Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: 4kEjwt6n4y71KR+3hYe2ahQWaTaw4dZveuQCDQcXubU=
Subject key identifier: 2E:09:82:21:4E:3F:35:92:48:44:E5:29:4A:C0:CD:BD:A3:7D:74:C5
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 0198733D3AD0217996E0066C0B871F468FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0E8A
Signing time: Mon 04 Aug 2025 04:00:49 +0000
Manifest this update: Mon 04 Aug 2025 04:00:49 +0000
Manifest next update: Tue 05 Aug 2025 04:00:49 +0000
Files and hashes: 1: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
2: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: crNAF8eDesqdBw/y0JU4cpPtgJYpDjjpvcs/YqxhAjc=)
3: zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa (hash: /aNfoxAWWXZ24dSnA+fFMNRvHS3pHzntsjJo5PzS3sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:3a:d0:21:79:96:e0:06:6c:0b:87:1f:46:8f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Aug 4 04:00:49 2025 GMT
Not After : Aug 5 04:00:49 2025 GMT
Subject: CN=2e0982214e3f35924844e5294ac0cdbda37d74c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:f1:03:d9:45:e7:8a:01:93:17:43:1b:2c:
b6:46:54:a6:a1:08:7e:f5:a1:2f:5d:35:36:f1:5d:
b8:5a:9f:ff:ea:5d:bb:e0:3f:66:e8:ad:54:9e:54:
79:79:51:64:f5:20:11:71:b3:2e:f9:9b:a3:39:77:
2a:74:f7:ff:09:45:32:33:1d:ef:1f:d6:1c:c0:86:
a0:ba:57:ba:84:a2:c6:27:9e:f0:f5:40:cd:fe:38:
df:61:c2:38:83:76:37:2f:09:bb:d7:b3:b0:4f:4d:
61:2c:16:63:1d:8d:b7:66:17:53:8a:cd:e3:9a:dc:
90:62:fd:f5:ee:c2:e6:f1:52:63:63:15:38:70:fe:
2d:f1:a9:4c:90:b4:05:3a:b1:fe:18:c7:49:c6:7e:
20:7f:41:74:6e:6b:7a:ab:d1:3b:7b:2c:7c:fa:6b:
bd:8b:79:6b:76:46:80:fb:5a:51:64:65:33:52:e3:
74:98:2c:5f:47:9c:3a:aa:e3:a5:35:19:a4:00:1c:
59:ee:34:7d:b2:34:20:83:12:69:92:b9:21:41:ad:
c8:e4:a2:36:72:01:a0:0e:6a:bd:0e:b3:5a:8d:c5:
df:ea:83:7f:1b:b0:16:a0:79:bc:bb:7b:f3:c1:d2:
a4:11:49:e9:95:93:0e:1b:de:a8:ca:47:a9:ef:25:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:09:82:21:4E:3F:35:92:48:44:E5:29:4A:C0:CD:BD:A3:7D:74:C5
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:1f:95:92:be:40:f7:fe:68:77:55:27:9f:e9:64:f6:2a:
8f:59:f1:dc:fd:d6:7f:7e:b7:59:42:16:ff:e5:e9:5a:05:d9:
fa:42:ad:d5:5c:e6:f1:54:99:c8:0b:84:ac:3a:7a:4c:2c:72:
3c:33:61:6c:07:ed:d0:e3:b0:3d:97:0a:0d:d9:f0:29:c2:a1:
d9:c0:25:98:63:7e:c6:43:a8:a3:bb:d9:9d:7f:6a:3d:a8:ba:
bd:8f:e4:4a:0c:36:3f:44:0a:09:48:f0:18:ff:05:07:be:c4:
ea:69:06:aa:16:e1:3c:6c:56:65:d0:0e:bb:79:da:77:bd:46:
36:ed:6a:6e:2f:b3:92:9a:bc:c5:48:57:40:75:53:34:87:58:
06:e0:4c:41:57:62:a2:3f:c6:67:30:d4:01:cc:20:44:fd:f5:
93:26:f3:51:4b:02:c8:70:fb:60:3f:1c:65:72:56:32:72:78:
ac:05:d7:f3:01:b3:88:38:20:e3:72:bc:e4:0a:36:7d:4d:bf:
26:a7:f4:c1:0a:10:c3:bd:95:36:45:27:65:4d:6b:6b:2c:ef:
fd:ac:51:2e:10:1a:af:f1:f7:e3:6b:d7:ce:59:29:ec:f7:4b:
9d:6f:f3:04:c2:66:be:7e:fc:b8:93:37:36:05:f5:2b:bc:86:
4c:75:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:05 2025 by rpki-client