Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: nbrcrb7Pn4GTPST0ZQWv7a9bka9zqEv2I0R4rrp/w3s=
Subject key identifier: 6F:69:6D:CE:23:08:7B:8F:4F:A0:5C:A8:BE:0A:BB:24:B6:85:52:9E
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 019872CFEF1F55E2B8EE0E08C5B9660787AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 1142
Signing time: Mon 04 Aug 2025 02:01:26 +0000
Manifest this update: Mon 04 Aug 2025 02:01:26 +0000
Manifest next update: Tue 05 Aug 2025 02:01:26 +0000
Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: Dibkqrck5mUgoJw0BSpUFVTQrhw22iZshxABtFrTAkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ef:1f:55:e2:b8:ee:0e:08:c5:b9:66:07:87:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Aug 4 02:01:26 2025 GMT
Not After : Aug 5 02:01:26 2025 GMT
Subject: CN=6f696dce23087b8f4fa05ca8be0abb24b685529e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:3c:8e:07:5d:44:7b:36:31:2a:4e:85:03:
b5:0c:4c:e4:68:7e:80:51:1a:88:d5:9f:98:1c:65:
fa:15:c6:f1:28:01:d2:10:47:95:ac:22:6f:8b:42:
eb:ba:d8:e8:70:b0:d9:d5:2a:32:bd:b6:71:31:45:
09:89:0b:5a:e5:12:6c:db:f8:b5:96:a7:55:3c:ac:
7f:ba:0a:28:1c:2b:a7:10:5d:7a:4f:14:9f:ab:b2:
0a:5e:ec:8a:6a:c0:f4:05:6d:f6:f4:b7:e3:e2:2d:
98:4c:22:ba:89:ff:0e:7f:0f:92:9a:55:c3:ab:47:
16:d1:86:62:e4:3d:91:18:88:98:01:ac:b1:30:7d:
97:63:84:c2:32:47:17:9e:db:c8:cd:ed:61:84:75:
d5:30:91:5b:5e:68:09:a2:13:5e:5d:ff:bd:8c:c1:
91:2a:8f:66:14:73:5a:96:f6:9c:e1:b3:58:d2:d1:
7e:5f:f6:dc:53:ae:dc:a2:ed:4a:76:7c:b0:38:e2:
aa:e7:91:f3:2c:97:a6:ec:ca:25:3e:01:57:32:20:
b1:1d:e0:87:93:59:88:59:9a:11:e6:c4:40:0d:15:
b2:53:b5:ca:b3:bc:4d:70:34:0c:66:a5:76:48:c7:
26:f8:b0:8e:e2:f3:b4:1c:af:a2:95:33:3c:be:6c:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:6D:CE:23:08:7B:8F:4F:A0:5C:A8:BE:0A:BB:24:B6:85:52:9E
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ea:ed:be:0e:3b:ca:5f:05:8e:2f:a0:8b:43:23:16:33:4b:
e4:26:3f:7c:c0:9e:cb:b4:6d:8a:19:81:03:df:50:d6:f1:12:
3a:5b:ee:43:be:9d:1b:45:a7:d6:fc:d7:b7:54:16:27:b4:00:
f0:55:65:ff:cb:2e:0e:d9:cb:69:48:df:37:19:97:3c:2e:2c:
5b:f5:4c:88:ee:8f:1c:34:e6:8e:ea:6a:ec:21:fb:8f:9f:0b:
8f:c0:b5:c8:83:43:db:40:32:3a:eb:05:1e:19:81:11:c2:1f:
38:5a:b2:43:c6:75:34:f5:f7:24:4f:ab:d8:e8:5e:ae:1c:bb:
8e:5a:81:cf:4d:ac:d5:49:c0:f6:0c:52:3f:82:98:61:f2:57:
14:ca:91:e3:87:81:46:f2:2d:fc:e0:86:6c:05:28:ee:71:63:
ec:08:e6:73:39:19:4b:68:16:c4:a0:cc:dc:2a:eb:83:e4:5c:
0e:7f:e8:64:d0:43:f5:a5:be:e6:de:76:16:7d:35:d2:b4:e7:
17:58:35:f8:fe:e7:2a:00:06:b4:0c:92:fd:b1:c2:3e:3e:32:
ea:cc:e7:01:b0:17:f8:fb:00:75:1a:21:66:f4:d4:98:56:c6:
65:41:cf:7b:09:70:26:d7:5c:b7:ae:c2:f3:f4:10:00:43:89:
e5:b8:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:53 2025 by rpki-client