Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: 2gmj1/awGVqwrW/NkzV+fqLaWEfQWoszENCpicIue8c=
Subject key identifier: 88:55:96:41:FD:92:C9:4F:FF:07:05:14:5D:B1:0C:96:DC:8E:57:1E
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 019873742717FA5D3F826F5EB9C2ECDB207C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 07C4
Signing time: Mon 04 Aug 2025 05:00:48 +0000
Manifest this update: Mon 04 Aug 2025 05:00:48 +0000
Manifest next update: Tue 05 Aug 2025 05:00:48 +0000
Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: /AtYHpfFFW4ycGF+VUt9OR8WMpEKIB/Aj+IPutyCQ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:27:17:fa:5d:3f:82:6f:5e:b9:c2:ec:db:20:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Aug 4 05:00:48 2025 GMT
Not After : Aug 5 05:00:48 2025 GMT
Subject: CN=88559641fd92c94fff0705145db10c96dc8e571e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:4e:29:e8:25:0c:5d:b3:79:ae:8a:3b:67:
30:6b:8c:c2:88:7c:86:69:df:82:82:24:bd:e6:b2:
c3:51:93:5d:6c:e0:6c:ab:bd:63:0e:e5:27:91:50:
4e:d0:53:8a:8d:0f:ed:46:b2:f1:e4:20:de:2f:c2:
28:44:11:c5:f3:7a:da:36:4f:79:8e:c7:24:f9:7d:
b2:9a:70:9d:9c:b7:b3:57:f0:3e:ea:c1:4e:b1:4d:
9d:4a:32:b8:44:ec:0b:17:f2:2d:37:e6:ad:12:f2:
1d:a5:fb:6d:b6:f3:0a:d7:8d:6a:78:0b:c9:e9:66:
e9:7c:6d:57:07:4d:da:fe:8a:13:a8:5d:07:9e:81:
f9:ac:50:b4:b6:4f:a2:4b:6b:91:e4:f2:c2:95:3b:
09:ef:6e:d7:2e:b5:44:1a:9e:c0:2d:f8:16:97:01:
72:dd:fa:20:94:0b:6e:a7:a5:c7:cf:c0:8d:05:2b:
7e:15:53:69:ec:7f:94:18:c2:f5:38:1c:85:fb:e1:
0b:d2:01:87:7b:dc:02:e9:fb:1d:eb:b1:f0:74:41:
fe:60:51:4b:4e:38:e6:3b:db:75:c6:6b:43:b1:2b:
b4:18:58:fe:17:1c:72:e5:bd:03:11:a9:1c:16:bc:
bd:15:dd:94:f1:5f:e3:44:83:6f:7e:0f:7d:86:d1:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:55:96:41:FD:92:C9:4F:FF:07:05:14:5D:B1:0C:96:DC:8E:57:1E
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:aa:27:e9:93:86:43:ae:7e:ce:35:8d:da:70:af:91:95:0a:
c7:5b:f6:ca:47:0d:b9:be:13:66:b0:8e:96:06:61:7c:46:5c:
c7:28:09:6e:92:68:fb:53:08:28:06:9b:c4:b4:46:d5:62:b6:
2d:c4:60:35:d2:bc:0d:44:3b:5f:77:22:06:83:69:fd:f8:3e:
47:5c:94:4c:1c:5a:c4:29:e1:53:50:b7:3f:4a:cd:44:96:7c:
a0:14:37:b3:fd:83:49:b2:f0:d9:ea:31:1c:f0:f0:b1:c3:94:
03:97:c2:77:5c:4e:75:6f:14:8c:0b:8e:9f:01:6a:92:52:67:
13:19:43:68:79:f1:5e:c9:d8:b1:5c:b1:fb:a8:ed:a6:6c:dc:
fe:e5:80:7b:9c:cc:ae:97:3a:c4:d8:ab:69:54:37:aa:b4:93:
15:eb:4f:cf:bf:f0:a0:dd:55:bf:f4:97:38:ce:2b:e7:93:f7:
30:43:f0:e2:86:de:f8:65:9a:75:3c:fb:51:3b:3c:30:1d:aa:
e5:7d:18:0f:75:23:bd:5e:b5:69:f0:4c:16:fa:95:52:64:eb:
c7:db:56:c6:0c:2f:9d:e9:50:e9:f1:e7:d4:c2:0f:4b:68:ae:
14:68:b5:ee:2a:3b:ac:78:40:c0:61:fd:8e:50:b4:ad:bd:35:
fd:25:8e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:41 2025 by rpki-client