Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: NHb7wGWxfnULKXc9Vle8DLEqRml73JvoD5/sawKPgEg=
Subject key identifier: 7D:15:92:D4:01:97:99:FB:33:DE:B5:23:D7:AF:26:CC:6D:8D:8A:DB
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 019893A465F0E2F8751987D85B5DC4551891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 11:01:21 +0000
Manifest this update: Sun 10 Aug 2025 11:01:21 +0000
Manifest next update: Mon 11 Aug 2025 11:01:21 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: IsyIYjIeOvXjMKs9uppUpf+Olsxx49ppyPxFlYbLIZ4=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:65:f0:e2:f8:75:19:87:d8:5b:5d:c4:55:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Aug 10 11:01:21 2025 GMT
Not After : Aug 11 11:01:21 2025 GMT
Subject: CN=7d1592d4019799fb33deb523d7af26cc6d8d8adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:f3:33:0c:df:41:b8:96:8f:a0:a9:87:16:
90:8b:bd:6c:7b:3b:1d:a3:61:e5:b1:93:31:b6:f1:
13:08:20:3f:66:cb:4d:80:04:79:af:3c:4a:ca:84:
a9:80:4d:72:66:15:e3:59:d3:55:09:c2:ec:a9:71:
61:d0:90:1c:4d:f5:3a:14:8a:d8:cd:c9:e0:49:be:
89:9c:25:9b:ed:f8:30:aa:a1:af:33:79:ce:43:2f:
5e:b2:75:8a:10:64:df:1a:f2:d2:27:b9:cd:df:16:
9c:4f:c1:03:f9:5f:57:2b:cd:03:db:01:cf:5c:46:
46:85:cc:ae:cf:8f:17:86:20:91:2f:68:24:bd:3b:
a8:1d:1d:95:c1:b8:80:82:3f:16:6d:0f:d6:6b:27:
53:21:98:c2:bf:d3:88:f8:92:ff:f3:a3:a4:b8:ec:
65:70:93:71:f7:47:ee:b6:8e:86:d1:46:7c:5b:61:
ad:0e:e7:77:f4:26:09:2d:d1:2b:7a:7d:11:70:5c:
cd:08:c9:6e:62:e9:35:48:02:d2:da:85:21:71:a1:
20:99:9c:93:d9:b7:8f:82:df:d6:c0:8a:a9:5d:b1:
bd:07:2d:50:ab:98:cd:43:57:be:6f:f5:77:bd:ba:
ff:8e:78:c8:1e:3d:0f:ca:3d:a3:01:39:77:02:84:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:92:D4:01:97:99:FB:33:DE:B5:23:D7:AF:26:CC:6D:8D:8A:DB
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:28:c9:78:4e:13:d4:0d:ab:61:f7:e2:bf:97:32:9f:e3:b8:
d7:68:b9:22:de:39:15:1a:f1:62:e9:7d:e0:a3:b8:03:ae:e4:
31:53:cd:e3:2e:2c:00:4d:b3:ab:31:65:01:63:39:d1:b1:e0:
44:11:7b:f7:2c:89:68:41:48:f8:17:7b:17:2d:fb:97:7e:57:
55:94:9a:62:6a:3a:a1:a5:1b:a1:bc:d6:10:e4:cb:98:c1:ca:
de:b4:1b:f0:e9:17:f1:f1:ba:bf:fe:06:c0:82:5f:e9:a4:8c:
68:fd:0c:02:08:46:1f:af:db:b8:76:12:24:4c:45:90:be:b4:
82:48:b8:17:c4:8d:c4:4d:29:f7:43:4d:64:4a:91:c0:41:d7:
50:6b:bd:a9:1f:4c:a9:ed:ba:ed:e2:4d:30:41:9b:bc:fb:27:
3d:dc:b7:4b:3e:39:8b:9c:58:a9:c5:eb:4f:5c:0e:22:8b:da:
a4:5d:bd:2c:c4:04:c5:29:2f:9f:ea:b8:80:ed:5e:d1:08:07:
43:46:9c:6d:8d:ab:e4:5a:99:f6:74:cd:77:f3:d7:a6:e8:60:
2c:73:b9:7b:47:51:45:c3:10:53:ec:d7:3d:a2:25:ce:49:93:
84:a8:36:80:c6:31:f0:da:f4:4d:33:f8:a6:c0:61:3b:a8:87:
7a:0c:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:35 2025 by rpki-client