Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: tUrZMilK4UgYApaWB++aebOvS+3QiI1HoFNnQsaGLmo=
Subject key identifier: 8E:5F:0F:BD:CD:D3:FF:A9:93:E3:A9:69:D4:3C:58:B7:C3:21:CF:63
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 0198537AF2A0F5C3CE7D8AA669992AD86EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 066A
Signing time: Tue 29 Jul 2025 00:00:23 +0000
Manifest this update: Tue 29 Jul 2025 00:00:23 +0000
Manifest next update: Wed 30 Jul 2025 00:00:23 +0000
Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=)
2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: Iyygg4YKuDZd1Z5lMhrSui8ru9XZx0aQGAhT9bnCxO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:f2:a0:f5:c3:ce:7d:8a:a6:69:99:2a:d8:6e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Jul 29 00:00:23 2025 GMT
Not After : Jul 30 00:00:23 2025 GMT
Subject: CN=8e5f0fbdcdd3ffa993e3a969d43c58b7c321cf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:f3:d0:c8:ee:e3:0a:11:51:cf:0e:57:39:
6f:ae:a1:c8:b7:0e:95:b5:61:b2:39:1b:81:7d:e6:
80:5e:4d:88:03:d4:74:f4:ff:78:43:93:a7:f2:8e:
f1:8e:89:50:51:61:6f:c9:46:6d:bf:4c:54:64:27:
0e:dc:54:0c:bc:b9:05:8e:61:ad:d2:91:35:29:83:
30:c5:af:d2:dc:b9:ac:ec:d9:9b:4f:5e:c4:d7:bc:
04:fc:85:b4:1b:93:2b:e2:47:0e:95:0c:4f:a6:5c:
8e:15:56:60:e4:82:8d:b4:0d:ad:79:f0:ab:70:ab:
99:b2:7e:21:43:1d:31:60:bd:89:a3:21:7b:72:8c:
63:2a:88:8b:de:34:a5:a3:71:94:c3:eb:fd:0e:f0:
d9:a0:b0:ca:21:af:6d:39:46:f1:7b:c0:7f:a3:6a:
72:2d:43:d0:ac:13:2b:9a:a3:d5:7d:6e:aa:32:7d:
73:55:2c:ab:76:40:8d:7f:98:6b:27:52:6e:4d:a2:
5e:6a:03:7c:9a:cf:dd:2d:e5:fb:7b:b4:38:ec:38:
c1:e7:ab:32:07:67:0c:91:4b:86:ac:1a:4a:0f:e9:
00:bb:db:e2:42:00:83:c9:f7:be:d8:e5:c6:16:55:
c4:2f:73:0b:5e:44:b9:e3:0c:0a:8c:5a:0c:da:3f:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:0F:BD:CD:D3:FF:A9:93:E3:A9:69:D4:3C:58:B7:C3:21:CF:63
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:27:6c:10:84:5b:3d:6f:bf:10:f0:82:56:49:bd:54:0c:d2:
bb:6b:d3:c1:a0:0f:f7:94:ee:41:2d:fb:e7:db:3d:76:cc:b5:
84:87:ec:f7:c0:6c:24:c3:25:38:61:68:59:c0:c6:3b:6c:03:
35:74:46:9e:7d:b9:e4:18:81:f2:3e:58:5a:f0:db:5b:74:72:
67:63:18:5f:47:1c:80:85:07:fd:9b:7b:4f:28:d7:b0:4b:4e:
2b:10:d4:c4:90:ee:92:ce:f6:59:7a:f3:4d:cb:6d:8b:66:80:
0a:45:16:73:b8:48:e8:5c:fc:b8:b1:0c:f1:93:5d:f5:70:8d:
3d:3e:95:26:63:08:5a:0a:11:ee:22:c9:b6:f4:7b:d8:26:25:
af:dc:46:eb:ca:7c:57:71:15:ae:d6:d9:3c:a4:b5:46:43:14:
a3:9b:e4:f7:59:d2:cc:6f:92:d8:c7:52:23:e6:79:21:04:24:
d9:ca:6e:b1:33:85:a6:75:20:fd:10:52:21:91:a2:d6:7b:1c:
d8:79:39:53:d0:ef:29:da:fd:ef:ea:a7:9b:c8:35:51:eb:56:
dc:d7:f3:83:47:b6:3e:40:ea:3a:3a:d5:f6:a8:e8:48:5f:19:
b8:f0:28:aa:2f:f5:31:f1:f7:81:a5:8f:7f:c7:30:49:7c:1e:
14:57:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:06 2025 by rpki-client