Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: YJrWojjOTCvx7ezgRKk0W4hxHYsAeUPMvEGxU8MB3RQ=
Subject key identifier: FD:A9:85:F3:6D:E8:FA:A5:F4:C9:87:8F:CE:59:9E:7E:7C:E7:A3:86
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 0198D54E182AC2979B710A74F72863742B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0F49
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: czbs1WLtE/d94htcM+nu1hz1RcOwYlWOYPcjRY2U3eM=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:18:2a:c2:97:9b:71:0a:74:f7:28:63:74:2b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=fda985f36de8faa5f4c9878fce599e7e7ce7a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:93:c8:f2:66:bc:7b:99:2f:65:3d:1c:90:
d7:40:f2:69:c5:df:79:88:7e:3c:73:9c:16:67:22:
27:c6:e6:b1:db:dc:41:53:ce:43:89:92:27:c3:27:
3f:3f:a0:15:15:b2:94:ab:c6:b5:1b:dc:a2:d8:93:
ea:cf:b7:d3:39:c4:1f:8b:24:c0:77:75:4f:bb:72:
09:1a:6c:b8:60:7a:be:50:bd:f7:95:8a:5f:72:7f:
e2:d8:bc:f9:52:6a:85:97:d8:14:44:6c:ee:89:c0:
4c:64:0c:0f:66:d9:01:6a:0f:e2:47:2a:6a:ec:af:
1f:15:52:d3:d1:4d:84:1e:6b:ad:12:37:28:f9:11:
67:66:d2:69:49:02:a7:06:b4:04:70:a3:bf:e8:61:
53:d8:46:d3:8c:38:18:a4:93:c9:d2:4a:7a:56:d3:
65:7d:71:1c:07:4e:df:3b:87:85:98:d3:ae:dd:1d:
62:c7:24:86:c8:a1:dc:f0:c1:f8:dc:21:79:aa:1f:
44:81:48:85:57:7b:bf:db:d1:90:d9:89:58:97:e2:
1b:83:b5:8b:88:37:52:cc:69:45:de:7d:f9:a9:7b:
67:46:ac:c0:fd:04:8f:4d:13:58:26:24:70:1e:62:
bf:b2:0f:24:2f:56:2a:1d:c3:97:82:9d:a0:a2:24:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A9:85:F3:6D:E8:FA:A5:F4:C9:87:8F:CE:59:9E:7E:7C:E7:A3:86
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ae:18:3f:b3:d7:2c:8c:73:02:95:c1:d1:ba:79:b6:4d:c6:
ea:95:22:0b:67:2f:58:1c:ef:96:9c:2a:23:4c:8b:af:c5:ad:
74:8c:c6:13:50:66:bf:46:06:a6:c1:1c:09:8a:6d:0f:9a:58:
c5:24:fd:02:75:f8:e6:da:2d:72:7d:78:3e:8a:37:d3:dc:f6:
f1:db:44:b2:31:a5:11:27:7e:df:a3:4a:e3:82:6a:f5:61:6b:
96:ce:b3:82:f6:47:f0:8d:10:04:4d:f9:7d:57:3f:5f:84:c7:
f9:ec:77:b1:dc:cd:66:c0:86:3d:c8:ed:c7:d0:b4:48:0c:ee:
60:49:5d:41:49:b4:4c:3e:17:41:82:51:cb:73:da:a2:40:6c:
32:6e:67:8d:34:99:30:7a:87:11:9c:e5:64:b1:50:7f:3f:62:
da:f8:94:38:0f:ad:79:8f:a3:ee:70:a0:5a:36:68:02:c8:07:
39:f9:ce:41:03:15:2f:1a:53:2d:ab:7f:89:e0:a6:55:6c:be:
68:06:81:d9:92:07:fa:77:2c:67:96:e6:7f:8d:52:88:a9:bd:
70:aa:09:82:fa:a1:bd:b0:05:3d:d5:45:6e:c5:6f:43:27:f5:
76:fb:65:3c:ca:bf:bd:4e:6e:81:97:cf:09:db:c8:a5:dd:52:
66:8a:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:39 2025 by rpki-client