Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: 0dhstoiEz6deGWY7t1MUv3c9X2//dGpAjoNLYarentQ=
Subject key identifier: D2:B6:57:91:EB:71:36:F7:E1:68:60:22:C2:60:3D:82:30:F5:84:0E
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 0198D47277102D0DAD9E63B6BC4023AAE12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 072D
Signing time: Sat 23 Aug 2025 01:02:08 +0000
Manifest this update: Sat 23 Aug 2025 01:02:08 +0000
Manifest next update: Sun 24 Aug 2025 01:02:08 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: Yxt8PH94tZRHbJSDFdNMdanr6SJkcseoZC/ApXbGmYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:77:10:2d:0d:ad:9e:63:b6:bc:40:23:aa:e1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Aug 23 01:02:08 2025 GMT
Not After : Aug 24 01:02:08 2025 GMT
Subject: CN=d2b65791eb7136f7e1686022c2603d8230f5840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:f1:11:9d:09:cb:01:0a:a0:dc:0b:c9:66:
81:36:58:74:1c:c7:d5:69:c7:1c:77:0f:7c:51:2f:
54:43:dc:8c:79:70:a8:e1:7b:eb:7e:ac:9c:96:7e:
76:f3:eb:4a:6e:14:ba:47:07:d7:66:5e:cd:bf:80:
51:9b:63:45:f8:68:de:1a:e4:2f:02:65:c8:74:61:
70:9f:8b:ab:4b:0d:a0:e0:c3:8c:3c:61:f0:ae:9c:
39:38:40:c9:f2:a9:4c:3d:1d:e1:aa:d5:f7:4d:64:
39:67:79:11:38:24:6a:d7:5c:3b:52:71:11:55:8a:
0f:0c:45:91:46:33:ca:33:6b:7f:22:ce:1a:49:1c:
f1:46:e8:90:fe:f2:aa:30:bd:a8:12:60:43:40:07:
48:da:06:d4:47:d3:26:08:43:2c:3e:a6:a8:ed:a7:
7d:b0:cf:1d:12:1e:a9:26:43:aa:a0:3d:2f:0e:51:
9a:e8:47:d1:28:7f:87:e1:66:11:de:91:b1:89:d6:
aa:af:45:6b:ca:ed:6a:53:1f:99:9b:3f:5d:7f:ea:
83:b9:3f:ee:3b:e4:25:a6:d7:86:ab:9a:46:db:b8:
27:35:04:dc:3b:92:dc:85:e5:9f:50:6f:a0:e5:cd:
f3:26:36:31:33:aa:70:11:81:96:64:7b:a4:c8:05:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B6:57:91:EB:71:36:F7:E1:68:60:22:C2:60:3D:82:30:F5:84:0E
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3f:d6:57:09:87:25:3e:5c:8e:df:e6:64:4a:2a:0b:07:8c:
97:6e:1a:7f:93:b9:b7:b1:31:2a:90:8d:37:18:53:3f:2e:12:
2a:0b:8f:29:4f:c2:2b:40:d1:b0:84:32:7e:df:27:df:5a:08:
0c:73:8d:6c:cd:63:94:d8:4d:e0:01:9e:4d:21:71:f8:47:39:
40:3a:18:17:84:bf:f4:a9:74:df:5d:da:93:50:9f:3d:df:66:
e3:f4:86:10:f6:db:f1:13:ee:16:9a:3a:ec:d5:a2:38:55:fb:
74:35:3e:8d:59:c2:78:03:7d:4b:01:01:14:19:c5:77:17:f9:
3e:e9:84:48:ac:f2:f9:05:15:42:45:92:1a:53:81:b2:4b:48:
74:37:99:d8:ba:17:81:66:fc:3d:b8:33:4a:42:32:dc:57:d2:
09:14:17:b0:17:b5:ba:f7:d9:44:a6:74:52:a5:e8:9f:1a:25:
12:4f:d3:00:01:0b:6e:61:54:f2:c0:5d:91:ee:f8:2c:07:49:
81:3e:32:18:aa:d2:d5:92:87:01:db:04:35:d8:62:bd:39:e1:
b2:39:dc:fa:2b:49:fb:9d:a0:de:8d:35:f1:97:f3:f2:50:13:
12:46:73:35:e4:04:a6:24:39:02:66:3b:e2:62:e2:9d:a0:81:
70:ea:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:31 2025 by rpki-client