Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: g/N/+miqeoPZvzLO3JFe8SH6l3Mx4g0ZN1X0tAUkFZA=
Subject key identifier: 97:76:26:D1:FF:94:1A:00:60:61:21:67:C2:4A:EB:6E:B9:09:1D:C5
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 01987C778FE001DD4408F4407B44825C66AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 0979
Signing time: Tue 05 Aug 2025 23:01:06 +0000
Manifest this update: Tue 05 Aug 2025 23:01:06 +0000
Manifest next update: Wed 06 Aug 2025 23:01:06 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: YIFyG4hv46Xx08whRl2fWVZuwaTwq4PL12LztFjMAGY=)
2: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (hash: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:8f:e0:01:dd:44:08:f4:40:7b:44:82:5c:66:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Aug 5 23:01:06 2025 GMT
Not After : Aug 6 23:01:06 2025 GMT
Subject: CN=977626d1ff941a0060612167c24aeb6eb9091dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:22:2a:41:05:eb:bf:95:9e:45:9f:6c:e8:
2e:b8:ed:8d:48:62:25:86:f4:86:33:2b:9f:ec:00:
d9:8a:e8:fe:e2:c0:20:8d:f4:4d:3b:e4:b0:0f:38:
6b:90:f1:b8:24:b3:40:19:4c:ff:c3:d3:5f:45:60:
09:74:73:0f:d6:b9:22:18:b6:8d:8c:ce:b6:6b:8e:
d8:7d:3c:5e:fc:04:26:f6:f4:01:e4:48:40:60:fa:
83:e2:68:20:37:df:6c:dd:6b:23:0d:4c:ac:dd:d7:
e4:ab:6d:16:e3:34:0b:33:19:9a:92:f7:7c:28:a0:
58:05:74:ae:20:84:1b:33:ef:c1:2a:b5:a3:67:5c:
3c:4b:b9:fe:ed:0d:0b:e8:31:60:e5:30:d5:99:7f:
39:30:62:25:40:b1:18:de:8f:fb:db:11:38:a8:f3:
98:2b:3f:ef:fe:5f:5a:b1:56:f9:f7:5d:3d:dd:2d:
f4:69:c3:c9:b5:83:9b:ae:3b:d4:21:06:c0:f7:35:
7c:ec:57:1b:14:bc:5b:4a:11:51:68:8d:fe:27:99:
88:f4:46:5b:03:f2:51:07:f5:65:43:d7:80:fe:02:
31:c6:d2:b6:a7:a4:7f:1d:23:b6:c5:73:5d:ec:d5:
6f:00:eb:b8:3f:8a:ea:5e:bc:a1:73:47:f1:c4:43:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:76:26:D1:FF:94:1A:00:60:61:21:67:C2:4A:EB:6E:B9:09:1D:C5
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:00:ba:42:26:cf:08:77:67:ad:e0:2f:e7:bc:d7:bd:54:2b:
a8:fb:df:60:b0:09:02:04:00:78:06:b0:78:65:6a:f7:55:a1:
69:10:a3:8a:a2:af:0f:a3:05:d7:41:97:47:2f:c3:22:57:fb:
78:85:d0:61:e8:a0:e5:d3:19:63:bc:39:ec:a0:22:89:ce:4c:
56:d0:f2:62:0a:d3:0d:2a:02:79:f5:31:e7:b4:e2:f1:76:fa:
ee:b0:25:ea:85:b0:5f:49:fe:1c:5e:90:bc:14:d2:c4:32:5b:
59:f7:bf:d7:62:42:a7:b2:0d:bf:4f:49:21:2c:73:ab:2a:30:
b9:e5:dc:a6:47:80:9c:02:d3:05:4f:5a:b4:62:54:5b:0f:37:
91:b0:69:17:13:ce:f7:aa:19:49:42:5b:bb:d9:76:d1:ac:a2:
fe:27:b1:e9:f4:bd:a1:7e:ff:5c:81:a4:19:59:ce:16:6e:bd:
85:e1:8d:b8:2f:aa:39:b8:9c:0b:da:a0:38:91:d4:4b:86:d2:
ac:1d:40:ea:63:13:7f:49:4c:8b:3c:4e:24:c3:02:5f:3a:53:
ea:e0:54:73:7a:12:72:4c:eb:44:93:8b:be:99:a5:e2:27:42:
3f:95:28:21:80:62:fe:90:1d:2a:b8:5c:f6:42:8f:b9:36:aa:
51:86:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:14 2025 by rpki-client