Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File: hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier: 5U4PY3HonfamQi6O0+xO1DoowSjQKDHev6xL2RCWv1A=
Subject key identifier: D4:87:4E:90:00:DB:5A:DB:4D:95:F1:8B:60:4F:4B:0B:A1:8F:D3:DE
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541
Certificate serial: 0198530D6B83706C7D049D1B3AF5DDA86E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number: 03CE
Signing time: Mon 28 Jul 2025 22:00:45 +0000
Manifest this update: Mon 28 Jul 2025 22:00:45 +0000
Manifest next update: Tue 29 Jul 2025 22:00:45 +0000
Files and hashes: 1: hXap7hNXLEAQarnfnwYswdCAdkQ.roa (hash: bNhK/WdUp/9xvJiGhX97CJWQhZiON1WPJ6uWrAYKvFI=)
2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: NK3kIGdMlQj4TDcqbBbKCxnxI8RkN6RMhl3lwVb6+/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:6b:83:70:6c:7d:04:9d:1b:3a:f5:dd:a8:6e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863841506d026131965057409a1604a5671f0541
Validity
Not Before: Jul 28 22:00:45 2025 GMT
Not After : Jul 29 22:00:45 2025 GMT
Subject: CN=d4874e9000db5adb4d95f18b604f4b0ba18fd3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:c0:26:42:33:64:6f:48:53:16:33:ac:af:
83:0f:1e:77:68:e9:eb:cc:2b:44:fc:2d:5e:52:6b:
d4:50:4a:06:5b:50:d4:d8:b3:94:8f:80:b2:8c:af:
79:cd:16:4e:2b:95:3a:d1:af:2f:35:fa:c7:56:d2:
95:ba:36:84:67:c9:98:a0:1e:69:34:20:b5:c8:c4:
1b:64:dd:f2:1a:44:b1:b4:be:78:e5:4f:a4:41:dc:
3e:da:29:84:91:b6:b2:9c:de:c7:5a:4d:99:3e:6c:
2d:13:6b:b9:71:e0:a8:21:a9:03:9b:35:85:4b:6a:
d7:17:4c:f2:cb:67:97:d4:dc:8a:62:2e:5c:62:dc:
b1:83:43:58:56:4d:87:ac:6f:90:f5:e8:d7:3e:d8:
c7:2b:96:aa:8b:c6:9f:9b:02:2d:af:02:e6:85:89:
d0:6e:cb:83:a3:96:78:ae:83:27:b8:76:6b:77:95:
9d:0b:bb:8d:75:2e:37:66:23:3b:50:55:18:05:74:
19:6c:2e:b6:1b:1b:e1:b4:19:b3:68:5d:bf:97:ca:
0f:f0:c9:9b:81:f8:8e:4b:e4:52:b8:5e:42:d6:c0:
9a:d9:8a:33:41:53:fe:d2:9a:81:38:f2:90:8b:ed:
72:5d:9e:d1:57:fb:48:31:d3:4b:49:11:5c:4c:ba:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:87:4E:90:00:DB:5A:DB:4D:95:F1:8B:60:4F:4B:0B:A1:8F:D3:DE
X509v3 Authority Key Identifier:
keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:22:28:b4:d0:f4:90:f5:1f:23:bc:f9:f2:4d:5c:c8:64:24:
8a:8c:c8:37:37:2e:04:66:10:40:ae:1f:ab:b5:8d:52:23:b9:
8b:bf:73:b5:a6:01:cb:1b:3a:ee:ed:6e:d2:bd:1a:95:07:49:
9f:2c:0d:9d:3c:96:4a:65:a7:e9:36:e1:a0:01:fa:34:c8:18:
90:88:24:15:81:68:9f:18:94:5f:9f:00:6c:06:c8:c1:d5:ac:
0f:59:c0:9f:fc:90:75:53:a2:0e:92:fb:5b:c6:17:6b:33:e2:
f4:dd:db:5f:d0:b3:91:c9:03:9f:b4:25:69:13:55:8b:e0:bd:
4e:24:73:5c:72:81:ce:78:b4:da:11:da:d0:05:96:b4:49:2c:
b4:5f:d6:cb:e5:d6:b0:d6:fe:a3:7b:27:18:c2:ba:ca:27:f4:
43:a1:0f:30:e8:57:36:18:73:ad:74:c9:11:27:ed:04:0e:92:
81:38:5f:4e:9a:47:18:53:98:71:bf:14:69:4d:cd:be:45:47:
dc:fa:5d:bb:50:2a:58:79:da:1f:b2:e4:81:a7:d3:42:aa:2c:
0d:3c:34:30:6a:29:f2:76:62:1e:f4:33:c6:a1:17:6c:62:c2:
e5:dd:47:2f:aa:6b:6e:f4:d3:e9:a0:42:dc:d7:76:c5:a7:7b:
2d:84:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:37 2025 by rpki-client