Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: eWFAVUGOLEfIOUhJ3TYXgMcWMcwHtrnDocyrLG1NS2g=
Subject key identifier: 20:A7:3E:B4:86:C6:D4:D3:20:80:FB:9B:AD:CE:2E:3A:0F:BF:BE:C1
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 01984B5408B6ECB82AD4674ADE2A1953FC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 112A
Signing time: Sun 27 Jul 2025 10:00:55 +0000
Manifest this update: Sun 27 Jul 2025 10:00:55 +0000
Manifest next update: Mon 28 Jul 2025 10:00:55 +0000
Files and hashes: 1: FYfGapYZgv1rSx7oxjUTR0AEqSI.roa (hash: /yS9+tjgVqFWik3KkW3YA5pzZoZBBA4Y+IeN8zVnoxw=)
2: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: 9ahBeN9fAv6mWVrPSB+xuwXBPyYfo0QEvX+oK1VvhGc=)
4: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:08:b6:ec:b8:2a:d4:67:4a:de:2a:19:53:fc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Jul 27 10:00:55 2025 GMT
Not After : Jul 28 10:00:55 2025 GMT
Subject: CN=20a73eb486c6d4d32080fb9badce2e3a0fbfbec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:aa:9b:f2:b6:81:23:e6:90:6e:54:51:25:02:
d3:67:50:77:b1:40:2d:2f:0e:74:b5:6d:6a:f2:93:
21:18:fc:cb:2a:e9:73:d7:4f:46:42:bc:1c:8d:bd:
e6:58:77:c6:d0:4b:90:52:26:7a:61:e1:b6:9f:8d:
04:f8:a3:03:27:81:cb:f5:e2:98:0b:a4:9b:e0:da:
53:4e:a6:e8:4b:bf:e8:33:ea:36:a7:1e:1e:f8:a8:
59:04:3d:1f:ce:37:2a:85:0c:35:be:d6:0e:0c:48:
34:40:ea:b8:49:13:3f:ae:31:e7:24:3f:1b:f7:2d:
35:ee:86:31:9d:95:98:de:83:2b:54:97:b8:d2:93:
04:25:fa:7b:16:97:7e:aa:5d:5e:7d:f6:3c:f6:06:
9f:62:11:af:2e:e8:7e:2f:72:35:18:62:26:55:cc:
ec:20:9b:2f:d7:c9:c2:81:d8:c4:49:2a:4d:dc:fa:
05:7a:96:a9:7d:be:74:22:fe:9f:95:84:96:4f:97:
a2:e4:d0:37:a7:08:8b:e2:b6:73:5b:e6:56:1b:c4:
1d:23:7a:55:f3:ec:3a:63:b3:cc:47:a6:8f:6e:c0:
e4:b5:43:59:ef:49:79:cd:15:9a:05:88:8f:19:8c:
25:13:de:72:e2:b1:c2:e8:b4:02:cb:71:23:c0:9e:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A7:3E:B4:86:C6:D4:D3:20:80:FB:9B:AD:CE:2E:3A:0F:BF:BE:C1
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:86:26:26:0e:ce:ff:ad:fa:74:53:a2:f4:b1:de:aa:08:19:
6c:92:2c:d0:57:dc:83:5b:e8:1c:3a:09:ca:a6:c4:31:39:05:
ab:bd:6b:d6:a6:34:af:9c:21:c3:a2:3b:d6:87:73:22:6c:a8:
e2:1e:3c:c8:43:16:d0:8e:b8:85:92:d4:5d:6c:8b:91:0a:33:
08:b5:7d:3a:ff:b4:f8:f9:34:a0:80:2c:a3:04:41:eb:20:5d:
0e:d6:8b:23:6a:b5:96:d8:39:24:43:1e:6d:cb:09:82:cd:6c:
3d:d5:72:e1:64:ad:25:7e:b9:0f:70:45:90:d7:fd:6f:68:58:
1a:d5:c2:70:01:57:aa:19:4a:0d:f8:d8:66:a7:4a:2b:43:27:
15:cc:da:c0:e6:11:db:4f:cc:53:24:c5:48:fc:c7:74:71:c6:
4b:03:c2:69:d9:2a:f3:fa:50:b3:28:d8:0f:b2:77:59:3e:4b:
b3:4e:8b:0b:71:63:85:e8:a0:44:c2:d8:74:0f:07:0d:d8:60:
d4:99:e6:61:0b:98:6c:1b:7a:dd:57:1d:0e:55:d4:45:66:11:
4b:f9:29:8b:a7:c2:91:14:38:1d:c2:f5:69:50:c9:c5:0e:79:
d3:da:c0:d4:44:2a:f8:3a:1e:09:9d:73:03:f0:ca:d8:a5:8b:
b7:c7:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:51:35 2025 by rpki-client