Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier: WFhe33kawftfSCmplOGGpLHz9CEaNgsXfOsVNZp0l1s=
Subject key identifier: 16:3A:61:06:59:FA:1B:CD:32:2B:95:57:8E:EE:B5:F3:89:F1:49:6A
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 01989034A34D5FE3DCD59033812D3FBFBCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number: 0DB6
Signing time: Sat 09 Aug 2025 19:00:25 +0000
Manifest this update: Sat 09 Aug 2025 19:00:25 +0000
Manifest next update: Sun 10 Aug 2025 19:00:25 +0000
Files and hashes: 1: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: nZ4uSHPwW/Nh0FMtx9P7ndgmIccHOpzPfUmeNw+SsO4=)
2: tpGVDM97XGpA5ofHLGA9otQIFM8.roa (hash: aWl1cnx2HDb3renuM7Fi/tYunaPtkTPWaRgrB19Lp4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:a3:4d:5f:e3:dc:d5:90:33:81:2d:3f:bf:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: Aug 9 19:00:25 2025 GMT
Not After : Aug 10 19:00:25 2025 GMT
Subject: CN=163a610659fa1bcd322b95578eeeb5f389f1496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:ce:c4:dc:b2:9d:63:64:da:eb:ca:cb:1c:
92:d6:fc:ee:d4:41:45:18:f7:89:ac:ea:3c:c9:c9:
87:2e:ad:9a:47:bc:81:04:de:3e:82:d0:fd:e0:29:
16:31:ae:9e:33:37:69:7f:96:de:c7:8f:b4:e8:2f:
74:74:9f:c8:16:96:1e:d2:87:d2:2e:09:8c:97:08:
64:97:27:95:79:fa:41:66:6a:13:5e:6c:38:2a:ba:
ec:f3:f7:9f:9f:55:6a:1f:0e:9d:f2:3d:ea:f1:29:
91:dc:3d:76:38:dd:74:b6:42:01:28:55:fa:f2:57:
ee:ca:ee:bd:bb:24:b8:5f:75:4d:09:e1:17:e9:5f:
24:6c:53:a3:b8:3c:64:75:bc:6c:fd:f5:63:d6:11:
f1:b3:d3:2d:28:5b:d8:fa:ba:f3:aa:c2:49:f1:12:
06:24:b2:04:5d:73:0b:60:a4:2b:45:ab:ff:77:95:
bf:6f:3c:d1:75:d7:67:88:b9:0c:6b:d5:ba:3e:3f:
b9:56:d3:d4:0a:97:6f:54:3f:f6:54:e3:f5:3d:d9:
81:03:4a:8d:12:68:1b:0a:69:e2:8a:32:a1:15:37:
1f:1e:72:4a:20:4d:93:e0:60:9f:a2:82:fd:2b:dd:
10:1a:2c:4f:ba:29:cf:95:9f:c0:aa:11:d2:8d:22:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3A:61:06:59:FA:1B:CD:32:2B:95:57:8E:EE:B5:F3:89:F1:49:6A
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:51:16:0b:51:38:64:80:a7:1b:f8:c5:f3:37:d7:e4:f9:b8:
27:1e:3e:9e:35:be:ee:7e:37:b2:75:18:1d:78:16:19:64:45:
31:80:36:47:a0:fd:21:0c:73:e1:f9:09:7e:82:e6:c3:c5:98:
ee:97:73:92:bc:c9:3c:9e:0d:39:fd:58:b6:51:1b:63:5c:02:
d6:3b:b3:5b:f2:8e:7f:8a:44:a6:38:9c:73:79:f7:2d:38:b5:
79:2c:79:eb:99:a7:28:5f:32:fa:e3:ab:ec:51:42:c1:32:84:
66:7d:0e:de:aa:58:c7:bf:b0:ce:56:56:b5:7b:83:cb:c7:f9:
bd:22:48:1a:26:4b:39:f9:0b:37:9d:33:25:46:60:44:d4:e2:
e9:23:8e:d8:db:ad:0e:5d:73:e8:cb:91:13:38:de:12:7a:38:
c8:10:47:eb:cd:fa:21:73:a5:02:40:bf:f4:d0:4e:6c:a4:a2:
8b:58:43:44:46:5b:17:78:91:58:62:6f:57:8d:58:31:c7:9c:
9d:d8:5e:21:5b:eb:5d:51:1e:08:c6:c4:44:7e:5a:5b:c9:3f:
8f:7f:c7:f9:73:81:48:bb:19:25:2d:82:07:53:0d:7f:8f:75:
61:6f:63:a7:4a:e5:e2:7b:16:a7:31:f7:70:5c:9e:d7:6a:3d:
dd:05:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:34 2025 by rpki-client