Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
File: hnWNin7SGnQXLM7sM4xk02sDeNQ.mft (raw, json)
Hash identifier: XyAdS1UvA/90J8e/wAqqAMwvUl6BnshAjr8unkIQsqg=
Subject key identifier: 30:28:AD:1E:B5:07:1F:CD:95:BA:9D:FA:68:13:31:A8:E7:98:D3:71
Authority key identifier: 86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
Certificate issuer: /CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Certificate serial: 01984B8A5B4B4CE1CC800A21D7EBC025D6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
Manifest number: 046A
Signing time: Sun 27 Jul 2025 11:00:15 +0000
Manifest this update: Sun 27 Jul 2025 11:00:15 +0000
Manifest next update: Mon 28 Jul 2025 11:00:15 +0000
Files and hashes: 1: Tmqal5XUVoUE8c77AFlzaqU97c0.roa (hash: r3d2ZcS64ApbYh564RwP4TPidKg35TEhpwQ3BNXhcQw=)
2: hnWNin7SGnQXLM7sM4xk02sDeNQ.crl (hash: bTm5IAbA6Pk6tDhf8pM0tnv0wHyY32UkYhoi9XaVsqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:5b:4b:4c:e1:cc:80:0a:21:d7:eb:c0:25:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Validity
Not Before: Jul 27 11:00:15 2025 GMT
Not After : Jul 28 11:00:15 2025 GMT
Subject: CN=3028ad1eb5071fcd95ba9dfa681331a8e798d371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:44:3f:a6:7b:01:1f:82:47:2f:71:5c:51:
9e:e1:70:ef:10:dd:95:80:9d:e3:41:88:65:78:38:
42:52:5d:d1:3a:15:d5:c2:6e:32:8a:bf:15:ca:be:
51:ec:1a:85:50:c4:31:22:5c:bd:3b:05:18:d8:10:
26:bb:ba:88:3e:70:6a:05:ca:3d:12:97:14:f7:a3:
73:15:57:4f:36:8b:23:26:02:8e:a9:e4:f7:00:09:
11:87:d4:d4:fe:5d:02:e7:60:a2:d5:5f:a1:9d:81:
0e:52:9c:3d:c6:06:91:7c:ec:40:54:42:66:59:b3:
50:89:d9:bd:95:55:10:d8:a0:2d:f8:11:ea:06:af:
3a:60:cf:7e:c4:f3:f6:9d:a6:d2:bd:b7:78:35:77:
61:91:60:aa:29:d1:2f:3c:23:3b:17:3d:93:29:e8:
d7:1d:77:e5:75:4c:92:d8:10:d5:ba:c5:de:c1:76:
48:88:5c:e7:c7:23:ee:d0:dd:fc:57:37:e3:50:b0:
b2:8f:7d:6a:98:41:88:fa:20:fe:44:e0:39:5b:33:
1b:36:10:9a:3f:03:92:2e:71:ee:59:98:ff:49:29:
98:7e:7c:9c:b6:b0:08:27:c7:7b:27:8e:70:58:61:
da:27:65:75:e7:6f:8f:9b:74:be:41:c9:d3:24:f9:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:AD:1E:B5:07:1F:CD:95:BA:9D:FA:68:13:31:A8:E7:98:D3:71
X509v3 Authority Key Identifier:
keyid:86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:c2:98:c7:d4:1d:ca:55:66:c5:51:31:83:eb:d6:6a:e8:
90:76:f1:b5:ad:fc:80:1f:f7:f5:b4:bc:59:e7:24:8b:a5:d6:
49:b7:2f:a3:cb:3e:fe:ce:4c:6c:10:76:02:19:45:46:c9:b3:
7f:7c:b8:ea:0d:6a:bb:e5:dc:d6:28:df:9e:32:9e:50:20:f2:
85:cc:c5:5e:79:13:4c:b2:7e:fa:ef:0b:d9:09:5d:b7:c7:95:
bd:26:03:11:60:af:ef:9e:15:51:32:20:94:65:2c:54:30:d7:
b3:38:3e:c5:9a:01:3e:3f:88:72:51:e7:d8:e6:68:c2:29:1a:
79:5c:ed:d3:81:d9:f7:b5:6b:8a:99:c9:9a:2a:60:98:c0:05:
99:a5:92:af:02:0a:6d:e7:31:18:4f:af:51:16:6c:80:a0:26:
76:be:a6:2a:31:40:86:f2:af:7e:ca:78:10:9a:94:81:fc:d7:
37:93:de:c0:cf:76:3c:5c:b4:cf:a3:f2:ed:66:82:fe:89:a6:
c1:1f:54:57:7b:0a:9d:96:00:97:79:2f:0f:f8:30:99:00:c9:
95:e2:70:9e:31:ce:c5:87:77:74:f7:a7:db:3c:8f:22:19:03:
bc:31:24:31:c7:0d:79:ba:40:32:62:f0:a3:1b:34:0a:b0:7b:
4d:2b:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:32:40 2025 by rpki-client