Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: JgsaskcqwEoBbOXhewT4kYBVPIbXV9AOzWssjJ709bI=
Subject key identifier: D3:97:86:D4:07:56:9E:6F:9E:94:7E:5E:DE:CE:1D:80:EC:7A:A6:31
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 01986738FB0DAA85489AEDB6FB0D43A1DA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0F10
Signing time: Fri 01 Aug 2025 20:00:44 +0000
Manifest this update: Fri 01 Aug 2025 20:00:44 +0000
Manifest next update: Sat 02 Aug 2025 20:00:44 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: znPfAYCsfAwJmP5M3FO/ZSvEivQU3kvlwBbkfTqZRMc=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:67:38:fb:0d:aa:85:48:9a:ed:b6:fb:0d:43:a1:da:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Aug 1 20:00:44 2025 GMT
Not After : Aug 2 20:00:44 2025 GMT
Subject: CN=d39786d407569e6f9e947e5edece1d80ec7aa631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:43:63:5f:3d:b5:05:06:6b:41:78:c8:53:
5f:7f:80:7e:d9:30:2a:4f:f9:57:59:31:8c:48:b5:
ed:c2:4d:55:b0:4c:4c:bf:7a:98:09:55:e8:9e:36:
35:bf:ab:e4:8a:31:54:7c:5d:c9:a5:2d:46:35:69:
f5:6f:92:b1:b2:08:63:3a:98:86:e1:05:3f:81:91:
92:b7:3e:e0:44:60:a2:b5:21:6c:b1:5c:67:dc:e1:
58:47:c5:fc:3d:45:6b:72:47:cb:9f:4b:17:6f:72:
8d:21:c2:1b:9d:62:85:c4:0a:f2:12:8f:2d:12:db:
95:8d:4d:2a:63:31:44:da:35:f7:12:34:58:d4:72:
76:41:f1:89:0d:22:a8:58:4a:0b:c9:84:c9:91:a5:
57:1e:97:b4:4c:ec:f2:32:15:28:92:b9:87:75:10:
fa:ac:5b:66:03:3f:9c:d3:3b:d6:58:70:94:f7:da:
77:79:85:88:58:cb:02:cf:66:79:f1:9c:c6:49:4b:
49:2e:a8:c5:6e:ca:64:86:a9:3d:49:16:05:dc:96:
81:a2:c1:28:ea:0b:1c:fc:89:79:93:9f:1e:6b:08:
60:5b:46:32:ae:2f:18:53:de:78:6a:15:fb:35:54:
44:41:85:9c:19:b1:d8:97:b4:b8:3c:14:21:cc:b8:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:86:D4:07:56:9E:6F:9E:94:7E:5E:DE:CE:1D:80:EC:7A:A6:31
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:33:84:86:2f:6e:68:ed:10:d2:53:ce:ad:ac:47:18:46:ba:
29:d9:ed:6d:b1:3a:3c:a0:7e:92:ce:6e:97:1c:cd:6d:a4:ee:
c5:fc:55:99:01:5f:81:d6:d4:62:07:d0:b5:e3:f2:88:96:b2:
6b:0c:d8:d5:f3:02:1a:a4:86:81:c9:a7:7f:6c:f0:6a:ad:a5:
d3:8e:0a:0b:d7:83:68:d2:bc:e8:16:0d:e5:47:7d:54:7e:14:
ab:81:dc:2e:fc:6f:dc:df:01:c8:a0:c6:b8:b9:56:8f:9f:b0:
e1:87:c3:1b:d7:bc:94:45:6d:8d:7e:ca:2d:ac:48:1d:bf:36:
b5:a4:54:5d:7f:e4:66:65:2d:26:bf:8f:25:58:e6:10:9b:cc:
e6:d7:fa:f1:60:be:be:7f:29:09:ac:fc:90:64:f3:ab:ae:da:
79:be:ce:73:bf:24:85:98:d0:a3:2f:43:82:0f:24:e5:62:43:
2c:7a:03:b7:87:20:14:be:d3:ae:a8:59:ed:fc:8e:78:b6:e6:
6e:21:d9:46:5f:80:b1:06:85:23:3d:de:13:0d:22:6a:fd:a0:
8d:78:c2:59:41:41:63:3a:23:56:db:19:77:54:14:1c:1b:d8:
3b:ca:5d:c6:f2:6c:36:4a:94:88:37:85:a9:1d:86:9e:49:8d:
5a:d2:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:27:24 2025 by rpki-client