Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: kPpwyQ0/mA+8tWx8OeXyPIm+QrglPK1vPBCGY7WiTWE=
Subject key identifier: B2:3E:7A:C3:31:C2:FE:25:C4:B6:A4:E2:83:05:C3:81:A1:16:5B:B0
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 0198CA93008CF030EC85E5D3DA1B543F2229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 04C7
Signing time: Thu 21 Aug 2025 03:01:28 +0000
Manifest this update: Thu 21 Aug 2025 03:01:28 +0000
Manifest next update: Fri 22 Aug 2025 03:01:28 +0000
Files and hashes: 1: KOsVP5bePK5N3aNgh_Mf2tcpMMI.roa (hash: 7uBjlY68CN9kyBrkClnf/o/c0vAf129ok+umjgiD7ws=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: EJWDkP0OJNzdYbPUjkq1dlBjflt9S/4oefFLfd4bis0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:93:00:8c:f0:30:ec:85:e5:d3:da:1b:54:3f:22:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Aug 21 03:01:28 2025 GMT
Not After : Aug 22 03:01:28 2025 GMT
Subject: CN=b23e7ac331c2fe25c4b6a4e28305c381a1165bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:54:69:e4:94:31:ef:5e:d2:50:f1:16:d6:
53:5f:cb:ca:02:8b:e5:3f:01:4f:ff:70:65:02:c4:
19:c0:8b:97:2d:da:02:2c:14:4f:fc:cc:62:69:0f:
1b:c9:24:07:7d:f7:76:d4:3d:17:6e:8d:bc:6e:e7:
f2:35:5a:c1:f2:89:fb:dc:d0:45:5a:10:8f:35:bb:
cb:a9:c7:a1:41:08:0a:43:2f:a7:79:3d:c3:14:d8:
46:5b:c4:25:e0:32:17:2b:a3:35:f3:a9:71:64:40:
ab:4f:7c:1e:37:53:43:3c:39:bb:5e:3d:24:96:68:
44:8a:f9:7c:bd:f5:74:57:30:13:80:ea:5e:2a:96:
10:93:b0:c9:ac:ed:05:8a:97:8e:d3:49:3a:48:05:
a8:70:37:c1:5d:0c:76:e6:fb:84:4d:db:a3:ee:2c:
d8:29:6a:b9:4f:fe:22:f5:fa:52:50:c5:4a:2c:c4:
29:ca:4e:fb:d6:ae:6f:e4:df:03:2e:f6:41:8c:66:
7f:50:65:bb:90:ce:70:a2:56:70:1e:e2:da:58:f8:
b1:8b:90:51:8f:e8:a5:1c:65:f6:93:e2:60:f9:57:
4c:bf:70:84:d4:2c:d4:cb:54:a7:cb:46:77:3c:2b:
22:18:4f:32:9a:c8:6a:c2:51:2a:61:18:f0:1d:23:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:7A:C3:31:C2:FE:25:C4:B6:A4:E2:83:05:C3:81:A1:16:5B:B0
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5a:29:e3:df:ec:c3:25:62:3c:7f:ee:4f:53:f0:e5:e3:ea:
92:61:2b:b7:c1:40:f1:d3:63:f0:f9:20:62:16:94:79:66:89:
42:fb:aa:4d:6b:0e:14:6c:e7:68:8e:ec:44:d1:9f:a6:88:87:
1e:b4:d5:9f:d3:3c:45:dc:46:b7:56:d1:4e:b0:9c:1c:af:6a:
19:01:a3:60:72:e4:02:13:a5:2b:01:13:b9:32:9b:ca:5d:18:
3a:86:b1:13:c2:de:c9:18:1b:4d:60:32:3f:69:d2:40:97:51:
7a:a6:5b:33:58:e4:c6:78:86:55:57:19:6e:a3:bf:3b:a2:a5:
fe:9d:ad:62:97:b0:17:a7:6d:fe:7b:75:33:ea:d7:6f:5c:6e:
7f:d6:73:9a:fd:9d:9b:fc:f9:df:1a:15:f6:68:ea:ce:6b:d8:
3d:28:fd:53:a8:75:e7:83:40:b7:fc:64:2c:f1:d4:98:77:8f:
76:95:c5:f8:19:15:d6:a0:b4:f3:0d:34:cd:73:4d:4c:35:88:
1e:93:3e:5a:ab:b5:66:93:53:a0:ba:4d:c3:05:02:21:03:ec:
ca:63:73:40:27:bc:c2:f0:ef:92:62:35:a6:47:1c:8e:a4:09:
cf:2b:6c:98:2b:54:29:f7:f3:af:ed:3e:16:67:4a:25:38:19:
dd:05:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:07:21 2025 by rpki-client