Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: IC1QDCjaaakbvKNA9h30WCt7PZWN2SC4v9M0dzsuiHU=
Subject key identifier: 9F:95:D9:8A:1B:1A:F7:03:FA:71:2C:68:97:8E:79:8B:4D:78:73:94
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 01987E2E7D7318B57A1BF5F9BCA1B702A0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1638
Signing time: Wed 06 Aug 2025 07:00:32 +0000
Manifest this update: Wed 06 Aug 2025 07:00:32 +0000
Manifest next update: Thu 07 Aug 2025 07:00:32 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: QBasvoJIEPLwl4/x7BB9+s8CqVFx0A8agx08NJKklzM=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:7d:73:18:b5:7a:1b:f5:f9:bc:a1:b7:02:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Aug 6 07:00:32 2025 GMT
Not After : Aug 7 07:00:32 2025 GMT
Subject: CN=9f95d98a1b1af703fa712c68978e798b4d787394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1f:1e:a9:34:d0:1b:a1:9b:87:52:61:39:9d:
4d:63:92:0d:29:88:d4:d0:01:f0:8d:ce:93:b2:83:
4c:53:a1:92:1b:7a:0c:7a:be:45:02:b2:22:ee:e4:
8d:c8:34:ff:b3:94:62:e1:66:67:b3:c1:8c:fb:2a:
07:90:82:55:46:e2:63:4e:56:0e:b3:d5:ef:3c:12:
dc:0b:65:15:4e:79:44:ec:2d:4f:d1:0e:af:13:98:
f5:e9:f2:da:fb:34:dd:72:26:5f:3c:8a:eb:4f:2f:
f4:ba:9d:63:6a:96:73:51:d5:df:ba:e3:86:0b:ce:
2d:a4:da:5c:fd:82:a9:10:ec:86:7c:4f:06:12:2f:
72:85:73:f9:ca:46:26:6b:8c:86:5d:c3:3d:9c:8c:
ba:2b:af:d1:b5:a0:09:33:78:d4:19:d5:3d:98:a9:
4d:86:48:3b:2a:cf:37:f0:44:65:a4:eb:3f:11:c7:
2d:ca:4a:68:08:1a:5f:cf:3b:8f:72:76:13:35:f9:
29:a3:10:16:ec:67:08:fe:b7:29:9f:8f:77:b4:56:
25:6e:c3:15:f4:33:a7:5b:ea:55:7d:68:72:89:7c:
4c:51:be:18:50:32:30:bf:1a:01:33:fb:5b:d6:14:
e5:ee:32:4e:0f:a8:2e:9c:e9:06:e4:b9:26:5e:16:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:D9:8A:1B:1A:F7:03:FA:71:2C:68:97:8E:79:8B:4D:78:73:94
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a7:fc:98:60:b6:5b:57:b1:20:83:31:50:33:19:1e:54:6f:
14:26:70:c6:d4:98:5d:db:d0:fa:90:4f:51:66:65:ef:02:61:
49:8f:20:f1:40:56:a1:dd:76:cf:a0:7c:11:f5:ee:a2:80:4f:
e4:c5:9f:2f:f2:ea:d4:85:77:78:1b:9d:e1:9c:32:a8:1e:39:
0e:af:0d:00:c1:0f:f3:eb:c7:33:24:87:a9:79:68:ad:3c:81:
f5:b4:61:58:9f:67:ae:68:80:68:78:90:97:83:85:56:94:71:
e3:de:49:c1:f2:06:7e:09:c3:44:42:53:6a:d2:e2:80:02:89:
65:cf:5e:6e:32:9a:90:51:83:ad:10:81:fd:fe:4d:50:a3:6d:
ad:30:9a:b7:fc:f1:67:b6:dc:f7:37:74:cc:bd:6e:e7:c6:02:
df:30:c9:59:c0:b6:2f:9f:19:cd:df:49:2e:4e:f8:3d:ec:92:
ef:6d:5b:35:cc:98:45:d0:d3:17:1f:74:a8:d3:d3:a5:37:09:
d7:80:56:e1:c0:03:3e:a5:6d:cb:23:4c:08:84:09:7e:2a:28:
96:7c:1b:32:16:d2:ba:ee:eb:64:a5:05:06:ba:7a:17:fa:21:
e7:7b:a2:37:0d:86:80:7e:f9:5c:42:6a:e5:63:e9:cc:72:11:
30:9a:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:09 2025 by rpki-client