Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: KuR2wCdHa2bLdxpmI3cJ7vakQQFsFA7hITultyFlhzM=
Subject key identifier: 01:20:BC:FF:48:27:D6:48:1F:C6:8D:58:72:D5:E8:52:8B:08:B8:E5
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 0199FC21D3AFF7EFD46F283DD9741A4C15ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 138B
Signing time: Sun 19 Oct 2025 11:01:39 +0000
Manifest this update: Sun 19 Oct 2025 11:01:39 +0000
Manifest next update: Mon 20 Oct 2025 11:01:39 +0000
Files and hashes: 1: D3bRMlTDClBFr3S51rSxiY9VG9A.roa (hash: aR3n5btl/hz9D4qsdHX0kbRtCNTOPvoaLGVTTlP76Qo=)
2: ZxguzW17xFrUP53FIAJUfjkeqvQ.roa (hash: Sn/df7xibUqHylpF6Ngt+9h48Sxd84uF3fpZ9SuTgf8=)
3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: uMmH/I6Gro7rAWy71/TkiwnkB2RpcWekSHfz979Vo90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:d3:af:f7:ef:d4:6f:28:3d:d9:74:1a:4c:15:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Oct 19 11:01:39 2025 GMT
Not After : Oct 20 11:01:39 2025 GMT
Subject: CN=0120bcff4827d6481fc68d5872d5e8528b08b8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:07:30:12:39:66:43:0c:6e:a5:1c:bf:bd:
47:44:d1:a5:3a:83:4a:cb:a6:41:af:5a:8d:c3:15:
7e:aa:86:8c:47:e0:e1:42:b3:31:f8:4c:2a:9e:ff:
44:3f:ec:93:27:05:fc:ed:d8:2a:a5:47:7b:c7:00:
48:cb:1c:4b:7a:d0:67:aa:3e:c7:84:68:8b:15:cc:
a0:c0:27:8f:13:20:08:83:d6:2a:0d:65:9e:b4:32:
06:f7:ce:c2:d7:7e:1d:2f:15:5b:e9:2a:ab:4b:49:
2c:f4:7c:9c:b8:1f:53:9e:7e:ac:54:9a:de:dc:ca:
b7:e6:a3:a6:68:e4:7c:3e:36:d3:d8:c5:74:b1:7a:
91:2e:3c:4c:4a:ba:66:c6:45:88:ce:b7:15:7a:43:
9b:ff:78:65:bd:c0:fa:51:32:69:35:60:97:fb:89:
90:05:61:d2:bb:fa:3c:f0:da:02:c6:a5:db:57:38:
1f:0e:77:ba:0e:cc:a1:fe:63:91:f0:3d:2f:c1:23:
19:7d:31:1d:76:07:97:1f:6f:97:9b:74:e9:67:7b:
14:d7:3b:3e:fb:89:57:89:d8:4d:7b:56:1c:95:a1:
17:fb:06:99:1c:12:30:a7:a7:5c:04:da:7b:5e:e4:
38:a8:e4:ec:8c:86:5b:3e:c9:ae:e2:e8:00:2e:83:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:BC:FF:48:27:D6:48:1F:C6:8D:58:72:D5:E8:52:8B:08:B8:E5
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:62:2c:9b:5a:5e:2c:8b:88:d9:3b:20:8a:55:7c:04:bf:e8:
e3:aa:94:c2:a5:8e:e2:0f:cc:5f:47:db:12:1f:2e:8e:55:2e:
81:70:86:47:45:ec:ad:18:a1:e3:ec:dc:fb:91:ff:c1:1e:4c:
a2:3e:74:b2:21:2b:67:ea:b6:47:36:e1:44:1c:e0:b8:6f:38:
cf:4d:80:4a:c9:fd:95:ad:4a:06:af:2e:e5:0f:ce:09:e2:ba:
c9:76:45:89:c7:74:f4:74:0e:fc:df:09:32:1a:45:6b:8e:a0:
f7:ce:60:a2:fd:d5:be:e4:38:ce:98:a5:e8:f9:8b:e5:80:36:
f0:e7:44:62:69:0f:ed:c4:f4:32:42:81:04:a4:58:83:2a:f5:
45:c2:06:94:45:a6:af:8c:44:69:69:cf:40:f1:9a:a8:a0:ee:
b8:cc:8c:67:0e:b4:77:f4:de:da:b0:4b:41:22:38:c3:d3:e5:
7f:4e:2b:08:30:05:8a:f9:33:af:bc:b3:c5:74:23:11:0a:81:
cb:48:6c:f6:54:d0:9d:3e:6b:f1:43:27:8b:35:d2:97:25:9b:
fa:8e:0d:8c:0e:b9:de:bf:ff:ea:99:c1:96:24:da:3f:22:cd:
94:20:14:ee:35:8e:72:34:b0:93:c9:44:bc:de:87:3c:f8:0f:
e1:97:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:49 2025 by rpki-client