Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: s+KtU6sQCCxRKKT02fM5CTSN42j3KquuKPsMtgsQ4qY=
Subject key identifier: 72:40:85:7D:45:B9:03:4E:05:45:00:78:B0:F4:8E:34:51:74:19:FD
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 0199624716522B3B7B4DD07864722EFAE585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 1348
Signing time: Fri 19 Sep 2025 14:00:49 +0000
Manifest this update: Fri 19 Sep 2025 14:00:49 +0000
Manifest next update: Sat 20 Sep 2025 14:00:49 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: GuL1k+N09ZdEW4F6DMRURS0VaAvmfcJvp3+N1K34MTY=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:47:16:52:2b:3b:7b:4d:d0:78:64:72:2e:fa:e5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Sep 19 14:00:49 2025 GMT
Not After : Sep 20 14:00:49 2025 GMT
Subject: CN=7240857d45b9034e05450078b0f48e34517419fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:c7:0c:e2:dc:51:c6:1c:bf:8f:79:f7:a6:
aa:ea:97:94:77:03:31:5e:52:2d:bd:14:d2:cc:44:
fd:b5:ac:7f:0a:4b:1a:df:53:92:d6:b0:00:4c:18:
6e:95:99:ba:49:ab:8a:98:a6:f5:43:43:4a:7f:a5:
72:d0:ea:ad:85:d3:7b:f3:81:fa:c8:51:23:69:9a:
bb:51:66:56:2b:ce:24:92:5d:77:a9:f2:7c:3e:02:
4a:67:d3:6b:44:fb:fe:31:53:e1:75:5c:29:59:26:
54:93:d3:d1:f0:37:bb:43:af:a4:83:36:ef:b2:77:
97:ef:2f:ff:e8:f9:05:58:77:82:8d:f3:f0:26:15:
d6:b8:ca:a8:c9:ee:7d:3e:50:06:7a:cf:5d:64:a4:
a1:e4:74:1c:61:cf:b7:18:99:96:a5:2b:8d:33:fe:
10:97:57:dc:ef:48:6d:68:7d:de:67:b3:c4:bc:72:
2d:23:a0:22:58:db:34:6f:66:64:48:92:0b:10:11:
6a:59:82:7a:63:fd:56:9e:25:ca:06:f6:e0:17:ac:
7e:43:d7:df:c0:f3:8f:3f:16:2f:d8:37:a4:3b:22:
6b:da:e5:69:42:d6:41:4e:c9:b1:c9:a9:6f:e6:d7:
86:4c:80:d1:aa:47:17:b1:76:7c:d8:51:00:10:21:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:85:7D:45:B9:03:4E:05:45:00:78:B0:F4:8E:34:51:74:19:FD
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:08:bf:d1:8c:59:ba:d3:a1:0f:b4:7b:b2:16:ff:71:28:57:
8a:47:81:40:3c:f0:e4:63:51:85:ab:31:86:35:a4:71:9e:77:
68:44:0f:15:7c:1e:da:9e:3d:b1:1b:5e:1a:4c:04:5f:e2:af:
93:c1:e5:51:f0:20:a0:54:a6:5e:4d:18:b4:c4:9c:b2:42:12:
e4:50:1e:25:dd:b4:33:93:57:f0:4e:eb:01:14:56:67:97:c1:
e0:f7:00:53:4f:74:df:3c:59:5d:ac:96:36:ee:0e:5a:d9:b3:
1e:87:12:66:25:c1:cf:13:94:e0:4a:2f:95:7f:ae:bc:92:e7:
49:29:47:ce:d9:8e:40:a2:7b:4c:74:9c:06:a1:c5:0e:24:85:
68:d7:9b:a0:8e:0e:07:8b:1b:ca:24:f2:ef:b0:da:41:37:fc:
be:8b:8f:cf:fe:33:95:51:3e:09:7d:50:bf:77:a6:f6:09:bf:
b3:b0:0b:e0:3d:70:a0:a5:4a:0d:2b:6d:3f:54:12:4a:37:ca:
03:e0:59:03:a4:ef:6c:65:7c:5c:ef:f6:be:b9:a0:d1:7e:1b:
e2:9c:0e:81:cf:63:dc:ff:ad:24:98:12:fe:2b:60:c1:67:88:
a0:d0:a6:bd:8a:8c:bf:be:80:60:9b:6a:8b:e9:16:42:b7:d3:
55:47:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:59:16 2025 by rpki-client