Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier: hhYh+TO4/+Gf7BEMns25AgKKk628modH2XycLu/BQ1g=
Subject key identifier: 25:DD:79:F7:12:A5:02:3B:07:E2:84:2C:A3:DF:91:D5:0E:68:20:79
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 0198745078FE2F7C0FCD59DE4BE4F092EE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number: 10CB
Signing time: Mon 04 Aug 2025 09:01:27 +0000
Manifest this update: Mon 04 Aug 2025 09:01:27 +0000
Manifest next update: Tue 05 Aug 2025 09:01:27 +0000
Files and hashes: 1: 9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa (hash: Fm2Q+Megk5GLVl9u0EHQZ20RgFMN11FSbY9n50k8CTU=)
2: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: FqEHj7f2JwWKGDuP1GW4u8IbasWXAIjfDY5ZOMyU84w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:78:fe:2f:7c:0f:cd:59:de:4b:e4:f0:92:ee:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Aug 4 09:01:27 2025 GMT
Not After : Aug 5 09:01:27 2025 GMT
Subject: CN=25dd79f712a5023b07e2842ca3df91d50e682079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:47:a0:17:c3:2c:c3:32:9d:45:b5:a9:5f:
c0:45:8a:a9:0a:5d:bb:a7:d6:5b:ff:ad:c9:ce:b9:
ea:fc:e1:27:19:71:f6:e3:e8:23:6e:b2:62:ed:29:
d5:db:af:7e:4f:18:7b:5b:fa:34:91:ca:c4:9c:f3:
42:fa:34:57:a7:53:72:72:22:2c:b4:62:e9:1c:14:
8b:e4:df:1d:f7:70:4b:d2:94:2a:c1:fd:e2:64:ee:
65:d2:aa:05:a6:a4:68:aa:c8:b2:02:24:14:8e:6e:
76:fd:e6:f4:ae:af:24:be:ed:29:ef:9b:2f:d9:77:
22:f7:a4:2d:56:5d:e8:8e:bc:e9:4e:ca:ef:c2:45:
39:cc:ca:43:9e:0a:57:08:21:32:68:17:61:c8:5e:
bc:1a:3c:fc:29:c3:19:e9:50:df:3c:b2:89:3a:53:
58:e1:10:db:76:45:ec:9f:54:26:a0:53:6d:40:7b:
7d:17:d4:9e:fb:85:75:42:3a:4f:6f:55:c5:9b:39:
28:7d:c6:63:81:cd:17:cd:45:e2:cf:43:12:68:49:
5f:06:0a:76:7c:56:0b:b2:31:6a:ce:43:ca:b4:97:
41:ce:53:6f:2f:31:63:e5:66:e9:a1:6c:fb:af:53:
b0:1d:f5:c5:cc:6a:2e:fb:50:73:96:84:e6:db:68:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DD:79:F7:12:A5:02:3B:07:E2:84:2C:A3:DF:91:D5:0E:68:20:79
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f0:c3:dc:6a:fd:9a:4f:75:23:e2:78:41:23:a5:70:63:30:
7c:40:1a:1a:82:cd:34:4e:1b:ef:71:03:5c:8c:cd:5a:d1:4e:
4c:1a:55:24:22:18:c7:13:59:91:2f:d5:76:ef:14:c4:fd:30:
1a:ce:46:5d:a2:62:4d:8d:f3:8f:10:01:1d:c3:55:ab:9e:0e:
16:84:25:dd:51:9a:ec:a0:bc:2d:2a:56:32:58:3f:ee:66:79:
77:ed:d2:e6:4e:cc:2b:6a:03:eb:0f:d1:7c:b6:65:9b:d8:a9:
cb:25:19:70:65:3b:af:42:d1:c7:8c:42:ee:bd:d5:7d:d5:97:
16:07:73:73:c0:de:77:5a:c7:83:e8:92:fe:fb:f4:36:32:98:
c6:5f:d3:df:f0:6c:5e:ff:a6:b7:9a:4d:e4:93:be:0f:5d:0b:
0d:5f:d7:3a:23:68:fb:0e:5b:a1:ce:fa:ea:58:2c:9f:c1:25:
02:f1:43:cb:8b:9e:2d:3b:ae:29:95:48:79:7b:2c:63:07:96:
f1:e2:8c:fa:0b:3f:cd:46:73:50:99:71:cd:6f:b0:dc:c8:d1:
f5:71:69:df:a8:2e:13:b7:bc:4a:f6:18:96:94:1b:a7:c3:6a:
14:bd:62:cf:ba:93:1a:da:b2:97:a8:a1:4a:de:3b:98:84:8e:
61:b0:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:28 2025 by rpki-client