Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: H9kC+C7SaPMpHDVHFXRZFD4kjzqhl7QCSysq81Bmgrs=
Subject key identifier: 32:78:45:FD:A8:F2:44:D9:74:5A:2B:11:C4:5E:A3:14:5A:47:C6:DE
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 0198665D376BD02E95349B2673060AF87484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 161E
Signing time: Fri 01 Aug 2025 16:00:41 +0000
Manifest this update: Fri 01 Aug 2025 16:00:41 +0000
Manifest next update: Sat 02 Aug 2025 16:00:41 +0000
Files and hashes: 1: BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa (hash: DzzXp7ohKMicQourdcNR0kS22RTAEFQSJ/9tBCQrWcc=)
2: GzDT8w0Ptt9b8FyYostNarXRHiw.roa (hash: A6DYaaXmihlLD1PftD3BewQ0V2peW0M1Cn7b21EMdZs=)
3: NClupgqAUdwnU34Sum2MaF9qVA0.roa (hash: aDGxKYq2Y8XMXNzlWk4ySV396lfiu4EB4r+x7lrq+P8=)
4: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: C/rxjFa08d23Rs5LkLe5Mu/yWwNwbPmUJ0bN+eMQtig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:5d:37:6b:d0:2e:95:34:9b:26:73:06:0a:f8:74:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Aug 1 16:00:41 2025 GMT
Not After : Aug 2 16:00:41 2025 GMT
Subject: CN=327845fda8f244d9745a2b11c45ea3145a47c6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:fd:1d:03:1f:40:b1:fb:be:8e:0b:dc:e8:
a9:72:8e:e5:4f:3d:c1:6d:82:7d:b9:35:b8:74:d4:
03:8a:a1:2d:80:21:c2:15:50:ba:19:63:f7:68:8d:
3c:2d:4c:95:5f:96:84:81:b4:38:40:50:e7:6a:da:
2d:f1:3d:fb:ca:a0:40:5d:e2:2b:c3:b5:47:b5:79:
c0:fb:fc:34:1d:04:3a:3a:26:64:0c:53:bb:ba:9b:
bc:35:09:f9:6f:fb:2f:e9:95:81:65:23:44:f4:52:
eb:85:8d:07:bf:b6:f2:44:28:1f:2b:3d:44:7c:81:
10:e6:b1:12:3f:70:49:2f:50:72:fd:e6:1a:77:7d:
ea:65:cc:a1:26:1f:45:cb:4b:b0:e9:e5:d9:9e:3f:
0e:fd:2d:f4:74:03:5d:b6:dd:7c:fc:3b:92:f9:37:
06:91:64:b2:c3:3e:f2:98:d7:17:6c:d4:aa:d6:3a:
ff:08:0d:f7:c0:c6:cc:0b:69:31:51:b6:7e:47:d4:
0c:d8:5f:ad:d8:0c:fc:b8:dc:91:a0:8f:66:1d:bb:
17:9a:af:7a:f7:ed:a1:7c:7e:9e:bb:5d:aa:d3:a0:
73:b5:30:bf:0e:8a:7c:a1:ff:50:ff:f4:a5:88:89:
36:28:e7:48:15:05:67:49:fa:1f:17:e4:87:ce:d5:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:78:45:FD:A8:F2:44:D9:74:5A:2B:11:C4:5E:A3:14:5A:47:C6:DE
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:52:28:30:e7:85:f1:68:2a:8f:97:e9:e2:b6:d1:0b:cf:24:
9b:e0:42:c9:7c:f9:30:df:24:40:49:54:aa:1b:0c:57:5a:14:
9b:6a:7e:d5:39:27:28:33:8a:7b:05:99:73:0a:a7:ad:0a:65:
14:3c:77:8d:66:11:11:18:8d:e7:5b:e1:62:ab:39:f8:cf:79:
b0:0a:ad:8b:6d:f5:2b:e6:68:f9:0b:c2:33:41:ed:f0:3d:b2:
10:3b:c4:77:43:f4:ae:d9:a7:a3:fa:7a:ec:78:5a:f0:5d:a9:
a2:1a:e6:a1:a2:d6:4b:de:59:35:99:a2:a7:62:7e:61:75:ae:
e6:c0:63:45:41:ef:03:0b:85:e7:f3:2a:a1:67:13:cb:64:c6:
7b:5c:b5:28:b5:e0:87:63:c4:3a:73:a7:d3:7f:ef:7e:d7:00:
39:b8:97:c2:e7:be:cd:2f:bc:50:06:2a:3f:da:54:36:55:8c:
92:04:f1:18:59:1f:63:64:b3:31:e3:61:36:33:67:c8:0e:1c:
f4:5c:92:00:8d:6f:4a:50:46:5b:78:70:91:f1:73:c3:a4:cf:
a1:20:b1:01:dc:b2:8d:87:aa:54:f6:38:63:99:2a:b9:18:99:
e2:27:3d:87:c6:98:c2:4f:45:7c:fb:00:e1:8c:61:4a:69:1e:
ed:0d:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:50 2025 by rpki-client