Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: aJzSugsINVT6OmBriPyLRRtw2U1imUXQtBUCdGi4EeM=
Subject key identifier: 83:C6:35:5B:F3:5D:F1:18:AA:27:68:C0:BC:8F:2B:2B:E9:85:E2:5D
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 01987DF7F480A12F48EA386F6E3FC8C49453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 01E9
Signing time: Wed 06 Aug 2025 06:00:58 +0000
Manifest this update: Wed 06 Aug 2025 06:00:58 +0000
Manifest next update: Thu 07 Aug 2025 06:00:58 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: qjNmYGs4jeE2PC+F2W2JoGYWrlxytxEdPTLwZSuTgqk=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:f4:80:a1:2f:48:ea:38:6f:6e:3f:c8:c4:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Aug 6 06:00:58 2025 GMT
Not After : Aug 7 06:00:58 2025 GMT
Subject: CN=83c6355bf35df118aa2768c0bc8f2b2be985e25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:0d:ed:ab:10:5c:81:a4:0e:2e:50:91:0c:
19:0a:8e:49:d4:3c:57:fa:5b:c7:9e:e1:68:fb:60:
fa:ee:18:f6:13:d9:e9:05:dd:7a:ee:e8:35:8b:f1:
95:d9:17:cb:d2:6c:be:4b:5b:1e:1f:44:cb:31:f7:
ef:e9:41:5b:17:0b:fe:5e:ca:3d:22:b8:fd:51:5a:
38:ef:45:9e:fa:1f:e6:6a:b6:76:f0:1c:f6:fc:4d:
01:c1:fa:63:72:7c:22:a7:c3:0f:c4:f0:ef:75:71:
83:d5:35:77:4c:15:7e:89:e7:41:c5:23:ad:39:aa:
0c:85:6f:69:65:6d:b6:d1:7d:e8:97:ec:71:a1:3e:
3f:99:a9:92:61:1a:8e:3d:b1:7f:78:75:d0:20:8a:
f8:ea:f0:96:d3:a9:d1:5d:60:1a:a6:5f:70:55:58:
4e:00:a9:ad:3d:05:07:0c:b1:49:5c:c7:0d:28:c8:
11:5f:41:2f:27:ce:d1:04:be:d2:71:39:90:8c:3d:
e0:c3:7b:e5:60:89:bd:7b:b9:c5:7f:4c:78:39:e2:
84:e3:32:f1:fb:0b:40:8d:a5:96:63:6b:ca:cd:47:
e2:6a:7c:fc:37:c4:65:09:21:05:af:80:76:e5:66:
8a:f5:6a:9f:ee:01:f5:b6:5c:84:29:46:cd:d0:7e:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:35:5B:F3:5D:F1:18:AA:27:68:C0:BC:8F:2B:2B:E9:85:E2:5D
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c0:55:b8:02:29:71:ff:35:02:93:70:b7:a4:16:48:1f:01:
aa:2f:07:cb:95:88:c1:8f:7c:fd:d7:03:77:34:e9:20:ba:7d:
52:3a:f9:c3:56:f4:04:85:1f:be:69:12:4b:fa:fb:2e:d5:ea:
5f:55:12:c6:ad:a0:46:92:e9:1f:5f:4c:57:18:78:ab:75:a8:
65:ba:1a:03:64:6a:c6:52:3e:58:cf:40:08:8e:6a:e1:ae:a9:
9f:e1:18:f7:9f:c4:8c:bf:e6:64:47:97:46:20:0d:07:0d:14:
bf:54:50:d0:cd:a9:65:d8:dd:cc:90:55:ad:01:58:00:91:9c:
cd:9f:72:b0:31:05:2a:1a:e1:1e:68:98:0a:26:c7:67:e2:12:
34:09:8a:1b:91:de:f1:03:07:e5:da:16:da:37:40:d4:17:67:
07:a7:21:82:30:03:92:44:a7:31:1d:9b:04:6c:96:0d:87:72:
c5:1a:b8:01:5f:a3:71:c3:5e:d3:ac:4e:ee:48:53:7b:83:c0:
40:1f:4d:51:c6:98:61:ae:13:f9:83:51:26:1c:9b:a9:05:5a:
06:bb:70:59:27:78:3f:ca:78:d1:ec:96:24:1b:c8:07:6a:8a:
99:3e:f3:3c:40:f0:fc:4c:cb:6d:55:15:dd:f4:27:31:42:37:
27:63:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:12 2025 by rpki-client