Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: EwQ6cHeX/wKaBRvSWtipCCw7wJdPjJXcpJ2Om37USTU=
Subject key identifier: C1:E1:D6:50:CA:EE:EC:4B:2C:87:C4:A4:FD:0B:87:BE:90:BB:D6:F0
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019847770E5976927CE5D1F4AA62C45ED334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0F48
Signing time: Sat 26 Jul 2025 16:00:41 +0000
Manifest this update: Sat 26 Jul 2025 16:00:41 +0000
Manifest next update: Sun 27 Jul 2025 16:00:41 +0000
Files and hashes: 1: Zj9lVIh8knr06HL6M68exsdyR78.roa (hash: DpNM17SY3ZBbdFnRbmny2u5MR4zgFSyDbmfcX50gqPI=)
2: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: g6Vu4LCM+EgG8mbktTfVHQAHGovAOEeJlebw3h5Uvss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:0e:59:76:92:7c:e5:d1:f4:aa:62:c4:5e:d3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jul 26 16:00:41 2025 GMT
Not After : Jul 27 16:00:41 2025 GMT
Subject: CN=c1e1d650caeeec4b2c87c4a4fd0b87be90bbd6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:cf:bf:96:17:4b:01:41:28:37:12:d2:50:
21:9a:38:f8:96:4e:f5:0b:8d:4d:85:b5:73:39:8b:
f3:ac:9e:b3:be:2a:9f:18:a1:d9:25:d7:64:f0:ec:
81:e9:8a:2e:b8:21:3e:ca:48:39:f5:91:e8:40:ac:
ba:17:af:b3:43:2e:6b:e1:80:02:2d:7a:9a:5e:4c:
f7:01:61:7a:9e:8f:e0:9b:e0:74:03:d7:7d:4d:cf:
a0:cb:fe:f4:f7:58:55:77:07:88:5c:69:4f:77:c6:
b7:f8:6f:5d:e4:97:e6:04:4a:f4:f0:51:1d:5d:45:
91:f8:b6:a4:ff:fe:6b:51:24:42:6f:92:d6:7b:c6:
12:33:f0:21:9e:e1:3b:a5:0c:b1:6d:60:45:00:fe:
17:9f:76:45:5f:27:75:fd:11:88:85:a8:54:93:69:
31:ca:c4:a4:0c:b3:dc:e8:54:77:e4:1e:d5:fb:1f:
a2:2d:12:24:b4:cf:0f:82:08:32:23:0c:01:0e:58:
80:10:f8:d1:32:ee:0d:ab:8f:3d:a9:53:98:74:e1:
a4:5b:32:e9:f4:18:30:42:2f:ad:7c:fb:de:9a:27:
f9:6d:f5:27:e7:8a:b7:a2:2e:6f:90:be:1e:33:b7:
7a:00:f6:cc:e6:5c:82:a5:1a:9c:99:ab:63:06:df:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:D6:50:CA:EE:EC:4B:2C:87:C4:A4:FD:0B:87:BE:90:BB:D6:F0
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fa:86:17:49:9c:d6:3e:60:d6:ff:56:7d:f8:67:21:fd:25:
a4:a4:13:0b:d1:37:33:47:2e:c1:a2:da:62:d3:b7:01:8a:9d:
38:16:9a:8e:e0:fc:33:0d:85:98:24:1a:f0:9f:da:3f:63:a2:
b8:16:8b:a6:69:fd:f1:e2:95:d2:d3:5e:dc:6d:80:5e:3c:7e:
1b:64:40:6a:a8:9a:95:0c:a9:ee:25:5d:92:c1:0d:e1:3a:5b:
0e:53:bb:6f:94:42:07:66:60:dc:c4:1b:6d:3b:2c:c8:de:38:
07:13:be:c8:2d:47:f9:95:4b:69:fd:8b:4b:db:78:e9:9f:fe:
36:e8:32:b5:89:a4:4b:17:05:01:f8:5f:fa:2b:09:72:5c:f9:
6f:c1:0c:04:63:29:5b:06:7e:9d:02:63:a3:03:09:47:40:c6:
45:f8:4f:aa:53:6d:82:24:ad:b4:49:e5:3f:eb:13:c8:16:57:
3d:8c:64:bf:04:d1:4e:ea:3f:80:ac:b2:21:3e:28:4b:67:c7:
fc:9e:a9:48:dd:69:96:20:48:dc:83:5a:96:0d:71:d9:16:3c:
22:51:7f:04:c8:87:3c:ee:79:a2:a4:45:ad:0b:f6:4c:d8:e6:
69:df:8b:56:9d:61:15:e8:d7:22:ce:bc:a7:01:55:66:28:fd:
ed:ed:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:30:38 2025 by rpki-client