Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: nRJdp5J/W/QgJxI4GEvj238+3+xv8gJ0lm4x5Up+zCM=
Subject key identifier: BF:AD:75:E7:B3:B6:FE:DF:EB:1F:FB:BA:41:49:32:1E:42:B5:D3:19
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019936136E6982322B546C87CB52D1AAE228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 00:01:06 +0000
Manifest this update: Thu 11 Sep 2025 00:01:06 +0000
Manifest next update: Fri 12 Sep 2025 00:01:06 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: 69mtPH+19uyFXGwCROucHtZLqchCbLij71km0/5ypo4=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:6e:69:82:32:2b:54:6c:87:cb:52:d1:aa:e2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Sep 11 00:01:06 2025 GMT
Not After : Sep 12 00:01:06 2025 GMT
Subject: CN=bfad75e7b3b6fedfeb1ffbba4149321e42b5d319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:d4:19:d2:d7:d1:35:4e:29:69:ee:be:d0:
06:05:1e:14:db:3d:da:a0:97:80:3c:97:e8:83:54:
e1:f0:07:4b:99:0b:9c:61:e5:d2:cb:69:d8:dc:30:
3c:d4:13:b3:d8:70:9d:8b:26:01:73:b8:a5:93:9a:
c0:a4:cd:e3:e8:9a:24:aa:2d:71:58:8b:cc:5f:12:
92:c0:12:9e:a9:7d:f7:5d:37:dc:9b:50:69:4a:c9:
7a:cb:c3:8a:7d:91:44:12:4e:20:bc:88:e6:bf:77:
d8:f8:22:2a:9c:cd:03:ea:43:ac:2a:51:1b:1c:a5:
58:53:73:35:86:8d:76:77:75:d1:2b:71:fb:74:02:
6a:da:32:3f:c1:a0:c1:93:fb:98:2b:ee:0f:d7:8d:
4c:df:5d:ef:00:d5:d2:6e:94:a5:97:a9:8f:f6:3d:
6b:cf:ad:7e:f7:b0:d7:7f:b5:38:5f:1e:d0:46:2c:
3a:76:c7:c0:d0:b4:cc:f9:1c:de:7b:a5:ec:a6:c5:
24:d2:42:ff:06:dd:1f:2c:92:de:9e:2a:2f:af:14:
f8:ad:15:a2:a5:ea:bb:92:89:3f:36:f5:6a:af:d1:
e2:0f:85:2c:b1:80:ae:0b:74:1b:6e:61:f1:0a:7d:
11:e5:a9:3c:0f:62:91:5b:55:99:c7:8f:a9:96:b0:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AD:75:E7:B3:B6:FE:DF:EB:1F:FB:BA:41:49:32:1E:42:B5:D3:19
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:15:c2:42:ec:74:ad:5a:20:e8:b4:f2:9a:52:c9:b6:7c:5e:
23:94:4f:79:99:83:31:4e:04:50:41:40:a2:07:8b:27:41:62:
4e:51:66:ef:79:5e:71:46:ef:13:8b:0b:44:3e:e7:b3:7e:e5:
9b:c4:94:0c:45:99:b2:75:3b:12:4a:a6:24:03:09:e9:cd:8d:
f9:75:6d:90:50:b2:85:88:1c:46:8d:13:6f:a0:bb:1e:5c:f8:
3b:30:29:29:a8:34:af:10:0a:6b:e0:5e:c1:f9:81:15:87:e6:
90:da:f7:51:23:70:9b:ee:fc:95:f6:40:4e:31:ea:a7:71:28:
ba:f8:8b:cc:cf:ff:b4:ee:8a:d1:a0:9e:05:89:ab:5d:28:f9:
f4:0d:5c:f9:4e:70:b1:6c:a1:70:3b:07:87:2c:fb:5f:0f:5b:
c8:15:76:c7:f0:e9:33:33:2b:40:9a:66:e3:00:48:a3:b6:a9:
1f:4d:a2:07:7f:7e:a3:9b:5b:84:f3:34:9d:43:61:ec:f1:0c:
c2:f9:d5:8e:4b:b7:4d:b3:b2:9d:59:54:4d:a0:32:43:c1:f1:
ef:dd:1a:4f:77:a3:90:ab:63:c3:34:85:1b:70:55:84:ea:e8:
a8:78:1d:01:1c:8c:54:93:59:f3:d1:cd:e2:75:27:f8:9a:f9:
4f:92:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:46:31 2025 by rpki-client