Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: 01uEubaCgYaNOAmckhiep6wckuK7V/H2VUPjCrmLWIc=
Subject key identifier: D1:B5:FF:50:68:48:0F:4C:38:85:47:2B:E4:5A:6D:B8:3A:A2:60:00
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019848C0BB38A4E74069B5D4FBBA99AB35E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 1596
Signing time: Sat 26 Jul 2025 22:00:46 +0000
Manifest this update: Sat 26 Jul 2025 22:00:46 +0000
Manifest next update: Sun 27 Jul 2025 22:00:46 +0000
Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=)
2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: wpt72g/orLmNNVKKrKo0tCPZuSTPUcFsig62mMJqF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:bb:38:a4:e7:40:69:b5:d4:fb:ba:99:ab:35:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Jul 26 22:00:46 2025 GMT
Not After : Jul 27 22:00:46 2025 GMT
Subject: CN=d1b5ff5068480f4c3885472be45a6db83aa26000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:1f:75:72:c0:81:88:27:2f:27:8c:2b:c1:
2c:0d:04:80:23:18:f6:35:85:2e:78:78:20:3e:b3:
db:f4:6f:79:a5:39:17:cb:df:ce:ab:44:08:19:b7:
ba:d7:f5:03:9e:a7:49:96:46:b1:bc:23:0a:da:73:
12:e0:57:4a:cb:24:21:80:7f:40:3d:4e:47:fc:07:
06:32:b1:5c:d3:ac:3d:01:b0:74:49:84:9e:65:05:
4f:c3:f8:7e:e1:74:74:89:f4:e7:78:d8:ef:b5:0f:
98:67:79:b2:32:9c:f8:be:72:06:ac:77:a7:e9:6d:
04:90:d5:fe:42:24:d4:57:5a:79:a3:6d:72:8a:38:
c0:33:77:a9:64:58:3c:7f:c2:63:1f:b2:fb:25:10:
a5:92:7e:d9:7c:1d:ab:65:0f:6f:57:5c:0a:60:30:
19:a0:6d:cb:eb:97:b8:8e:da:61:0c:2e:25:90:4d:
7b:f1:48:bb:24:d6:24:64:8f:91:cd:9e:7b:be:47:
fa:80:65:ca:27:4b:62:bd:8b:ee:a6:80:65:11:70:
5d:fa:f7:f5:61:43:ee:87:c4:3c:19:97:7e:54:c8:
fc:7a:f3:27:2e:e4:38:07:9d:0b:dd:ec:53:e5:d5:
d0:0c:7e:28:fa:fc:5c:dd:e6:05:10:62:9c:34:00:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:FF:50:68:48:0F:4C:38:85:47:2B:E4:5A:6D:B8:3A:A2:60:00
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:25:53:9c:71:23:c3:26:89:78:1b:ca:1e:d9:91:77:29:38:
6b:8c:ae:35:69:2f:52:d8:6e:9d:b0:cd:66:6d:aa:bd:8a:2f:
1b:c9:13:77:87:c2:6a:69:e2:ab:5a:4b:17:10:7a:b9:60:a4:
0d:04:47:df:02:b7:64:ef:b5:4b:4f:b6:9c:b6:05:39:de:ad:
b5:87:17:43:60:ff:a7:47:78:4e:74:46:0c:8f:7d:d6:aa:f1:
d2:a7:b1:ec:aa:6b:2f:69:ad:db:8d:1c:02:ba:35:2e:49:0b:
47:89:c3:b0:5c:74:03:c1:32:15:a9:65:77:68:30:68:45:0b:
30:13:b9:62:c0:b4:bf:3a:d2:86:58:75:2d:a5:6d:52:bf:5a:
0e:8d:ab:fa:4a:41:1e:2d:6e:3b:16:0c:42:5c:3e:b6:0e:54:
0e:cb:47:65:bd:2c:cb:6f:bd:40:3c:94:36:43:f6:6a:67:75:
20:b4:a9:c9:43:05:cc:c6:55:a7:fc:4a:0e:85:61:f5:07:6d:
89:02:4c:a8:38:39:5e:39:26:41:56:8e:f9:23:62:bb:80:e1:
51:bb:f5:3f:87:18:5b:90:40:10:08:4c:55:67:af:2a:34:84:
36:cc:3d:71:c4:03:1f:65:4d:21:3a:09:ab:00:36:fd:10:32:
60:38:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:09:58 2025 by rpki-client