Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier: gAhhYsnaTePGOFhr3+7s3RWhcIkO7qj+B8ZEXjwH54A=
Subject key identifier: D5:E9:4F:F9:C3:05:C0:B0:4E:BC:52:9B:BB:FA:33:B6:CD:3D:1C:9A
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 019922C3872FF87A424A0598B4278B2BF790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number: 0889
Signing time: Sun 07 Sep 2025 06:01:03 +0000
Manifest this update: Sun 07 Sep 2025 06:01:03 +0000
Manifest next update: Mon 08 Sep 2025 06:01:03 +0000
Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: trC49g6/yFzLuVlBpOCtXQzvhY2F5vwjvJt6X1hE0Jo=)
2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:87:2f:f8:7a:42:4a:05:98:b4:27:8b:2b:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Sep 7 06:01:03 2025 GMT
Not After : Sep 8 06:01:03 2025 GMT
Subject: CN=d5e94ff9c305c0b04ebc529bbbfa33b6cd3d1c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:e9:fc:e3:34:58:36:dc:1d:d7:f4:c0:91:
06:ba:c2:a9:64:aa:af:61:29:07:24:2a:c0:93:89:
66:29:87:4e:74:38:47:f0:84:21:59:10:8b:a2:37:
8e:27:ad:1c:ef:3c:ea:66:ae:a1:32:75:9d:32:76:
f0:72:2a:51:af:a6:a2:06:55:09:5d:39:d3:d6:9b:
59:d6:a7:dc:6a:ca:2d:ed:0c:8b:e4:c1:6c:ae:ac:
39:ae:fa:53:6e:7d:b2:1f:d8:6a:77:9c:a3:ff:95:
37:6f:ba:17:a6:2c:1c:da:47:e7:33:e4:c4:1b:4b:
64:38:a0:b5:36:ff:0d:14:20:1a:c5:39:ea:e0:1b:
e0:ae:c9:c2:72:b1:8f:c8:cc:04:10:38:68:09:7a:
1e:90:d2:93:47:c9:76:48:e7:a2:e9:e3:1b:7c:4b:
03:fd:63:9c:35:65:2d:6d:fb:75:96:97:73:b6:0d:
3e:e3:24:63:f6:b2:bf:cb:f2:92:8a:e4:55:03:81:
57:ae:6f:10:7c:c5:97:1b:25:e0:a0:21:8e:a2:ed:
f7:6a:ed:31:b8:8e:65:7f:1b:52:58:8a:ab:d4:08:
68:de:12:07:05:f5:bf:a8:de:d3:49:34:af:3e:7d:
6f:90:37:9f:3f:a4:a2:c3:13:53:f3:10:9c:f2:94:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:4F:F9:C3:05:C0:B0:4E:BC:52:9B:BB:FA:33:B6:CD:3D:1C:9A
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e4:16:f7:68:c6:ab:8a:e3:02:ce:1d:bf:0c:85:43:68:56:
cf:91:c7:65:47:86:92:f9:5d:0e:55:da:62:7b:03:29:41:86:
2f:f4:24:df:9a:99:68:ce:58:0a:36:43:c7:42:66:c8:c8:70:
5b:d6:47:3e:fb:b6:19:b5:23:e0:77:42:1b:04:dc:ce:fd:d2:
0a:77:6e:62:a5:ec:99:01:05:06:5f:ae:a5:9a:f5:b1:c0:41:
4f:c8:ca:84:f5:80:3d:cb:fb:94:29:34:4e:49:20:21:41:c3:
40:a4:d2:af:9a:7a:a0:96:0e:8b:48:4a:34:ed:8e:dd:d1:6c:
6a:0f:1b:a1:89:8f:e0:29:f0:09:26:cc:6b:21:85:db:d7:89:
21:56:e7:d7:f5:fe:e4:0a:72:f8:93:f5:85:35:cc:00:d9:4f:
c0:33:41:b5:4c:77:be:a6:14:a3:d5:4c:85:a1:72:9d:68:f7:
cc:4d:22:67:c0:76:99:05:e1:c6:af:fa:6c:a7:23:f7:59:8b:
24:23:33:85:52:5e:4e:1a:ed:eb:31:41:4d:a7:76:0a:73:ed:
83:45:9f:b1:03:63:9a:72:c9:44:a0:56:c5:2c:57:ea:80:0a:
01:67:3f:84:35:19:a5:57:6d:18:f4:19:d2:7f:51:68:f7:e3:
a2:9a:c0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:42 2025 by rpki-client