Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: jZJXeIvYb/W78zLMcVQ4XKiPqVYOjiH7u6t2g5Jluxw=
Subject key identifier: 5B:C1:D1:5D:44:A8:2C:27:56:1B:11:2E:F7:E3:49:A9:07:A4:97:73
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 01992BC7124E81E9FF2807163095424E43C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 1222
Signing time: Tue 09 Sep 2025 00:01:30 +0000
Manifest this update: Tue 09 Sep 2025 00:01:30 +0000
Manifest next update: Wed 10 Sep 2025 00:01:30 +0000
Files and hashes: 1: EgrdXaLN-vc8C2zZS8RN3DywvDo.roa (hash: hzm54PDUPW3onP/qtSLZRsQOvKv3wuQ4riGx7IRQcQA=)
2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: 9d3/1SZkysrcsLwKyQa94KD4eMCyHQQGU5XJMbuxvuw=)
3: rAaiXMvO9i5snovqluPbyo_QCN0.roa (hash: pt3vDzVbNzSpy4PSZ8+XX3gpZBn6uEG/ZRILx9TbDQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c7:12:4e:81:e9:ff:28:07:16:30:95:42:4e:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Sep 9 00:01:30 2025 GMT
Not After : Sep 10 00:01:30 2025 GMT
Subject: CN=5bc1d15d44a82c27561b112ef7e349a907a49773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:c2:fa:c3:70:d3:75:ae:fe:d9:00:57:2d:
4b:7a:a6:da:cc:24:e8:73:4e:26:f9:20:f5:dc:ec:
f0:c4:74:68:57:70:d2:8f:35:e2:b4:de:6c:6d:34:
d3:ad:3a:76:4d:71:c6:70:f0:f4:42:4d:c0:2b:1f:
84:3f:27:83:5e:00:3e:53:a6:0a:b4:50:c4:82:74:
1c:c5:e5:2a:ff:88:2a:40:1b:f9:ae:6c:ef:f1:86:
bd:bc:c6:8d:10:d3:ae:ac:f1:5d:9d:bc:8c:14:52:
91:a1:9a:c1:55:d7:32:30:ac:b2:f4:74:72:50:01:
d8:9f:c1:ec:e7:52:08:19:9c:88:04:90:9f:fc:4d:
3f:61:a9:29:1c:43:87:b1:e8:64:c9:12:06:62:b4:
57:b1:28:f4:f8:e4:f4:c5:9e:55:f4:ae:51:43:85:
c4:74:8c:1d:16:d9:1c:60:e0:98:c5:3f:dd:e8:0c:
66:8c:e4:e0:36:1f:a6:ad:7e:1e:ce:ba:37:40:b1:
65:17:df:a1:c6:17:7a:ac:0c:76:b8:bb:d0:18:4c:
d2:e5:6a:30:b1:a9:53:dc:7b:f4:8f:5f:d0:99:99:
bc:9c:88:61:a0:d8:07:df:a1:d5:85:60:f9:db:52:
68:5d:62:38:36:25:41:32:59:bf:5c:52:ca:53:b5:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:D1:5D:44:A8:2C:27:56:1B:11:2E:F7:E3:49:A9:07:A4:97:73
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0f:58:f3:46:33:28:34:1a:19:33:d4:94:6f:4d:15:81:bc:
2c:8f:5f:7e:05:b6:fd:73:75:3e:20:85:cd:e3:ca:55:02:e5:
08:dd:71:7b:5e:8b:79:14:71:f3:87:87:b5:4a:20:fc:9c:75:
1e:b7:56:42:f7:79:58:66:99:f8:af:32:37:f7:9b:4c:31:18:
fb:22:6e:1c:ac:06:71:cf:bd:d4:a1:12:96:c7:c5:1a:f1:11:
f4:51:8e:45:04:91:ca:30:17:e7:dd:b6:7c:44:72:bd:64:27:
95:62:84:c7:28:8c:5b:76:50:dd:62:19:af:39:3c:3e:e8:6e:
bc:ad:c5:39:ee:42:bf:09:5a:ad:f9:20:12:0c:be:3d:26:56:
52:0c:2d:7f:0b:17:ba:4b:d2:51:2c:1c:ac:ce:71:a1:f5:13:
c1:35:32:fb:89:5a:94:fe:84:de:8c:0f:ec:11:c0:a7:95:e4:
af:78:96:60:74:c3:ea:06:c5:7b:c2:f9:e4:64:a9:0f:70:51:
20:05:22:97:09:a0:47:90:a1:1e:73:b3:3b:a3:c9:e7:91:5e:
3e:d1:70:98:50:75:ec:c8:ed:8e:76:da:7f:68:64:58:5a:e0:
25:35:9b:a3:2e:f0:5a:b5:85:8c:08:c4:7b:7c:9d:7c:4d:dc:
62:7c:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:31:14 2025 by rpki-client