Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: WbEtgFYmVoj3oI/PZHB/005uTmulB1xd8IolSE1lC48=
Subject key identifier: DA:E3:43:A0:71:57:49:28:4F:EB:B5:4B:9E:3B:86:6A:B0:8C:11:74
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 0199221ED75C4F101FDC21B267298FCD7AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 071A
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: 49eeHxaUFzk6xzLK8F0hX+2NGApaOt6eWTtBbZQ4utY=)
2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d7:5c:4f:10:1f:dc:21:b2:67:29:8f:cd:7a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=dae343a0715749284febb54b9e3b866ab08c1174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:45:ae:42:c3:54:ed:c7:11:bd:51:e5:61:
0f:6a:69:ff:5c:21:13:54:8d:1b:04:18:8d:09:c9:
f2:4b:ad:f7:b0:21:9e:c2:eb:8b:9e:0d:9f:62:5c:
31:e1:17:b2:d2:24:07:e2:63:e4:8b:f3:4c:7f:2d:
04:93:ba:21:14:e9:2c:12:e1:9c:1d:c6:00:fd:06:
5d:eb:24:43:54:a4:d5:a7:ad:f7:1d:b9:32:3b:3f:
82:e2:8c:83:62:51:25:e2:b8:46:68:81:c3:da:a8:
94:0b:e9:8a:e9:27:df:4b:1a:28:31:d0:f0:fd:0c:
27:c4:2f:6f:70:5e:2a:b0:57:9d:88:a6:28:d9:26:
50:3e:03:02:c3:3e:92:4c:57:62:50:17:4d:b9:8d:
10:0a:ec:8a:f4:54:65:ce:70:c7:55:76:17:c6:b2:
c0:57:3b:bc:67:38:48:4a:93:24:60:fa:66:e0:d3:
82:10:73:cc:01:7f:4d:b5:42:92:8a:81:a2:b0:df:
c1:1e:4e:e1:04:60:fc:cb:d6:d5:4e:49:54:a0:13:
96:4f:97:c9:c6:28:63:09:65:28:25:35:9e:c1:55:
47:8d:64:cb:ab:c0:24:8d:0e:45:93:b5:99:b0:b4:
0f:4d:31:e6:2f:94:68:ee:30:ac:7e:c2:56:a3:ac:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E3:43:A0:71:57:49:28:4F:EB:B5:4B:9E:3B:86:6A:B0:8C:11:74
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ed:9c:e6:7e:fe:37:94:22:5f:bb:8d:2a:5a:76:f0:62:c0:
10:d0:d3:e3:6d:3c:67:5e:67:3e:44:d0:e7:e1:61:e1:25:3c:
e2:58:f3:ac:e7:a8:5f:85:60:76:db:b5:ad:55:b0:59:e4:6d:
4b:96:ed:3c:6a:1c:e2:39:a4:de:bd:02:64:09:00:61:dc:30:
de:4e:8d:d2:9c:da:db:a8:07:c8:c8:57:a9:b7:84:94:51:ef:
16:73:4f:9a:43:d3:df:63:a8:f9:ad:e1:2a:b0:40:ad:e7:44:
7e:5c:b6:90:09:17:90:8f:4c:ac:81:bf:56:1e:84:59:73:18:
c2:a8:51:d2:7e:d7:53:36:9f:cc:01:ef:19:03:64:a7:6e:d4:
30:e0:9f:62:79:89:5d:11:76:b4:47:58:dc:04:57:30:39:33:
98:e6:b4:1a:f3:d5:57:0b:19:ce:77:57:0f:1a:ae:a5:88:47:
5a:01:27:52:a7:09:08:11:03:a9:df:4b:3f:6a:37:b5:7f:01:
e5:0d:36:a3:6e:fe:8b:c3:22:2b:3c:6c:08:82:ec:3e:2c:14:
1b:df:07:cf:ee:2d:38:fd:11:a2:6c:e5:c0:88:69:66:bd:92:
cb:89:6e:f7:e5:8e:9f:3b:1e:9e:ae:4a:64:19:07:09:ab:d0:
81:47:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:03 2025 by rpki-client