Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: grMoKdM1gu1cUkC06Un4KWfRAv14yhCoUsPHbmxgzqk=
Subject key identifier: 43:4F:E1:0F:40:40:FF:F5:C2:A0:95:46:71:0C:C9:56:CF:37:EC:22
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 01985AC8830843EC406165862658FE4A983C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 160D
Signing time: Wed 30 Jul 2025 10:02:26 +0000
Manifest this update: Wed 30 Jul 2025 10:02:26 +0000
Manifest next update: Thu 31 Jul 2025 10:02:26 +0000
Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: sWkFzU7Dy8mrqWiFRmkqNlczj6jjpDSXMh+BOSzVjOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c8:83:08:43:ec:40:61:65:86:26:58:fe:4a:98:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Jul 30 10:02:26 2025 GMT
Not After : Jul 31 10:02:26 2025 GMT
Subject: CN=434fe10f4040fff5c2a09546710cc956cf37ec22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:f1:3a:c4:b6:cc:48:bc:25:d1:e4:38:68:
b9:76:31:27:9f:db:e7:a8:fe:84:6c:c0:be:71:bf:
fe:cc:1e:1c:3a:c5:7b:5f:ff:7a:dc:85:e4:e0:68:
7d:6f:24:09:9c:d7:5d:28:92:d6:bc:2c:45:6f:b5:
e4:a6:22:92:51:72:09:32:9c:24:f2:2e:6b:05:12:
43:33:2e:bd:8d:ed:f4:aa:5f:0f:72:dc:62:86:61:
9a:96:c3:db:3a:f0:97:1c:5b:8d:ba:48:5d:d1:c3:
b8:cf:0b:6d:e1:6e:98:6a:06:e7:ea:79:4a:5c:24:
74:00:7f:8f:93:aa:c5:e3:99:55:85:57:3b:81:fd:
f7:5f:b0:80:7a:c3:da:7c:82:7c:ae:21:b1:17:b2:
ac:75:03:83:15:6a:0b:80:6c:de:93:40:e4:32:d2:
63:c6:f7:d7:38:a0:f1:b3:03:f3:ee:41:9c:a4:42:
69:a5:6a:71:3e:97:7d:6d:76:b9:cd:71:e8:ca:42:
f8:65:65:8f:c4:18:b7:4b:87:31:ec:98:0d:5c:8e:
d5:34:a0:6e:f9:35:fa:3a:e4:af:55:6b:97:84:f0:
01:cf:e1:20:84:99:a3:09:df:7e:6b:26:f7:a6:c0:
64:4e:b3:98:34:dc:06:52:21:1b:5e:23:26:f8:94:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4F:E1:0F:40:40:FF:F5:C2:A0:95:46:71:0C:C9:56:CF:37:EC:22
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:61:06:01:2e:eb:e7:8e:00:fe:32:ab:f7:ba:ff:ca:2a:15:
f4:83:25:d4:0d:fc:97:99:b2:a2:4b:13:89:f6:9c:6b:25:f0:
da:61:6f:c8:f1:c8:71:01:99:bb:4f:91:07:fd:ed:58:99:54:
e1:20:39:8f:d7:ce:95:fb:a5:19:13:8e:ea:69:e8:85:42:23:
04:cb:77:9b:7f:4d:27:78:e2:d5:07:ec:a9:4b:ff:a8:a1:0a:
49:8b:3c:e1:78:71:b8:f4:46:09:d4:3f:6a:1b:38:29:92:95:
22:2e:4e:a9:dd:65:dd:8d:10:ed:6e:dc:36:89:c4:00:1e:c5:
dd:aa:14:63:fc:8f:d8:14:24:3a:e6:b8:da:bc:08:be:7d:8f:
bc:28:ae:e8:46:43:a1:58:ca:d5:05:d5:b6:7b:90:7f:1b:62:
9a:b0:cf:fc:62:bd:56:ed:54:9d:f3:41:bf:78:65:95:f4:fa:
2a:a7:80:53:6d:1c:33:c2:c2:81:fd:9a:96:bb:11:af:30:f9:
fc:e8:7d:e9:65:a0:16:17:3e:3c:0b:c5:c5:44:9e:d8:f8:4b:
cd:12:53:f5:6f:04:aa:53:44:f7:7d:27:63:96:a4:69:6b:a7:
c0:5f:d8:b7:ac:78:dc:01:47:81:4b:a5:4b:d0:76:26:e2:71:
be:ce:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 11:25:31 2025 by rpki-client