Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: bBqyWeYxvbwqeKi7e1GQEJJkjHlWvpuniGtc455ClYQ=
Subject key identifier: 85:40:BF:60:54:85:B0:00:0D:C3:7C:A8:92:85:1F:5E:33:99:84:E7
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 0198D697FF34CFCF8AAF1AB3EBCCC21BFAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 12F3
Signing time: Sat 23 Aug 2025 11:02:21 +0000
Manifest this update: Sat 23 Aug 2025 11:02:21 +0000
Manifest next update: Sun 24 Aug 2025 11:02:21 +0000
Files and hashes: 1: D3bRMlTDClBFr3S51rSxiY9VG9A.roa (hash: aR3n5btl/hz9D4qsdHX0kbRtCNTOPvoaLGVTTlP76Qo=)
2: ZxguzW17xFrUP53FIAJUfjkeqvQ.roa (hash: Sn/df7xibUqHylpF6Ngt+9h48Sxd84uF3fpZ9SuTgf8=)
3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: CuztKXZX9FX7ZIy9IiAfvisPUKbbijkSMRkwMX5V48Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ff:34:cf:cf:8a:af:1a:b3:eb:cc:c2:1b:fa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Aug 23 11:02:21 2025 GMT
Not After : Aug 24 11:02:21 2025 GMT
Subject: CN=8540bf605485b0000dc37ca892851f5e339984e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:89:04:9e:b7:24:0d:a6:4f:48:25:9e:80:
ed:c9:48:67:73:49:b6:e8:55:03:c0:bc:67:f1:72:
1f:6a:fe:b5:da:7e:fa:9f:5b:4b:9b:c9:6c:cd:c1:
84:b6:02:0c:87:2a:37:8d:5f:27:ac:79:5e:5c:1d:
45:c3:89:e9:17:55:ee:26:a5:95:3c:9d:2e:54:74:
82:22:78:03:fe:9e:4b:77:1f:f3:0a:d2:47:31:e7:
7f:f8:18:a1:fb:0c:c2:af:24:dd:b1:de:e8:fe:3d:
55:53:b3:fb:78:45:28:09:73:54:c9:f0:7b:09:e3:
93:c9:fe:88:f3:a8:e8:59:2e:da:8b:f4:0c:a4:84:
27:bb:44:39:ca:03:10:94:f9:c1:71:83:bc:0f:83:
67:d5:f5:e6:52:19:42:55:9d:a9:00:f1:ad:c1:10:
d6:10:77:bf:07:8d:54:53:c2:0d:45:dc:a6:eb:8c:
fd:21:fb:45:ac:2b:63:7a:99:96:9f:18:16:0e:73:
cc:ea:25:9d:9d:18:3f:e3:52:4d:2a:e4:57:74:38:
0d:34:82:1d:81:17:5c:34:88:87:d9:c6:4d:9f:e8:
9f:89:35:34:4f:5a:99:6c:23:5d:d2:20:b1:c9:a0:
3b:4b:f6:a1:c8:08:88:e6:d1:ad:c1:02:8a:22:93:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:40:BF:60:54:85:B0:00:0D:C3:7C:A8:92:85:1F:5E:33:99:84:E7
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:12:0a:15:a0:2f:6b:89:81:ac:1f:77:5d:00:7f:e7:b1:eb:
c8:4c:e2:5e:71:45:66:31:3e:16:e6:a8:09:76:1d:7e:f3:97:
f8:e9:31:20:2e:e3:5c:d7:46:8a:05:31:f4:6e:0d:fc:b3:1a:
fe:77:36:b7:55:0f:e1:d9:2f:66:99:24:ed:b0:d6:9f:e5:41:
5d:62:d0:c9:16:83:51:db:c0:94:08:6d:aa:e2:6b:0c:20:18:
b3:39:be:ee:71:e7:d3:19:91:bc:90:ca:7a:a0:7f:2b:fd:5e:
e2:46:c0:bf:e1:df:69:dd:b6:a7:14:c8:62:63:42:58:08:1f:
fd:3c:af:5b:ad:b6:08:42:00:1e:db:f6:a6:ac:4b:89:4c:91:
31:51:45:1d:6b:f8:7e:d5:6d:5f:0b:cb:9e:e2:cd:84:72:02:
5e:91:fb:77:f8:1c:4c:c6:a5:0c:32:9d:61:f1:83:a2:26:28:
98:13:11:e4:61:36:74:66:89:2d:17:fc:c4:03:5a:49:80:22:
87:9a:b4:09:a4:5f:e4:6c:ae:cb:6a:72:ac:31:53:04:6e:79:
27:bb:50:be:4f:e5:3a:04:36:f2:31:b0:8f:5c:68:99:b3:c6:
ea:92:6c:69:da:b8:41:b8:db:51:85:fc:86:ce:76:f0:73:98:
69:fe:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:13 2025 by rpki-client