Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: So+Hyd1N7jWp1qXCWVZWXWhBiargsDlnjUZFqlk3zEc=
Subject key identifier: A1:30:A2:61:D0:BD:DB:88:F0:D3:C9:C0:61:78:D8:A6:80:9F:D7:93
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 0198D4DFE250CA1DE01188DD93D1163800D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 137F
Signing time: Sat 23 Aug 2025 03:01:38 +0000
Manifest this update: Sat 23 Aug 2025 03:01:38 +0000
Manifest next update: Sun 24 Aug 2025 03:01:38 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: zyc+abQUjBU0gyD51eBOGjxXRfRYlYwicmGW+J9s+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e2:50:ca:1d:e0:11:88:dd:93:d1:16:38:00:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Aug 23 03:01:38 2025 GMT
Not After : Aug 24 03:01:38 2025 GMT
Subject: CN=a130a261d0bddb88f0d3c9c06178d8a6809fd793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:0a:f2:28:e8:6f:6d:1c:23:79:9a:53:ca:
43:1a:cb:da:1c:c2:9c:08:17:35:55:b0:b7:d0:e0:
c7:13:94:f3:89:47:58:23:01:f8:14:17:aa:83:6d:
e7:56:43:09:1d:c9:5d:16:5f:ee:0b:46:fa:91:6a:
23:21:4d:e9:63:1e:f7:b7:ed:57:45:ff:52:9d:59:
ec:e3:36:cf:2c:8d:b3:13:9a:d5:a9:5d:3b:7b:b7:
b3:cf:c7:e9:ea:74:cb:2a:86:3e:78:a8:5e:07:8d:
03:2a:e4:01:6c:d8:a5:6e:1e:d5:cd:66:51:2f:38:
fe:5e:e1:5f:0c:ee:e0:24:ed:53:f0:3e:29:b2:c3:
0d:eb:3a:4e:3f:24:32:f1:a0:24:41:cd:4d:47:5c:
5d:d5:f7:02:96:16:c0:29:c3:11:77:0d:79:aa:8d:
0d:17:f5:65:db:2f:88:89:5d:d7:78:eb:32:31:6c:
5a:a4:db:48:e6:0c:fd:ae:90:04:1d:fc:3a:f1:25:
b3:8e:db:02:58:c7:15:4c:a8:5c:52:c4:f3:a0:ae:
f9:be:1a:b9:74:d8:ce:66:7e:1e:6e:71:9b:c0:5f:
bb:bb:46:71:e7:2e:4d:c7:26:03:c8:f6:0f:37:6e:
9d:03:2c:1c:90:e8:6d:7c:37:ba:60:1f:8f:ac:aa:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:30:A2:61:D0:BD:DB:88:F0:D3:C9:C0:61:78:D8:A6:80:9F:D7:93
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:47:9c:33:44:ce:5d:55:1b:5e:52:a1:b3:fe:78:84:97:37:
87:cd:92:df:ed:2f:da:3a:79:a2:7a:1f:4b:df:0a:dc:2f:ac:
22:9d:45:66:a4:00:02:1b:79:4e:dc:ca:f9:de:dc:00:7e:13:
cb:29:50:95:3b:c3:c4:9c:6f:f1:25:dd:63:7c:79:c5:e1:ca:
a4:92:e4:02:72:35:da:48:19:ff:ff:8c:f2:39:66:64:2e:de:
c4:d1:26:b3:9e:37:e3:69:6b:4a:3f:34:b3:d8:41:63:f4:d6:
74:b1:fe:cc:cb:48:cd:53:bd:87:c0:61:95:95:4a:af:48:42:
09:39:da:73:4f:55:61:38:04:54:4b:c6:73:fc:a5:b3:40:3a:
a1:50:a3:a3:c7:8d:82:d2:2c:b9:19:9b:3e:a8:c7:9e:0e:24:
01:7e:be:36:12:68:da:de:0c:43:e5:a2:5e:8b:89:d2:a8:f8:
e3:6c:6c:8a:16:42:e9:a5:28:b9:81:64:94:8d:be:11:f4:42:
0b:b5:56:d9:cd:1c:b3:3a:20:e4:1e:08:4e:14:90:f9:a2:5c:
33:cd:e1:51:8b:6d:a6:b9:67:16:1b:91:39:67:ec:13:8e:3f:
3a:d0:a5:da:81:22:d5:7d:6c:f2:8c:75:d1:6a:0d:3d:aa:f1:
97:08:d2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:05 2025 by rpki-client