Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: YwpO+fv6riXTpQZFtEB97ZOLE/ukHOOsJ3opvRQc504=
Subject key identifier: 01:E4:9D:8D:F5:49:0A:5B:8F:EB:7F:55:BD:B6:7D:BC:DD:9D:F9:9B
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 019950E5A65EA545DB1D305DC6DB8FF7CC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0F89
Signing time: Tue 16 Sep 2025 05:00:51 +0000
Manifest this update: Tue 16 Sep 2025 05:00:51 +0000
Manifest next update: Wed 17 Sep 2025 05:00:51 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: LYxaVZstTkmJEQ0aDi/lecniVgvtn43c3PW4DaZq5Ms=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:e5:a6:5e:a5:45:db:1d:30:5d:c6:db:8f:f7:cc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Sep 16 05:00:51 2025 GMT
Not After : Sep 17 05:00:51 2025 GMT
Subject: CN=01e49d8df5490a5b8feb7f55bdb67dbcdd9df99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:e2:8a:28:cc:55:d3:b7:20:61:18:86:3b:
fb:85:0e:33:d9:05:40:a4:1a:42:2c:66:27:a1:16:
d8:8c:ea:bb:67:c1:89:6a:f9:53:a4:6f:38:ee:b7:
2f:f2:d8:dd:70:eb:ed:93:ab:44:9c:f6:dc:fb:b0:
46:51:3c:e4:e8:3a:22:0d:16:4c:81:ae:36:a4:ec:
f2:4d:41:ec:6f:30:57:a1:4a:15:25:de:cc:17:9d:
79:30:96:6d:74:9a:1f:e9:9a:5b:2a:37:e2:e1:14:
8d:ef:d4:5c:9a:7c:39:b1:aa:d5:2d:91:71:f0:22:
f3:8c:e8:42:39:ea:5a:0f:da:77:45:2c:4e:c3:1c:
ea:53:43:a6:16:d6:56:bf:93:67:36:98:4a:0f:40:
4e:f4:c7:6c:aa:f0:a4:fb:53:e4:e5:a7:a9:50:2c:
29:d0:32:26:9f:4b:2c:3d:ba:30:f8:4c:47:55:b5:
00:07:e5:63:43:6d:76:dd:34:eb:2c:e0:62:b9:b0:
ad:4a:de:a9:96:38:d3:51:36:aa:b7:9b:d5:70:c7:
b6:f0:40:75:8b:08:7c:52:ae:bd:72:48:79:5c:23:
cb:61:67:f9:50:dc:9b:4b:42:70:2c:d1:c7:f8:38:
75:16:a5:72:bf:7e:7f:d9:be:3b:38:50:96:18:6d:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:9D:8D:F5:49:0A:5B:8F:EB:7F:55:BD:B6:7D:BC:DD:9D:F9:9B
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:90:07:43:a1:b9:21:4f:3b:c6:20:43:2a:ad:dc:9d:05:af:
73:70:86:ff:c8:d6:06:91:20:fc:f6:e0:e5:ae:99:e0:af:42:
d5:d7:09:52:a8:2a:ab:5d:cc:ed:94:38:52:4d:17:c3:19:9d:
2a:05:da:14:6c:84:a9:9e:b1:4c:bd:ff:9b:78:42:38:21:54:
01:72:da:03:4a:8b:82:80:da:e0:40:08:5d:69:d3:87:3d:6b:
25:b0:fd:31:a6:cf:fe:93:e3:b1:de:eb:79:14:b0:75:b9:8f:
40:0a:2f:65:0c:1c:c8:56:da:e5:c2:b4:18:13:1d:2e:19:00:
b2:e3:64:01:c8:01:13:73:9e:a4:04:de:1f:f5:89:0a:4e:38:
e9:d5:ff:ef:f9:78:8a:cf:35:d3:94:76:b6:72:e9:ec:20:f1:
19:f1:75:18:8b:18:55:f7:9e:cf:0b:ed:ab:16:55:36:ce:31:
e6:32:5b:22:2e:3d:03:d4:4c:8b:dc:1a:90:d3:02:a6:3a:42:
b3:f9:6d:84:bc:22:c6:cf:92:14:b5:04:d8:03:a2:4f:94:04:
16:fa:88:83:91:cf:9e:3e:a5:ce:93:68:50:36:0c:d5:43:0b:
af:ea:bc:49:f0:07:fd:12:31:59:1b:a6:96:7a:18:96:45:49:
0f:8a:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:21:45 2025 by rpki-client