Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: jo8NghziyLb599rLSMgkB4MJWwubru+BwxpznKb79gM=
Subject key identifier: ED:37:69:35:9B:C0:36:5F:3D:D6:D8:E8:A1:51:B5:47:D7:BD:05:B1
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 0199FAD83191451E62943543692582A7D7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 120D
Signing time: Sun 19 Oct 2025 05:01:36 +0000
Manifest this update: Sun 19 Oct 2025 05:01:36 +0000
Manifest next update: Mon 20 Oct 2025 05:01:36 +0000
Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: OPXfixtFE6+hRMWyOEvrqy2h4gbaGbdzADRqXVYAWmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:31:91:45:1e:62:94:35:43:69:25:82:a7:d7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Oct 19 05:01:36 2025 GMT
Not After : Oct 20 05:01:36 2025 GMT
Subject: CN=ed3769359bc0365f3dd6d8e8a151b547d7bd05b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:72:01:b8:95:a2:d2:2a:00:f2:87:03:ae:
b4:ca:14:da:c4:ce:a8:1b:59:f0:66:b2:d8:57:98:
53:6f:8b:b9:51:46:2b:86:f9:5f:ae:15:8f:c9:b4:
1d:6c:ba:ac:47:80:4c:f3:53:a0:42:a8:7d:41:5f:
da:e1:ac:89:9a:ca:ac:c2:5a:d2:41:01:1b:36:20:
10:fb:3c:41:1a:89:7f:b8:06:aa:3c:62:78:ee:ca:
f6:c5:1e:56:8e:a4:1e:f6:6b:db:c5:63:42:95:41:
0e:a7:a4:bf:c2:6c:a5:19:c7:0a:ac:7a:3a:df:45:
c2:27:31:b6:c1:b5:1b:e5:37:3a:5e:d9:15:9b:13:
73:b9:a4:58:eb:0e:12:c0:61:3b:7b:52:44:5a:36:
12:88:1f:fa:7d:43:26:20:19:e6:96:c9:4f:11:bd:
a5:b7:40:0d:dc:1f:ac:d6:bf:53:b5:a1:5d:69:28:
32:bc:31:fb:ee:c3:11:d6:00:42:19:28:5b:46:84:
b1:3d:9f:ee:59:13:34:ea:0c:7d:b9:bf:98:5f:89:
30:69:20:01:6d:14:f3:0c:02:e8:40:50:4c:18:f0:
d2:4f:49:97:9f:75:6d:85:4e:a7:02:74:a1:cd:71:
aa:21:03:72:b5:5e:a0:95:21:61:68:c0:f1:0d:3c:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:37:69:35:9B:C0:36:5F:3D:D6:D8:E8:A1:51:B5:47:D7:BD:05:B1
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:4d:7d:7f:66:f9:46:d6:83:4a:0a:f6:06:57:d7:7c:82:
f8:27:27:67:c6:19:33:48:54:59:6c:23:14:f5:58:d7:23:73:
0d:6b:35:d8:f3:b5:2c:5e:da:d0:eb:59:5c:13:07:29:0a:41:
ed:6c:a2:2d:c4:70:39:b6:46:45:3d:d7:86:2b:86:b3:54:8b:
5c:74:05:9e:f4:0f:44:61:bb:57:24:98:9f:22:16:3b:68:09:
e4:51:81:7a:f0:08:89:cf:92:55:f0:7d:aa:d5:7e:03:50:9c:
3c:86:33:ca:9f:c2:d1:1d:47:7f:51:c7:e1:ea:3f:5c:b0:c9:
77:2a:40:24:f3:85:f8:67:2e:04:2a:ae:1a:53:5e:03:0a:64:
c7:39:05:59:79:59:65:3c:d6:d5:2d:91:01:f9:13:22:c7:13:
f4:a8:e0:83:6c:45:08:b0:93:90:45:b3:8a:a4:de:4d:3e:24:
28:ef:2e:74:c8:93:ab:67:5c:b8:2a:46:0d:fe:ec:fa:0d:02:
f4:a3:c5:db:5b:9a:96:9d:b1:ee:e6:b7:80:f5:40:65:b4:e7:
9d:1e:1f:66:25:d2:f8:d1:1a:23:b4:c2:16:bb:65:21:e0:5a:
6c:ae:13:49:8d:10:aa:7c:3b:3c:4c:b3:b7:4d:51:73:14:9e:
f2:bd:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:03 2025 by rpki-client