Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: /chg7CU3WDCWv5Fte8jSirxkLMBYbuWNGLY3A95ZA4Y=
Subject key identifier: 5F:DC:3F:7C:F8:D9:C0:EA:49:27:33:3D:CC:E7:1D:BC:98:27:6D:2C
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 0198D5BBA540D448B32E360409646E46A6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 0FD9
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: KEXRqlTfEFpXqo6ma9y4NVWKvAlqGI0pP5nTOvkmjkw=)
2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a5:40:d4:48:b3:2e:36:04:09:64:6e:46:a6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=5fdc3f7cf8d9c0ea4927333dcce71dbc98276d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:3d:b2:02:6b:5b:94:a8:f7:d3:f4:6f:26:
66:3f:a1:5c:b6:b9:a5:d4:50:ac:a2:36:50:a2:2d:
95:ec:14:15:30:66:cb:bd:d2:a1:79:85:d6:82:c0:
69:86:4a:90:0c:71:b3:f2:2c:59:db:c2:0f:a5:b1:
07:79:6f:44:c4:f0:72:15:72:fd:74:13:ea:b8:4c:
ca:4b:ed:89:76:5e:b2:90:a5:0b:44:aa:78:8d:dd:
2f:09:4f:cc:b8:d3:4f:55:bd:92:7c:56:38:20:ff:
d7:7f:e2:f3:0f:27:42:c7:63:d8:ee:58:d3:db:b3:
7d:8b:9c:23:a2:c7:61:7e:b9:cb:61:78:f9:20:63:
60:b8:7b:63:f4:20:29:51:fe:b0:d2:5b:86:33:e8:
9c:ff:0c:13:54:1f:18:42:63:43:16:d1:29:d3:6b:
b9:85:6f:02:b5:3e:31:06:11:34:be:ca:cb:4b:68:
86:e4:9e:2d:93:80:a7:b0:db:ec:26:c8:d0:18:66:
e3:7e:5f:a5:fd:2e:cb:37:a1:1f:22:42:cf:57:21:
3c:26:85:40:45:37:8f:06:79:26:a7:78:d2:9f:f2:
77:0b:b3:cc:7d:9e:5e:cc:3b:f8:ea:b3:5b:70:b0:
ac:1f:18:b5:91:33:87:aa:a0:1c:2d:42:95:9d:6c:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:3F:7C:F8:D9:C0:EA:49:27:33:3D:CC:E7:1D:BC:98:27:6D:2C
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:59:f2:c3:c4:d2:15:bd:12:8c:f8:fe:16:55:85:2e:e1:ed:
a8:1f:86:dd:49:9c:07:02:d8:c9:18:f4:cf:f9:69:bf:c3:6c:
17:7c:ef:aa:0c:5b:12:e7:27:42:33:53:2b:d6:5c:db:30:68:
06:1b:34:46:47:d2:99:7b:ad:7c:67:52:f2:d1:6b:73:90:4f:
f9:ed:bb:1b:e7:0a:a3:04:91:6f:34:b5:80:6f:db:40:cf:50:
3b:3e:d7:a3:58:53:bd:60:49:a9:36:ad:7d:da:03:36:f5:48:
71:84:54:53:43:08:7e:31:91:07:f6:b9:de:3c:04:96:14:d5:
e6:fd:86:a2:1f:92:54:1f:de:4a:0e:7e:25:b5:10:59:3c:20:
e7:6e:1b:50:6e:fa:f9:5b:04:44:27:7a:4b:1c:c7:81:d0:e9:
06:d3:e4:58:c5:09:f9:5e:14:e8:26:ec:8b:11:9b:2d:ab:ff:
19:bd:57:bd:34:45:f9:8d:08:16:8b:0d:01:14:ae:e5:e3:67:
01:19:53:f7:11:45:d4:2a:16:7e:f7:c5:97:64:21:ee:02:68:
54:66:16:40:29:6f:e6:b1:36:37:25:a6:59:db:d3:85:b9:7e:
6e:fd:13:0c:d9:1b:2b:73:9d:de:59:16:b6:72:e7:e5:a6:38:
7b:dd:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:33 2025 by rpki-client