Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier: nRIfY3g1Jdm+z1wZQbz4EAPtTFo2C2d0tXkP9fRzTxY=
Subject key identifier: DA:76:58:E7:00:49:68:6E:B0:F9:AC:3A:1F:7C:92:35:23:E4:79:33
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer: /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial: 01988B7D1B4FFDA39BD84F527BCAF29AC568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number: 1109
Signing time: Fri 08 Aug 2025 21:01:28 +0000
Manifest this update: Fri 08 Aug 2025 21:01:28 +0000
Manifest next update: Sat 09 Aug 2025 21:01:28 +0000
Files and hashes: 1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: N8XdM9A7i+cG3efiXjYEQGCuErAcJ9ZRFH3T098rYyY=)
2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:1b:4f:fd:a3:9b:d8:4f:52:7b:ca:f2:9a:c5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Validity
Not Before: Aug 8 21:01:28 2025 GMT
Not After : Aug 9 21:01:28 2025 GMT
Subject: CN=da7658e70049686eb0f9ac3a1f7c923523e47933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:f6:c0:32:40:2d:64:8e:87:0d:dc:32:5a:
e5:df:92:a3:33:e1:09:12:68:94:ea:b5:e4:ff:f5:
f4:ec:3d:e8:7e:8a:02:66:fc:be:77:0f:8f:f1:00:
7a:7a:0b:34:75:97:41:47:55:5b:49:c2:50:35:2b:
7b:ba:63:9d:24:14:5a:e4:94:0c:bd:af:fc:7d:ed:
cd:35:09:56:61:26:21:ee:2f:da:14:f2:70:bd:3c:
73:98:be:ef:40:02:e6:00:95:eb:3f:3f:6a:c0:89:
6a:c0:eb:e7:51:63:e1:cd:91:81:b5:93:2e:8d:a6:
2d:56:71:45:71:f4:84:20:a0:72:7b:09:5b:50:2a:
c3:4e:92:5b:73:10:da:4d:fe:7b:51:36:09:50:fb:
97:9d:02:66:90:b0:e1:4b:0e:c3:0e:b7:60:55:35:
85:a1:2e:be:28:ee:5b:20:18:0c:12:ce:27:90:ea:
c6:f8:f3:19:9d:12:9a:f8:18:2d:9a:9c:7a:63:3e:
9b:56:fc:cf:25:81:e5:e9:75:dc:6b:30:15:d9:fd:
71:e9:0a:00:0e:78:e8:35:e1:8a:aa:e2:03:60:92:
91:54:9c:b8:ce:a1:64:3a:7a:b8:bb:03:4a:2f:c5:
6c:32:93:02:3e:8b:d5:8f:93:b8:c8:57:42:52:41:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:58:E7:00:49:68:6E:B0:F9:AC:3A:1F:7C:92:35:23:E4:79:33
X509v3 Authority Key Identifier:
keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a5:64:70:37:1f:18:f6:c0:6a:53:f9:61:4d:9a:ea:bb:be:
b2:26:5e:1a:68:71:a3:8e:cf:cf:75:9b:5c:ad:e8:5f:ef:4c:
51:2c:9e:75:1a:71:c2:0f:05:b3:59:a7:5d:b0:01:cf:0d:43:
9b:27:23:51:ce:df:c0:ad:bd:ba:91:06:22:4d:35:f0:a3:e4:
2c:db:e3:ff:86:78:ed:8b:86:cd:97:e0:f6:15:44:e1:1c:f7:
1e:49:6e:fc:59:9e:c8:f7:d2:3e:7c:d0:91:1f:06:d6:d1:ec:
24:99:b0:2a:8b:25:e7:31:d9:32:51:20:bb:3b:51:c3:d2:d2:
34:93:e9:e1:df:eb:87:e1:91:d2:87:ec:a9:5e:af:c8:9c:89:
94:79:10:c9:fe:8b:d7:ee:f9:b8:9e:11:f9:a2:68:06:c9:a6:
29:f9:95:15:fc:4d:81:70:e8:23:7c:d5:59:78:72:04:d0:23:
48:d2:e4:1b:5b:db:a0:4e:36:f1:63:67:43:ad:22:63:bc:9f:
c2:04:d7:83:e4:3e:35:ba:ec:6e:11:ba:5a:64:c0:fc:3a:57:
60:16:27:cd:71:2c:dc:6f:23:06:b2:e6:4e:9c:e1:e4:30:61:
b7:ad:bb:a3:84:0d:c7:95:6c:97:b0:ef:42:56:eb:ae:21:b7:
85:29:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:00 2025 by rpki-client