Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: z/Zue/Fg7vm7z8DHAiMsco6P1mtOabw61A6BvYBbjFY=
Subject key identifier: FE:8C:00:5B:39:65:7B:73:1B:C4:2E:7A:02:2E:63:06:C0:94:75:35
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 0198D4E06C1F10769CFC22C4C178725BFA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 06DA
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: NkIhaSfqVo2O59GZNEeWr4Lw7J9lIXx7BCQkVkW8a+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6c:1f:10:76:9c:fc:22:c4:c1:78:72:5b:fa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=fe8c005b39657b731bc42e7a022e6306c0947535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:e4:e3:50:24:f2:68:59:2d:2f:af:03:93:
a4:6a:44:b0:95:61:aa:f0:16:21:2b:72:6b:e6:9a:
fa:a3:ef:ee:0b:db:e0:00:72:de:78:37:53:01:c8:
f8:2a:d8:41:e6:60:e9:05:59:f4:73:5b:14:83:e7:
10:5c:4f:82:cf:9a:06:e9:29:d6:27:fd:14:9b:88:
f0:86:64:12:dd:8f:55:03:5b:33:c5:04:b4:9f:a1:
d3:a8:87:5e:d6:11:d7:2a:da:8e:94:6b:d7:13:34:
59:16:75:53:90:0f:c9:c4:a7:ae:d0:b3:bf:1f:e1:
3e:3f:13:99:e7:46:55:50:ac:ba:09:fe:be:27:f3:
c0:83:96:75:bc:8c:17:91:09:e1:8a:be:57:15:7d:
c4:b0:9a:eb:bc:bd:12:e6:bf:86:c2:63:8f:fb:5a:
c6:18:7f:8f:06:8c:6c:71:62:93:e9:53:4c:26:1b:
e1:50:59:b7:7d:02:27:95:49:f2:b0:07:a8:3c:e8:
89:0c:a8:b2:22:c6:9c:d0:41:c2:84:80:1e:ca:fe:
c7:c8:59:4d:97:82:06:66:17:a9:dc:81:d2:73:0f:
50:8a:71:78:cf:71:6b:f7:62:28:2f:06:25:2d:ad:
08:27:82:63:55:09:53:36:17:2a:0c:19:16:18:f8:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:00:5B:39:65:7B:73:1B:C4:2E:7A:02:2E:63:06:C0:94:75:35
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:34:3e:ff:38:54:0e:6c:cb:22:35:d5:53:6e:9b:76:45:0f:
bd:bb:d8:02:b9:f1:4e:fe:a0:e7:fe:45:68:93:4a:0e:f5:75:
b7:eb:40:79:3e:10:ca:59:60:c2:01:18:c3:f5:0f:17:ed:16:
3f:0c:38:82:1b:e1:42:4e:14:5b:d2:1a:4c:d9:de:22:78:d9:
75:a7:ca:9f:b9:20:94:1b:78:d8:1d:21:b4:c5:f9:c4:9f:cd:
0b:e5:35:63:60:d3:da:c8:f1:47:05:99:e7:05:47:69:ee:8f:
25:e9:6b:41:ab:51:bc:89:86:c0:f3:0c:46:2e:a3:ac:f9:bc:
65:31:7f:3b:32:c6:c7:45:52:9d:68:fd:8c:2b:0e:67:2c:2a:
01:9d:72:48:89:66:7f:f0:06:3c:9c:8c:1c:6e:41:8c:08:c8:
97:12:03:f6:89:a7:d5:a9:12:17:8b:c8:46:11:11:50:6b:33:
ad:22:b2:bb:53:44:59:58:8c:e0:36:ff:02:0b:db:22:c9:42:
32:f6:5d:dc:1a:73:04:ab:cd:fb:6f:5d:c7:cd:53:d7:d7:b5:
8f:4a:cd:b1:e0:8e:af:a6:55:aa:48:96:0c:9e:90:91:bc:69:
ad:0e:eb:42:f1:f1:20:c6:c1:ed:d8:97:5b:a5:17:16:ca:df:
5c:e8:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:06 2025 by rpki-client