Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: jV21Zzh2L/LRxWa+BytFdPwj1OC9iM16aDJj+45SKJk=
Subject key identifier: 31:0D:AE:EF:14:41:E3:7E:01:38:B8:AD:63:13:66:61:4B:43:9E:9C
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 0199FAD8546997152EC5BA44666A90CAD5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 0A3F
Signing time: Sun 19 Oct 2025 05:01:45 +0000
Manifest this update: Sun 19 Oct 2025 05:01:45 +0000
Manifest next update: Mon 20 Oct 2025 05:01:45 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: phhSd99QtcKLHfBHn4EQgobG8sDdmkw42AQAW1vhT7w=)
2: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (hash: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:54:69:97:15:2e:c5:ba:44:66:6a:90:ca:d5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Oct 19 05:01:45 2025 GMT
Not After : Oct 20 05:01:45 2025 GMT
Subject: CN=310daeef1441e37e0138b8ad631366614b439e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:fe:48:11:e0:cc:42:da:f5:ab:14:fb:b2:
20:55:ba:22:7f:fe:52:b6:aa:f2:80:ed:ca:07:35:
a2:c3:09:54:3a:25:c5:de:3a:df:5f:71:dc:bf:9d:
42:4a:ed:91:97:76:a2:c9:a0:dd:8b:ef:ff:1c:2f:
3f:98:7e:0a:91:c7:61:d9:70:d1:17:34:45:f4:18:
15:0b:0d:db:8b:c5:81:61:8c:27:4b:72:c1:5b:2c:
f9:47:d4:d0:f8:a9:a3:3a:7f:58:97:47:ca:da:ae:
2d:ff:2a:f7:ef:11:e2:d7:65:aa:30:42:1e:05:a2:
60:49:11:b1:65:44:51:1f:03:9c:4b:3f:3a:04:9d:
b2:cf:02:57:97:8d:f9:65:4b:9c:97:a1:54:50:88:
97:ab:18:40:c0:5f:65:f9:1e:81:3b:5d:36:20:b7:
59:1e:63:50:ef:bc:ed:89:ea:14:3e:e0:b9:77:2f:
d6:81:67:69:64:dd:8e:f9:c0:0c:14:a1:5f:d2:87:
10:03:0e:6c:b4:47:3e:7e:cf:c6:2a:96:50:e9:a7:
84:ab:6b:c1:0d:05:60:be:ef:53:cf:71:b7:92:5c:
6e:05:4e:1b:18:ca:91:e5:04:48:d8:33:23:76:04:
f4:2e:3e:86:35:d2:15:b6:df:a2:55:b9:3c:51:0c:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:AE:EF:14:41:E3:7E:01:38:B8:AD:63:13:66:61:4B:43:9E:9C
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:00:92:74:02:41:d9:68:33:53:ac:2c:c2:ca:30:75:0a:3f:
b8:1a:aa:a7:4a:e0:bc:cb:a5:e8:53:39:ad:03:bd:fd:0a:b6:
54:d2:41:6d:45:0f:34:48:14:85:65:8b:84:9d:6f:ff:0e:8c:
d3:c6:da:30:6e:8c:2d:e8:99:3a:e5:4b:3d:f1:5c:cd:27:15:
e2:18:bf:7c:50:87:3a:2c:01:c7:45:00:f9:cc:8f:98:ac:91:
6e:e9:6a:4b:5e:6c:9a:73:fd:48:1b:45:0a:62:61:2c:9f:00:
96:6d:46:cd:b9:93:f8:f6:5f:da:52:b2:67:82:36:0c:cc:17:
df:36:ea:1b:0c:ff:35:33:9f:77:87:f0:68:1d:30:d6:ea:97:
be:ce:d5:c0:5c:31:c9:3f:23:ec:b0:37:68:19:0b:62:f6:f4:
a5:a8:d0:76:ee:13:c0:ec:51:51:33:20:a2:ff:c8:ef:e1:32:
71:37:37:e3:6e:e6:0d:47:34:71:a8:10:74:b2:d3:fd:c9:25:
be:ce:37:00:4b:a0:22:f9:fe:37:3d:07:17:ef:0f:c5:82:14:
f1:b4:9e:3c:9c:56:10:8d:d5:de:39:cf:f0:c8:1b:7b:e9:05:
13:9c:a5:e6:2d:07:bd:6f:3b:93:b1:71:08:b0:ec:47:79:a4:
5b:4b:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:21 2025 by rpki-client