Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: l1aP4mnb5VDvastmJwX9ssxyouH66pekb8GknXxggzE=
Subject key identifier: A0:92:4A:EC:4B:37:AF:7D:96:1D:53:94:0A:99:47:EC:F2:38:59:5E
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 01987E9CF12FF260D989F01C71C32415F3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 12A9
Signing time: Wed 06 Aug 2025 09:01:11 +0000
Manifest this update: Wed 06 Aug 2025 09:01:11 +0000
Manifest next update: Thu 07 Aug 2025 09:01:11 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: 4GEZ9+0n1jlw2HaLxu+xxJlViSt1/vHs/it6XsYK63s=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:f1:2f:f2:60:d9:89:f0:1c:71:c3:24:15:f3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Aug 6 09:01:11 2025 GMT
Not After : Aug 7 09:01:11 2025 GMT
Subject: CN=a0924aec4b37af7d961d53940a9947ecf238595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:44:5f:f3:b6:97:db:cc:6c:a9:bb:58:43:
43:24:f5:32:d6:3a:44:2d:f8:e9:60:ce:bc:24:07:
42:24:a7:ec:9a:31:47:37:f0:cc:b0:9a:58:14:cd:
a0:64:dd:84:42:bf:77:02:04:8d:29:36:4c:3c:72:
6e:2c:62:d1:f5:ac:e4:d7:2e:c8:a7:6d:5e:da:93:
64:cd:c1:5b:35:ed:24:f1:be:ac:b3:02:05:0f:4d:
ef:83:bb:7d:b2:c5:52:3d:da:e5:24:14:57:38:a5:
a6:9a:62:a8:09:25:56:e7:d9:f1:89:11:11:a0:4d:
06:8b:94:2b:5a:fd:24:cd:35:92:b5:e2:7a:7b:96:
a0:3b:d1:02:d7:cb:9b:76:cf:f0:de:05:24:d8:18:
3e:d0:b6:83:2b:c8:46:09:8a:be:3a:05:80:61:e0:
60:79:b4:14:7e:4c:f9:8f:d7:cf:06:10:34:08:f1:
77:e4:40:56:d2:fe:63:1c:c7:8a:5d:69:0e:25:49:
18:13:bd:ae:e1:28:67:38:20:cb:54:4c:d6:c5:8a:
2a:94:08:70:68:17:c8:65:63:48:5a:dd:45:8f:2b:
2a:5f:6b:75:41:db:c5:c8:78:d1:8a:47:32:2f:11:
1b:cc:15:77:7e:d6:aa:7c:48:ba:84:ab:08:bf:86:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:4A:EC:4B:37:AF:7D:96:1D:53:94:0A:99:47:EC:F2:38:59:5E
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a0:ac:70:bd:10:70:37:31:23:40:11:a6:19:d3:3c:2c:ca:
36:29:51:5a:31:83:b8:9a:10:7e:46:46:de:30:b3:1e:1f:ab:
8c:1a:ad:14:aa:0b:4b:3d:c2:b7:2c:d8:e1:e6:a9:99:c7:8e:
45:9c:c7:aa:67:24:bf:bf:26:7e:c5:83:ed:c6:8b:f4:9a:16:
17:76:9c:bb:79:f1:c5:fd:40:85:15:21:c2:33:fd:bb:9f:12:
47:13:ae:bb:6e:5a:82:6c:83:b5:1a:07:4c:52:c5:db:fc:0f:
44:36:16:68:3d:12:7f:38:80:a7:d1:65:6e:a5:18:17:c6:87:
05:af:af:0e:60:a7:bc:6c:86:41:4c:40:8e:6a:c6:ec:12:b9:
33:9b:5b:e0:a2:35:56:12:35:ee:28:5c:2c:8b:60:45:5f:ed:
84:62:ef:01:10:64:9e:fb:da:7c:39:60:91:12:71:3c:0c:ef:
20:0a:14:f9:7c:ee:4b:d8:ac:5e:95:36:5e:ae:e0:cf:1c:c2:
c5:3e:e8:85:8a:bf:ab:6f:e5:79:f1:41:ff:ca:76:a1:3e:e7:
5c:5c:08:50:c5:77:1a:4f:47:5a:02:bd:bd:68:98:4b:f0:79:
e9:36:ab:1f:5a:d0:3d:1e:97:38:c3:df:ed:51:79:26:30:78:
c0:a5:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:53 2025 by rpki-client