRnr1inwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:8f:69:27:1e:3a:c4:ce:0f:a7:48:71:a0:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Jul 28 22:01:59 2025 GMT
Not After : Jul 29 22:01:59 2025 GMT
Subject: CN=d4ddd892460b66540eafc64fd341673b1340919d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:f7:8d:01:d9:91:1d:45:6c:bb:18:fa:79:
9b:0b:58:ce:cc:3a:d5:26:76:5b:d2:3c:70:60:e6:
14:25:ad:b7:ca:1f:dc:01:19:5c:85:9b:25:ee:d0:
fd:db:dd:a3:1d:81:04:93:c9:0d:82:5a:58:43:94:
06:f1:f9:a3:dd:79:1a:ee:3c:7d:1b:e8:98:b5:fa:
27:0c:05:7f:bc:5f:04:7c:ad:3d:e5:73:1e:d2:93:
38:c4:60:ab:42:70:0a:6d:60:d1:38:5d:01:16:ff:
3d:08:e7:ca:ab:3f:5e:52:f7:48:e1:ac:28:4a:19:
fd:c9:85:44:f4:cf:49:d1:92:fd:f1:3b:c2:f5:e2:
93:64:ce:c4:c8:83:24:64:f6:39:83:aa:3b:b7:18:
d6:2b:60:fb:30:1e:22:0d:f7:ab:81:91:3f:2c:34:
4b:74:14:2f:ca:3f:e9:ac:1e:23:ea:02:ee:b6:7f:
e3:be:80:3f:99:c4:12:bd:26:1a:5f:b7:09:82:a7:
d1:f5:b9:c4:3b:cc:d0:62:fc:b0:ba:16:02:8f:7a:
5a:a5:94:1f:88:16:fd:1d:92:6e:19:e8:3d:cb:34:
e6:fd:99:4b:98:84:c4:5c:38:65:84:8c:86:75:44:
93:e7:f7:d7:2d:07:01:cf:d2:e6:46:63:89:f2:f7:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:D8:92:46:0B:66:54:0E:AF:C6:4F:D3:41:67:3B:13:40:91:9D
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:99:a4:13:6d:be:ef:60:30:17:df:02:25:ac:84:27:04:da:
ac:70:fc:bf:69:df:18:7c:e6:9a:6e:cd:e0:35:d3:70:78:e1:
01:e9:9e:f3:01:d1:3d:10:46:62:8a:03:5d:78:06:e4:5f:bf:
bd:9c:c9:9d:1a:07:1f:dd:fa:c3:46:ab:5a:d4:7f:b1:cb:37:
52:ae:39:1a:87:d7:90:e1:4b:5b:4c:5d:1c:26:f5:33:de:dd:
17:6c:8b:44:d7:0a:4a:24:b7:a7:2a:9c:e4:70:1f:62:45:07:
95:98:3e:8c:1e:a5:b3:88:77:93:24:21:0c:61:69:bb:79:af:
1e:ef:f9:ab:9f:ec:69:1e:49:2c:07:92:4b:23:08:1f:02:2d:
df:3f:2d:57:f3:48:0f:41:5c:9f:25:74:ed:dd:6e:b0:1d:83:
01:67:4a:84:05:ba:b2:ed:f2:f8:53:1f:a1:dc:43:15:b0:a3:
6f:a1:9f:62:0f:92:00:9a:4f:a6:44:30:03:f6:a2:76:70:ec:
8a:0b:03:9a:52:bb:14:03:c4:48:e0:a1:64:ea:26:10:3f:98:
c0:87:b0:54:f3:e9:41:59:cb:48:fe:1f:08:a7:98:d6:86:e7:
ec:84:e1:22:1e:00:56:89:d1:1a:e8:90:52:12:fc:cd:a9:3c:
0d:fd:82:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:45:49 2025 by rpki-client