Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: Xjr3qfHjB4eOg0gjERcqN/gCCfKnYGRRj51vfeVcXmQ=
Subject key identifier: F8:89:07:1C:1A:41:CC:AF:46:8F:9F:8C:90:6B:6C:1E:B7:AE:E4:AA
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 019845F61409557645C5D088C1988AB1F0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 01CC
Signing time: Sat 26 Jul 2025 09:00:11 +0000
Manifest this update: Sat 26 Jul 2025 09:00:11 +0000
Manifest next update: Sun 27 Jul 2025 09:00:11 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: d2fy/dcPKP4BTxL3tpxKOuM1WFoAHA6+fOLijIcGgJ8=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:14:09:55:76:45:c5:d0:88:c1:98:8a:b1:f0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Jul 26 09:00:11 2025 GMT
Not After : Jul 27 09:00:11 2025 GMT
Subject: CN=f889071c1a41ccaf468f9f8c906b6c1eb7aee4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:77:4e:32:49:90:36:32:21:ed:f8:2f:8c:
87:cb:43:92:70:a1:72:29:92:2c:50:b2:bc:91:13:
76:e5:bf:ba:47:b5:35:36:2d:f3:4f:f6:b3:c6:36:
61:a3:16:7e:04:24:02:33:5b:18:65:31:80:ff:36:
8b:a2:89:d7:32:b8:25:28:ce:9e:e4:36:4d:b4:4e:
16:10:59:d4:01:84:37:ce:d1:97:27:79:15:20:30:
2b:ac:f2:81:f3:47:8a:b0:0a:f5:1a:58:b1:0d:9a:
56:8b:cf:f2:f7:cf:e0:87:ac:ac:e2:99:08:ce:94:
33:e2:78:f9:73:7b:b1:19:1c:0e:52:3e:43:85:88:
04:4a:00:14:86:71:58:0a:5b:25:9e:69:ca:94:26:
8c:53:94:a2:f0:50:99:78:90:a6:1f:ad:e1:e6:76:
ca:a4:54:4e:2b:80:23:01:85:db:bc:af:43:4f:0e:
81:49:73:d5:c4:51:5b:dc:b3:3e:ff:09:e4:32:57:
1a:f9:8b:c4:c1:35:d8:6d:ce:e3:bf:ad:af:22:5a:
b1:a7:4a:35:47:2c:b3:b8:b9:e8:7b:12:db:b0:86:
74:0e:c5:aa:dd:40:0d:4b:e5:4f:58:9f:36:30:77:
87:37:86:be:cb:55:0c:1a:8e:98:27:dc:fa:e7:e5:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:89:07:1C:1A:41:CC:AF:46:8F:9F:8C:90:6B:6C:1E:B7:AE:E4:AA
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d2:e5:f7:49:c2:98:0e:ca:03:5e:1c:e7:98:2c:76:2a:d0:
47:71:25:8c:f3:47:5e:61:6c:c1:23:4b:1c:5e:7e:44:6f:1f:
67:03:ae:05:99:a2:9a:16:b6:42:b5:dd:56:54:bd:6e:2c:7e:
8a:fa:35:9d:c4:78:e5:11:40:67:42:ce:92:3f:2e:3f:46:e6:
97:d6:18:d1:2b:14:e0:30:52:a3:eb:7e:a3:85:a5:62:2d:d1:
3f:be:44:67:e6:19:60:f4:83:20:e4:b5:e3:a6:81:c7:93:80:
7a:78:1f:18:fe:87:19:da:b9:c1:33:a1:02:84:34:4b:4d:7a:
c6:b3:03:ee:c7:90:06:c9:76:67:d6:a6:52:90:4a:7d:6c:65:
7f:1e:47:63:c7:81:c4:ba:a9:d7:6b:e9:87:fd:d3:60:13:f7:
fe:c2:64:3c:63:3e:58:03:4b:c9:ac:a8:a4:cc:9f:1c:31:9c:
e6:62:9b:75:3e:dc:02:d2:ae:e0:c6:18:8a:07:f4:af:bb:32:
b2:08:75:29:d5:9a:99:97:14:f9:90:09:b1:fc:bd:24:69:57:
40:c5:75:50:2f:07:45:9a:4a:47:a1:b9:3a:eb:d5:6a:ab:90:
e8:b9:d6:49:72:e8:24:ba:ba:33:46:98:63:af:0e:b5:84:33:
62:68:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:54:04 2025 by rpki-client