Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: ymXgevSIiUzJnt5R957k6/ygssatLGsSZ3YaxncvP4s=
Subject key identifier: DC:F0:17:74:AC:01:C8:DA:0F:90:15:76:0F:A1:81:81:51:1A:F1:AD
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 0198D5F1D5086FDCA8858C060D85E446FA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 085D
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: oYLeqje72mrIZpq/i/9qasdcOn8YCIYAPYjhM06Mn0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d5:08:6f:dc:a8:85:8c:06:0d:85:e4:46:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=dcf01774ac01c8da0f9015760fa18181511af1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:42:35:25:01:ec:4d:e6:87:04:d7:a9:3f:
d4:33:67:66:4e:a2:e9:85:b1:f4:5c:d3:59:2e:83:
13:d7:74:9b:57:65:a1:6b:03:6c:3e:16:e2:bc:11:
b0:a9:b3:12:75:71:f3:2c:c3:dc:c5:eb:2f:21:69:
f8:ad:a3:70:e6:81:5d:11:88:6a:d6:fe:1a:29:61:
fa:50:38:ba:bc:fd:9a:49:5f:41:83:49:a4:e5:97:
ab:10:7b:00:d1:c2:d9:2b:f4:70:eb:f9:5c:5a:7e:
ec:89:39:75:cd:f6:16:f8:ba:64:8e:86:12:9e:30:
ab:1c:56:6c:dd:dd:09:17:35:23:6d:61:b5:b5:9c:
8b:ea:1f:11:9d:88:ff:d6:34:3b:b4:bc:07:cf:c4:
f6:2b:97:8f:5f:6d:93:87:94:b0:67:c0:29:db:94:
97:f8:fc:47:65:14:10:95:84:56:d4:44:35:53:5a:
9a:be:fb:51:56:ea:08:8b:6e:32:ed:ee:6d:2f:dd:
b3:fb:56:8c:2c:d6:c3:42:20:fc:72:f5:d7:20:be:
c7:42:7a:d8:de:04:88:10:de:97:5b:c6:45:08:bb:
49:64:06:ad:fa:c5:bc:3a:df:be:f1:8d:5c:d4:bd:
64:19:61:3d:8a:52:ba:69:df:09:30:63:1d:99:a5:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:17:74:AC:01:C8:DA:0F:90:15:76:0F:A1:81:81:51:1A:F1:AD
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:da:11:05:ab:45:2a:77:cd:8c:e6:58:f8:3c:d2:0a:44:aa:
d4:b4:4d:16:be:57:cc:c9:1e:5b:fa:1b:b2:d5:02:38:a9:85:
5e:80:7c:07:9e:c7:b5:d8:4d:42:24:ae:22:56:3d:c5:1b:ce:
99:7a:ac:cc:1d:5e:dc:9a:29:3f:8c:d5:85:88:1c:77:f3:4f:
30:33:35:cd:d6:18:29:9c:a6:64:e4:dd:6e:af:fa:82:28:09:
11:00:a0:d9:3e:f9:b2:9b:47:3c:d7:06:36:07:db:e0:a7:68:
90:5a:d8:97:6d:0c:16:e7:1a:4f:50:b3:76:e9:a4:bb:0c:44:
9a:61:fe:ca:a1:19:cd:c8:37:d9:e7:77:f5:cc:5a:c9:27:e7:
50:f6:2d:6c:b4:2f:3f:9c:c8:cd:33:9a:b7:20:db:09:49:5c:
5e:00:57:4a:25:0a:00:14:d4:78:24:9d:e0:43:8b:fa:73:ff:
d1:6b:51:7d:a9:bc:0a:d2:26:0f:24:6c:3a:c4:b8:4a:c9:5d:
4a:14:03:e1:b8:30:1e:29:d3:19:9b:0e:38:ed:d9:9f:bd:d7:
7d:bc:85:64:4f:e4:70:bd:a1:78:0a:88:cf:af:ee:b0:59:b3:
5d:98:5d:6c:1e:8e:fe:b7:39:3e:5f:f8:1a:13:e9:11:55:92:
44:4d:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:29 2025 by rpki-client