
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: k2oU1MYey+w19/Kv1EMfRxGs1e/zV+gCd4/q8rlVZA0=
Subject key identifier: 22:3E:5E:62:D1:AB:4B:DB:2A:99:57:4D:02:61:28:DC:BF:18:09:4C
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 01987450583934F5F5E0D26C092B407999B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 134D
Signing time: Mon 04 Aug 2025 09:01:18 +0000
Manifest this update: Mon 04 Aug 2025 09:01:18 +0000
Manifest next update: Tue 05 Aug 2025 09:01:18 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: R5KsIBD+M3Z6gBMaAc3JVMz8lSf+BJqGIGu/1dGzkwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:58:39:34:f5:f5:e0:d2:6c:09:2b:40:79:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Aug 4 09:01:18 2025 GMT
Not After : Aug 5 09:01:18 2025 GMT
Subject: CN=223e5e62d1ab4bdb2a99574d026128dcbf18094c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:fe:6f:e3:d2:7b:b2:4f:ab:df:29:d8:bc:
20:ef:7a:d6:82:70:a8:41:c0:63:78:2f:e1:29:03:
be:69:f1:48:37:d4:46:88:c4:8c:42:36:93:b2:a1:
eb:5e:34:d3:e2:dd:8e:41:5e:ff:c6:0b:ae:74:ea:
ff:ae:09:1a:53:3f:dd:72:a4:c1:9f:4c:9b:ea:b3:
ba:5d:3b:c9:96:b9:c4:1e:91:46:2b:08:f8:a2:02:
44:1f:9b:35:f7:c2:df:10:ed:64:87:97:5d:de:c1:
50:2c:c2:ad:8d:42:b2:3d:d1:b1:91:bb:46:82:53:
b2:ca:be:72:a9:73:f4:d1:a3:3f:c0:e8:ee:ad:71:
e5:3c:9f:05:9c:c5:c0:30:80:24:bc:87:85:90:4b:
78:86:08:03:f9:9e:ee:0d:b8:f0:5b:cc:80:2d:e6:
d5:d6:c7:55:b3:dd:ee:56:67:b4:8c:ff:77:91:03:
e4:09:24:f8:c0:20:c9:dd:5b:bd:fc:4c:37:82:d1:
57:20:21:2e:8d:0e:19:58:23:80:07:3b:ca:ae:ab:
a1:65:99:a2:5f:ed:1d:81:eb:ab:64:e0:f7:a3:59:
41:cc:46:61:1e:86:b9:b6:05:f2:5b:24:15:3b:30:
a0:a7:1c:78:e9:0b:5a:c9:78:0e:11:47:22:6c:b9:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:5E:62:D1:AB:4B:DB:2A:99:57:4D:02:61:28:DC:BF:18:09:4C
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3e:2a:55:57:fa:a2:45:6b:1b:0d:b3:25:00:85:df:dc:eb:
ab:e9:91:88:38:9c:e8:3b:70:b5:15:89:56:c3:3b:a8:24:36:
c1:90:8a:8b:14:d8:fb:f7:f2:25:49:a1:2f:6a:1c:3b:6e:82:
35:8f:df:c0:27:05:d8:15:59:b3:f1:76:27:21:ca:7e:ce:ce:
76:99:92:62:30:aa:2d:ce:38:69:92:ac:cb:04:db:34:20:08:
66:31:22:bf:ed:6c:82:81:e6:9d:fd:2c:96:77:d0:37:82:c0:
08:45:9f:87:6c:bc:b8:dd:d2:52:4f:15:d9:4f:48:e0:5f:47:
0f:f0:b0:ee:d4:bc:d7:45:d8:09:b5:11:44:c7:b9:ac:c1:d2:
78:45:c4:ca:93:c0:8b:a1:fb:fa:91:38:cd:69:8c:b3:4c:30:
1a:94:32:bd:0c:e5:a1:40:e4:f2:a1:86:95:e3:35:ee:03:a8:
ad:bf:f1:16:a4:3c:ec:79:e0:64:60:c8:3b:7b:7a:7f:49:e1:
8d:36:a2:b1:ab:58:c4:8a:61:12:97:14:d9:f9:09:d5:d8:2c:
3e:b0:60:11:40:13:dc:03:48:4c:9c:56:22:a7:9c:e5:8a:02:
5e:45:3c:88:36:6d:ce:47:6e:eb:96:eb:29:7a:8c:3c:61:1a:
c2:dd:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:28 2025 by rpki-client