
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: GRNwAUmKGUmZt1ZswiyB3Em+XdLPnWXZb2kVtvH6lzc=
Subject key identifier: CD:10:8D:35:E5:11:F7:19:7E:58:27:F9:B9:2F:9A:15:26:50:4D:1C
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 01987A89A4AE58C6578314F3D680748B860C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 11FD
Signing time: Tue 05 Aug 2025 14:01:37 +0000
Manifest this update: Tue 05 Aug 2025 14:01:37 +0000
Manifest next update: Wed 06 Aug 2025 14:01:37 +0000
Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: l27M/dDnv4s/igblfutvGiXkYsZsBj+h5mFCph83uSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:a4:ae:58:c6:57:83:14:f3:d6:80:74:8b:86:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Aug 5 14:01:37 2025 GMT
Not After : Aug 6 14:01:37 2025 GMT
Subject: CN=cd108d35e511f7197e5827f9b92f9a1526504d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:d6:0e:1e:c3:56:8e:b9:58:f9:fd:18:01:
c9:f0:41:5a:4a:c4:61:4c:24:f1:3f:39:d6:c0:82:
78:28:5d:96:11:17:7a:08:f4:69:3e:04:e1:c2:e2:
1a:65:22:56:10:05:89:79:1b:ef:24:a2:e4:d5:3b:
76:b4:a9:b9:de:22:54:17:59:c5:89:43:3a:9f:fa:
6a:9c:69:09:8a:c5:fa:4d:67:05:14:ad:f1:43:7b:
29:8e:7b:ae:d0:4b:e6:39:dd:92:a9:20:47:13:be:
7d:75:8f:4c:4f:8c:d9:97:64:28:78:34:90:b2:19:
84:91:cc:70:47:44:15:ae:f8:2f:09:8e:70:2f:4f:
e4:aa:fe:33:6c:5b:c8:9e:b1:bf:f3:28:5b:89:ac:
52:ca:f9:a0:f2:e0:ac:83:43:c6:65:58:8a:8d:e5:
8f:4c:32:29:bc:5d:b9:22:c2:e3:b7:32:f3:5a:2c:
f3:08:88:73:86:e0:f2:fa:15:fb:e5:9d:0d:22:56:
0c:98:f4:91:70:cb:10:25:78:38:22:c7:b0:c9:6c:
1f:3e:15:92:43:d0:90:cd:f8:0a:79:90:ad:b2:2e:
a5:5f:24:b1:a4:83:1a:0c:d3:73:78:4c:20:e9:7c:
0a:5b:dd:4e:78:51:25:66:bf:2c:db:e0:c3:08:be:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:8D:35:E5:11:F7:19:7E:58:27:F9:B9:2F:9A:15:26:50:4D:1C
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c0:39:d6:57:8d:17:1d:31:ce:d8:6d:d3:ad:80:f8:ca:3d:
8e:3d:e7:7c:05:70:54:50:80:85:dc:4e:c3:d8:b2:a3:bb:09:
dd:48:06:d8:9d:59:c8:e5:4c:45:b5:f0:ab:0b:8f:87:c3:0b:
af:05:1a:38:46:80:df:ad:e0:f3:9e:09:43:22:1d:00:7e:39:
fc:6a:6b:df:0f:81:da:d4:78:07:c0:f1:99:e2:2c:ff:45:a7:
e5:fc:4c:70:f1:55:66:1a:51:0c:64:d4:ec:ca:d6:59:27:85:
95:2c:30:5d:55:38:a1:9c:8e:76:f0:1b:17:d4:56:d1:2f:ba:
5d:61:18:42:8f:11:23:a3:36:91:6a:2a:fd:e2:e0:d3:c2:46:
cc:ac:95:56:9c:be:01:8e:d5:ff:e0:02:69:9b:3f:5e:1d:68:
80:8a:ef:67:b7:5e:9e:42:0d:89:9f:f8:2a:be:4c:5d:59:fa:
72:14:2c:09:b7:e9:4c:90:c8:8a:ca:02:4d:5c:8f:e4:d8:ca:
29:2e:72:28:f2:a0:ab:b5:94:52:03:1b:22:50:bf:b1:a9:06:
04:c0:5f:5a:18:01:82:98:3d:a6:47:ba:30:a1:11:b4:72:77:
59:cd:6c:27:e4:4f:b5:70:96:ec:89:f2:26:1e:33:de:f0:54:
10:b4:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:42 2025 by rpki-client