Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: ZiIrfA6spCN7z4b40fTzse1DfRp+8Radm6LA/I9VuOE=
Subject key identifier: 9F:8F:97:4E:B1:77:9C:A5:A6:F1:0A:A5:E6:58:8D:FA:4E:32:5A:24
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019845F61C974594D7F2957F43BB508A40AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 10A0
Signing time: Sat 26 Jul 2025 09:00:13 +0000
Manifest this update: Sat 26 Jul 2025 09:00:13 +0000
Manifest next update: Sun 27 Jul 2025 09:00:13 +0000
Files and hashes: 1: bbcA4RxlQmcQjNn0rG4goHNMuOU.roa (hash: R2hOoSIVcz11ndb2ZPvvYv6Kv8fgZfMkny+ajnRe2GQ=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: bTlD9o+pSy8AXCOcOfO0cE29bgwvGtpwJIQSNz+ccRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:1c:97:45:94:d7:f2:95:7f:43:bb:50:8a:40:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Jul 26 09:00:13 2025 GMT
Not After : Jul 27 09:00:13 2025 GMT
Subject: CN=9f8f974eb1779ca5a6f10aa5e6588dfa4e325a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:39:de:0d:91:af:85:3a:95:1f:94:62:7d:
1e:be:e0:11:2b:80:ea:a9:75:7b:7f:85:15:af:f0:
63:70:78:b9:f3:0c:ef:27:33:42:8f:4c:07:98:02:
a5:7e:1a:33:f4:50:54:79:ce:2b:26:a5:31:b6:08:
25:7c:fa:69:69:c5:39:d6:5c:56:12:ac:20:ed:57:
15:1c:87:15:d2:e7:e1:0a:6c:1f:a7:e0:aa:f7:9e:
fd:5b:5f:17:36:04:68:6e:fd:b1:fc:3f:fb:ff:be:
4c:1c:c0:71:d3:bf:f8:60:8b:8c:8f:76:a5:29:1d:
60:dc:0d:18:90:41:0c:f7:64:13:04:f3:00:da:c8:
3e:4c:ce:cc:62:d3:f0:ce:e7:f7:ce:5c:98:6e:22:
34:74:cd:fd:3f:7e:9c:cf:2e:67:27:f2:96:63:96:
6d:f8:c0:3a:09:71:7b:70:35:58:0d:68:d5:5a:79:
cd:0d:14:c7:2a:d9:eb:85:01:6d:c3:6e:4a:f1:d0:
39:74:76:88:0e:ed:f1:63:ce:e5:7c:60:13:88:48:
c7:13:ae:ed:75:2d:26:2c:58:47:90:2c:b4:5e:3e:
d6:53:79:da:50:30:64:d6:33:22:85:b7:24:70:31:
0c:8c:d6:25:7a:40:f4:d0:9c:5b:c7:d2:fa:9f:04:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:97:4E:B1:77:9C:A5:A6:F1:0A:A5:E6:58:8D:FA:4E:32:5A:24
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c8:50:4d:9e:65:96:fb:d6:35:20:5e:74:d4:3d:a5:1e:3d:
24:f2:ea:cd:53:7c:75:5e:28:83:f1:8e:a1:c7:f8:53:b4:b4:
f0:6c:0c:f3:8e:bf:03:ee:19:2c:c5:8a:e2:d6:4a:26:6d:6d:
5d:3f:4b:17:83:d7:5a:52:b5:61:26:db:c4:cc:b8:ed:27:d1:
73:1e:06:68:bf:eb:a8:bb:d3:9c:d6:99:cc:e1:3f:3c:06:98:
6f:87:62:ca:eb:fd:ef:db:7c:b6:9a:b8:84:6e:d8:86:56:72:
a8:18:60:b5:52:e5:31:e3:30:0b:37:cf:83:1f:43:00:6a:82:
17:cc:89:fd:8c:7b:0f:2c:a1:71:43:05:d2:b2:28:d2:d6:52:
c7:82:33:73:8a:65:3a:87:42:c1:14:de:3b:11:78:c3:56:1b:
28:1e:f3:b5:a3:b0:44:e5:d9:dc:4c:b5:f7:fa:1a:ba:57:4b:
18:7b:53:9a:c7:3f:92:8a:f4:9d:2b:76:c4:32:f4:6b:de:23:
47:78:dd:7c:dd:a2:60:bc:12:02:c0:5c:74:10:91:6a:ff:35:
93:b1:7d:c9:c3:6d:53:18:7b:e9:10:64:f5:da:95:67:7d:27:
b0:ea:f1:99:9f:9c:a2:0a:95:04:d5:dc:b5:d2:b7:55:61:58:
c2:78:b7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:28:47 2025 by rpki-client