Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier: Xiz4MdCuIQxAU5GEnr41xUJA5YSY2ije05H930VhhLo=
Subject key identifier: BB:EE:02:D9:FF:E5:FD:2E:18:41:2F:96:5E:93:68:9C:CE:37:B4:E9
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 019936EF11836F84005F9EA24486F145840A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number: 1689
Signing time: Thu 11 Sep 2025 04:01:01 +0000
Manifest this update: Thu 11 Sep 2025 04:01:01 +0000
Manifest next update: Fri 12 Sep 2025 04:01:01 +0000
Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: 6RSFNcWgBPzKYIixhBIgBBoiCXoxPic22fBxZi2NxxM=)
8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
9: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (hash: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:11:83:6f:84:00:5f:9e:a2:44:86:f1:45:84:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Sep 11 04:01:01 2025 GMT
Not After : Sep 12 04:01:01 2025 GMT
Subject: CN=bbee02d9ffe5fd2e18412f965e93689cce37b4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:cd:8a:84:e6:f4:33:21:09:30:6e:fc:52:
02:fc:26:d4:60:21:a0:51:8e:7c:a5:10:7a:43:dc:
ba:0c:ac:77:e7:9e:4a:70:05:58:02:a8:af:f5:a0:
77:36:6b:9a:db:e1:5d:52:5b:a1:93:62:60:85:c9:
27:69:4f:02:58:87:41:58:97:4f:ea:cf:75:c7:c8:
b8:dd:13:7a:46:71:c5:84:d3:3c:d0:5b:e6:74:7e:
3d:91:c7:8c:b7:8f:eb:70:3b:11:84:8f:3b:1a:9f:
9a:bc:4c:f8:6a:46:17:98:e3:b4:f8:9c:1c:79:93:
70:49:1d:59:42:11:6e:7b:ca:e7:0e:7d:13:e0:ff:
26:48:42:59:95:2b:98:66:e0:4a:62:23:1c:74:2a:
13:11:bb:21:fb:c8:ae:7b:f0:14:74:4c:ff:26:f4:
f3:a2:43:01:e6:0d:26:df:98:8c:9b:1b:25:de:63:
f4:e2:9b:74:20:c2:6b:68:74:ec:ca:aa:a1:54:e5:
d1:1f:67:8f:aa:eb:88:a3:d4:1c:ab:71:ee:e6:14:
26:d6:5a:b5:1d:d3:c1:8e:eb:c7:f9:84:49:d3:8d:
63:1e:08:94:52:ab:a5:7c:cc:03:7d:a2:44:d0:51:
6e:86:8d:54:bd:3e:21:14:24:dc:d4:54:89:76:d9:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EE:02:D9:FF:E5:FD:2E:18:41:2F:96:5E:93:68:9C:CE:37:B4:E9
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:00:02:cc:b5:fe:eb:47:f1:4d:3f:28:59:55:52:ef:dc:1f:
ec:74:33:62:39:40:b4:65:9b:eb:8f:d6:77:be:52:66:87:00:
03:87:d5:a6:ed:c1:7a:a9:82:4b:63:49:43:91:68:c1:3a:ba:
fd:4c:18:92:8b:c7:b2:c3:89:fd:8a:18:36:65:f9:27:56:39:
46:2c:6d:b0:01:66:ab:49:66:51:1d:fb:2c:38:f3:06:f4:9e:
22:71:de:a7:a4:7f:f9:95:3e:2a:fc:69:fe:e7:33:61:18:e1:
8a:de:a8:a2:b3:7c:72:fd:78:a1:81:fb:62:fb:66:a4:42:32:
69:82:b6:d6:b5:c0:ff:58:3c:9c:6c:6f:41:a1:8a:e7:17:ed:
13:85:c2:1a:36:0d:1f:11:08:4c:de:5c:08:c0:b7:85:78:07:
ca:50:1a:83:88:51:e6:70:e8:5d:f0:e0:ad:8e:b1:d3:14:2a:
60:d9:48:f6:d9:4a:37:f3:b1:71:cd:e7:fc:b7:a0:18:0e:4c:
27:d1:b4:11:be:ef:95:6f:8d:55:fb:2a:57:c7:e0:ae:0c:18:
fa:f9:ff:cc:10:f9:7c:8c:da:86:e3:65:cf:f2:34:04:a8:8a:
32:74:43:69:90:f5:fb:e7:91:49:94:fe:88:26:a1:da:a4:82:
58:50:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:01:40 2025 by rpki-client