Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: wKppcWp3GbeRIpJYlEnv9gxlWPbMi7HiIcGf+imptUM=
Subject key identifier: AF:F7:B9:59:A0:75:A2:B9:A7:62:F5:6A:B7:91:C4:12:1B:B2:FA:0F
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 019921E7BB00F905DAABCA5ECA97AEBCE4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 1683
Signing time: Sun 07 Sep 2025 02:00:58 +0000
Manifest this update: Sun 07 Sep 2025 02:00:58 +0000
Manifest next update: Mon 08 Sep 2025 02:00:58 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=)
5: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
6: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
7: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: F6qLDDxX42Kvw3fis7yFMeMfAPqdlQbTXZSXPp4QK6Y=)
8: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:bb:00:f9:05:da:ab:ca:5e:ca:97:ae:bc:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Sep 7 02:00:58 2025 GMT
Not After : Sep 8 02:00:58 2025 GMT
Subject: CN=aff7b959a075a2b9a762f56ab791c4121bb2fa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:c7:3e:04:8f:d5:91:00:3b:c2:72:f2:b4:
7d:03:19:c8:a9:53:35:8f:b0:b0:0d:34:18:e8:e9:
d4:9b:cb:3d:41:0c:10:f4:88:64:a9:77:07:f9:ed:
a5:01:5b:6c:82:da:e3:66:60:ba:07:84:f6:2f:78:
5c:60:e5:88:be:f3:36:1a:d9:47:07:6a:70:c0:b5:
2e:08:df:e3:c4:ee:fe:4f:11:b6:cb:21:46:b6:0b:
e1:b8:ed:2f:e9:2e:27:23:96:54:0c:5e:33:a6:60:
a1:4e:66:c5:71:da:db:d8:1d:9e:45:bb:13:9f:87:
c0:fb:41:13:6e:12:c3:79:f3:45:2a:0b:73:f3:1b:
a6:10:13:7e:12:ef:a0:de:da:68:68:3e:d9:c8:bc:
81:2f:11:80:76:9a:c1:c0:0a:05:99:72:f6:db:af:
6d:38:35:ce:7f:be:f7:17:21:ff:fb:e3:7f:a1:63:
02:67:8e:45:8f:69:d7:b6:fc:a3:e2:01:ec:0d:b7:
b0:18:17:b7:10:46:08:71:55:64:cd:0a:23:33:ad:
a7:53:e2:34:44:13:ed:bc:a1:06:84:80:61:dc:e3:
9e:fe:af:4d:5d:07:5c:9e:c4:be:25:a9:83:f6:2b:
cc:3b:90:40:8a:68:13:ad:d5:5b:3d:2f:04:0b:e5:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F7:B9:59:A0:75:A2:B9:A7:62:F5:6A:B7:91:C4:12:1B:B2:FA:0F
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4b:a5:3d:f8:7e:85:dc:d8:cd:5f:8c:70:be:78:50:af:27:
92:50:e9:f8:85:17:44:57:b6:10:0a:f0:a4:19:7c:4d:58:9a:
f2:4f:82:2c:6b:b4:0b:1d:a8:26:05:39:1b:d6:4e:ff:8d:6d:
59:3c:62:7c:48:ef:a0:1c:d6:91:b2:23:93:e1:01:2d:a5:b5:
5f:63:e8:b8:68:c4:d8:ed:85:2e:c6:58:88:70:8e:ba:82:ec:
e3:2c:f6:be:d9:2c:45:27:7d:11:f2:f7:f5:b9:c0:7a:fa:6a:
71:8c:a0:43:c8:2a:75:53:42:4c:47:57:f7:14:63:e0:29:db:
78:b6:84:37:16:3c:d1:10:62:e4:f0:c5:2c:49:3c:75:d1:d5:
70:e2:49:a6:1d:73:04:72:8b:af:b4:bc:c1:d0:47:1b:13:66:
a2:33:c6:a0:bd:90:21:37:b4:16:6c:3f:95:b6:cb:f4:ba:69:
29:1a:83:2d:4a:ab:dc:fc:10:a3:96:44:b0:20:d7:67:97:0e:
27:0e:2a:22:e1:28:1f:e3:4f:a2:61:61:09:0a:2e:3f:45:05:
82:37:42:a7:3a:d6:4b:e3:84:c8:fd:88:cb:1b:c0:6d:32:8a:
11:c2:24:bf:f3:83:e7:f7:37:e7:8e:0d:50:f9:e1:08:77:d3:
74:19:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:59 2025 by rpki-client