Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: SpW5dQ/RgD5rmUhYr3snMr6KxcIi3XcqYxpSu+qbuhY=
Subject key identifier: 3B:A8:C1:65:88:29:01:30:2D:EC:FD:9D:90:4F:00:3C:20:52:89:88
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 0198D51561B9BF4A7D007254D8BD89AB42BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: 4AZhxLxAvm2EN74MRGuW3Y64tk2+Y7R1emY01oNOnnw=)
2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:61:b9:bf:4a:7d:00:72:54:d8:bd:89:ab:42:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=3ba8c165882901302decfd9d904f003c20528988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:bf:93:13:69:c2:3e:4b:b3:b3:28:67:22:
81:aa:d1:e2:77:81:e3:dd:f6:6f:3c:2e:b2:a6:8c:
68:e2:c7:75:d4:0c:a6:11:71:1f:e6:ae:73:0c:8a:
ac:2a:0a:f3:01:21:26:c9:a4:15:21:f9:d9:d2:5f:
73:61:d3:c5:1d:71:c6:31:ba:c1:5d:d0:03:ff:90:
48:23:7f:63:a7:a4:b6:ff:22:14:fc:78:e5:34:1e:
a7:39:e1:34:44:99:b0:52:18:4b:ba:db:47:2d:74:
cb:d2:f3:9e:43:db:d2:a8:33:2a:0c:ea:d6:37:f8:
45:d1:1e:fb:a3:d3:94:cb:5a:27:ac:8f:7f:5a:0b:
d4:0a:84:de:9d:d4:21:b2:5a:09:f1:41:42:9a:3d:
dd:c4:f9:a2:58:6a:cb:61:b1:6f:44:4b:df:67:c1:
91:30:3b:db:61:91:13:c8:5f:0b:97:6f:f1:4d:e3:
00:64:16:97:bb:3b:df:66:54:d5:4d:6c:2b:5a:24:
c2:16:d6:a6:e1:75:af:87:15:51:b7:99:73:cc:68:
d3:7e:a5:a1:fd:8d:c7:5a:e6:34:bf:6f:5a:f8:76:
be:89:ac:25:3a:96:56:97:fe:7b:c2:9e:5d:f9:13:
af:00:f8:69:3d:ce:60:6c:19:b3:20:e0:51:db:1e:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:C1:65:88:29:01:30:2D:EC:FD:9D:90:4F:00:3C:20:52:89:88
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:32:de:a8:e8:58:79:77:f8:5a:93:78:4d:85:9a:bb:b0:
ad:f7:82:28:55:ca:4c:a1:03:bb:66:7a:af:f8:cc:a7:af:0e:
6b:35:f9:b2:1b:85:12:c0:fa:28:7e:1b:9f:62:06:91:35:b5:
dd:8b:a3:f5:56:00:ed:69:ba:de:eb:67:8b:31:3d:93:29:58:
99:62:13:ea:18:39:5c:6f:23:84:c5:61:74:78:da:f1:3f:de:
7f:75:99:70:92:9e:f6:41:bc:2b:f6:2c:e1:e1:ab:c6:55:7f:
ce:7b:78:38:5e:bd:59:df:54:64:c9:f1:f5:19:a3:db:15:2e:
e2:99:85:6f:00:7d:03:16:be:0f:b1:19:14:b3:9f:b5:a5:c8:
20:26:7c:60:1c:28:fc:3d:d4:52:af:b2:c1:66:77:fe:c0:74:
7a:69:85:87:de:94:5f:ac:1c:58:69:2f:be:42:5a:41:da:00:
b7:04:18:f5:33:81:ba:f4:d5:17:ed:0f:8d:38:36:8a:b9:5f:
86:e3:7d:1b:6c:0d:9c:10:e1:8a:3f:32:36:fc:6c:0d:b8:08:
0b:b7:61:91:3c:2a:5f:00:1e:68:3c:27:7f:b0:cd:9c:ae:a8:
52:3e:a8:25:e6:7a:b7:a3:c6:b0:b5:22:93:08:4a:49:ac:b7:
20:0e:c1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:16 2025 by rpki-client