Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
File: hP-lQvPYybB7926uioaYWj17Tcc.mft (raw, json)
Hash identifier: 7R1yoyw+7szwtemnGZj9lFUpHfwBo0ggyeQokatGQ4E=
Subject key identifier: 61:40:23:CE:7A:AD:96:89:4C:63:94:7F:60:12:B5:1A:9E:D0:A7:08
Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Certificate issuer: /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Certificate serial: 01988B0F90A9807380B0473F85E9655881D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
Manifest number: 0FEC
Signing time: Fri 08 Aug 2025 19:01:49 +0000
Manifest this update: Fri 08 Aug 2025 19:01:49 +0000
Manifest next update: Sat 09 Aug 2025 19:01:49 +0000
Files and hashes: 1: hP-lQvPYybB7926uioaYWj17Tcc.crl (hash: 0XvDL04tGrS8tewJyHYEsa6NUjXKPPW/FqCErajulkQ=)
2: uVc-YEHIfoCC97dYSAB-pvf1GkY.roa (hash: xpxJQ9Mtn3be8wfSELsmv9qWpA192efhc4xx/FDBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:90:a9:80:73:80:b0:47:3f:85:e9:65:58:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Validity
Not Before: Aug 8 19:01:49 2025 GMT
Not After : Aug 9 19:01:49 2025 GMT
Subject: CN=614023ce7aad96894c63947f6012b51a9ed0a708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:f6:4d:32:fc:6e:19:a0:e9:d1:05:aa:93:
9b:5b:b7:fc:48:0c:bb:56:07:08:d6:93:1d:a8:9b:
f1:62:e7:13:e8:e6:83:2e:26:d5:53:33:90:e2:7c:
95:e4:e6:17:d0:95:dd:24:ff:3f:da:ed:ca:af:34:
c2:8a:ea:98:64:e2:64:dd:6b:b8:61:82:21:69:4e:
19:6c:71:51:3d:7d:f0:e0:54:60:b2:4e:47:be:88:
0c:66:1e:01:fb:de:d0:95:0c:db:32:85:98:b8:c9:
7b:e0:29:58:39:0c:c7:0f:55:75:d7:6a:1a:59:2c:
57:4d:c9:00:5a:61:15:57:99:2b:48:9d:3e:71:46:
99:b9:a6:8e:38:20:75:df:c2:2c:43:89:f2:a9:45:
a6:94:08:f4:d7:d6:76:eb:83:91:ef:c5:17:bb:34:
53:36:b7:cb:4a:ae:6f:cf:41:7b:00:48:e4:d4:f5:
97:51:54:10:29:6f:6d:b0:77:44:3f:d1:01:1b:90:
ec:ee:65:f9:e5:ca:37:40:5c:63:0d:8e:3e:74:14:
93:d3:aa:ef:d5:04:0d:0b:24:3d:96:f8:e6:55:72:
d8:73:81:7b:8a:0b:f0:f5:75:4f:18:d4:bd:a2:76:
50:e2:cd:21:b9:bf:33:b4:52:40:7a:c4:ba:5c:1c:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:23:CE:7A:AD:96:89:4C:63:94:7F:60:12:B5:1A:9E:D0:A7:08
X509v3 Authority Key Identifier:
keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:61:44:9d:f3:78:ff:7c:a0:d5:0e:ae:18:83:f6:1d:ad:
90:d1:1c:53:78:6d:76:e2:50:3c:6f:47:43:50:16:88:10:98:
e8:79:b0:ba:f5:06:4c:bd:ee:ec:d4:4a:53:67:4b:9b:7b:ed:
5f:b2:ea:03:92:38:c4:8e:7a:d7:7c:50:eb:18:57:21:86:21:
33:93:cd:f3:e8:e5:bb:00:f7:58:98:6d:8a:eb:01:b1:33:d5:
41:80:bb:2d:34:ac:b5:20:ec:0c:82:1a:19:28:59:7e:09:e7:
ea:57:4a:27:e4:a6:33:0d:92:e3:24:42:bf:df:bc:d1:4e:e9:
0d:cc:b0:ac:74:ca:e3:46:f9:58:9e:aa:a3:01:e1:41:cc:1d:
50:af:18:94:6f:ac:8b:65:a9:c4:2a:01:cc:92:94:e5:fb:c1:
2e:d5:ca:a2:b0:11:c9:6b:6f:70:eb:3f:76:6d:cc:51:e0:db:
82:35:30:51:c8:35:22:10:70:0f:7f:b2:92:81:04:ab:74:5d:
95:fe:55:d1:9a:6e:3b:3c:b9:2d:a3:2f:3b:d5:ce:9b:80:62:
97:81:32:34:f6:21:c8:55:d0:45:ed:9c:0a:ff:1d:d4:73:82:
d0:88:de:6b:5c:f2:f1:52:71:11:25:bc:bb:c6:d2:de:47:62:
7c:d0:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:07 2025 by rpki-client