Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: LlLG8EN51JugVhJRM/qFx6PGW8+jK6RnoxzmKnJpo6E=
Subject key identifier: 5E:69:26:C9:C9:59:68:6A:C5:8D:C5:D9:E2:E1:A4:DF:41:8F:C5:A0
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 01987AF721460626C08681B85621EBD386FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 16:01:12 +0000
Manifest this update: Tue 05 Aug 2025 16:01:12 +0000
Manifest next update: Wed 06 Aug 2025 16:01:12 +0000
Files and hashes: 1: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=)
2: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: T5rjcbm8BUj/la2RLK8uPlv0O8ZNs8ZIO8ZZilcggvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:21:46:06:26:c0:86:81:b8:56:21:eb:d3:86:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Aug 5 16:01:12 2025 GMT
Not After : Aug 6 16:01:12 2025 GMT
Subject: CN=5e6926c9c959686ac58dc5d9e2e1a4df418fc5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:2a:81:50:a2:09:f4:bf:61:56:e8:bb:cc:
3d:3e:1d:f2:a9:15:ba:b6:c1:2f:e9:2f:45:d9:5f:
39:56:ab:99:b1:17:6f:01:6b:3e:db:ab:59:76:37:
4e:96:d6:bc:fa:8a:15:59:48:30:d1:b4:fe:da:f5:
a6:77:f8:5c:32:e1:39:de:ca:70:8a:d2:eb:61:ad:
b2:7b:f9:74:85:7e:bc:ea:d2:c1:dc:86:65:8f:47:
2d:3e:c4:ba:aa:da:74:49:72:65:a0:98:34:41:ce:
76:c3:1f:64:20:7c:06:98:90:4e:33:91:16:fb:6a:
d2:86:ed:71:86:07:b0:73:3e:b3:87:26:65:fc:06:
1a:d9:a0:05:95:61:34:fa:3f:11:8f:f8:56:f1:ab:
02:99:13:1a:55:ca:49:f5:fa:96:86:96:c3:40:71:
ec:0e:a0:80:5b:f7:37:d2:bd:cf:d3:13:93:b7:fc:
d6:70:9e:be:a7:82:f0:7b:02:3d:d0:c8:78:41:c9:
7c:42:e0:8b:a0:fe:73:4b:8f:58:c1:4f:ad:98:fc:
0d:77:f8:09:36:88:5b:9c:a2:51:90:3a:91:e2:bf:
8a:8c:b4:18:17:fb:b9:d1:a5:b3:c3:17:f1:23:e8:
c7:b7:24:13:8d:fc:b7:a1:f6:fe:ea:50:81:01:ac:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:26:C9:C9:59:68:6A:C5:8D:C5:D9:E2:E1:A4:DF:41:8F:C5:A0
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2a:41:d6:27:3e:fb:f3:64:84:a4:c7:34:cf:cb:1e:82:3b:
64:4a:9f:e5:02:76:a1:e2:41:9b:e4:79:81:ec:1c:7d:30:95:
d6:7c:ed:32:57:3e:50:96:9e:cf:07:df:25:a8:a5:17:d5:c1:
3a:b9:f2:3e:c1:a5:f1:05:32:a4:50:78:bf:ce:b9:da:85:0a:
7f:ca:b7:69:a0:49:3b:f6:f0:b8:58:0f:be:23:3d:c1:12:e9:
9b:e9:6a:9e:54:44:64:78:e4:22:89:17:b3:d5:fd:8a:0f:5e:
ff:ec:27:70:56:c8:4a:23:83:a4:8f:e1:87:20:35:09:21:fc:
23:af:23:69:cf:b4:e2:ab:ae:10:21:c1:29:7a:51:c5:68:b2:
ad:73:ff:37:06:ce:1d:ad:e8:f5:5b:64:f9:af:ab:2d:fe:d0:
44:de:69:8c:8a:52:6f:f6:24:03:39:fc:61:80:bd:63:55:08:
7f:08:3b:22:e0:d3:eb:fc:4a:29:e1:d5:62:a8:0e:9f:cd:b2:
eb:83:7c:1b:19:f0:31:d9:32:0a:ce:98:00:06:f3:37:09:2e:
b9:e0:81:c4:5c:68:1d:67:a9:dc:aa:93:df:fd:26:06:00:5c:
b7:7b:d4:90:91:3c:8c:b8:2c:f2:91:74:79:97:9e:3d:cd:f8:
4a:05:44:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:51 2025 by rpki-client