Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier: EV/NDQaQHZO34v7aBZuU/w3o+BHofpupRJT/fFOWbCo=
Subject key identifier: E8:8B:99:D5:DD:15:72:F6:8B:3C:2F:6E:A4:F6:F7:F2:15:2A:D6:0D
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer: /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial: 0199FE46B4AA2DC53E564CE896155C0559B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number: 11C9
Signing time: Sun 19 Oct 2025 21:01:10 +0000
Manifest this update: Sun 19 Oct 2025 21:01:10 +0000
Manifest next update: Mon 20 Oct 2025 21:01:10 +0000
Files and hashes: 1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: PHxSqdCoOKNE3Z3CrdOEBeUCr/7d7WCWz69H0LPNGX8=)
2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b4:aa:2d:c5:3e:56:4c:e8:96:15:5c:05:59:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Validity
Not Before: Oct 19 21:01:10 2025 GMT
Not After : Oct 20 21:01:10 2025 GMT
Subject: CN=e88b99d5dd1572f68b3c2f6ea4f6f7f2152ad60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:56:44:70:8d:49:93:68:9d:6a:9e:ad:b1:
02:12:16:15:7a:83:f8:4f:17:50:ae:4e:c1:52:72:
4a:5b:33:43:e9:07:3e:65:59:b2:7f:7a:b5:6d:e2:
93:b9:2c:ee:61:ff:7e:2a:7e:f3:da:33:70:c2:76:
d1:40:dc:d1:8a:8c:2d:10:5d:96:7f:ee:4d:75:fa:
98:2f:1b:af:a2:67:3d:8a:f3:0d:34:3e:f3:f0:b2:
c8:d7:65:9c:f4:33:43:36:7a:b8:9b:b2:71:56:fd:
72:79:b6:03:00:7c:46:84:2c:26:e6:b5:f9:00:1c:
14:ea:cd:3b:6f:a4:23:c3:10:86:28:d1:05:df:81:
ff:d0:29:fc:96:2f:a5:91:f4:38:f8:16:00:b0:b1:
ab:7a:1a:4c:b3:17:fc:3e:26:34:09:83:eb:18:77:
4e:03:22:b1:a2:eb:91:9f:d8:f8:da:5a:13:43:b6:
f9:8e:1d:66:6e:16:78:73:14:cd:32:e8:02:15:f7:
88:06:bc:e3:5f:97:9e:06:62:03:7f:6a:fa:0f:f3:
6c:cb:3a:49:a0:4c:2d:d3:1f:86:ed:06:29:ee:c3:
2f:48:34:2d:54:39:eb:3d:71:01:86:61:0f:cc:4a:
4b:59:df:8e:6f:46:53:80:d0:5a:9d:23:ff:bf:cd:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8B:99:D5:DD:15:72:F6:8B:3C:2F:6E:A4:F6:F7:F2:15:2A:D6:0D
X509v3 Authority Key Identifier:
keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:74:38:23:84:d4:a9:5d:a7:45:91:5f:54:23:48:24:6a:cc:
be:a2:f0:f4:7d:e0:e7:63:33:d0:a6:94:1f:22:a9:22:5f:b5:
f2:45:e2:9e:0e:6a:ba:83:8c:3e:60:cb:fc:e6:bc:58:66:64:
01:1e:5e:97:25:b0:4e:7e:be:94:04:b0:95:35:0f:da:c0:97:
65:90:29:5c:b3:a7:7b:79:13:a4:b7:72:cd:f3:0b:73:14:03:
8f:1c:7d:67:88:dc:8e:3b:ce:d5:21:0a:38:ed:9f:fc:43:f0:
54:5c:d0:dd:f0:19:8a:67:b9:de:75:f1:a4:e5:da:7f:c8:a1:
a5:10:63:d9:ab:a5:88:c3:15:ee:e0:30:a0:01:e6:e3:05:df:
03:9a:c3:9c:13:98:bd:cd:c6:3c:3a:35:14:12:5b:6b:48:a9:
5f:54:6a:6f:d6:38:eb:47:40:8b:fe:ba:fe:ba:d3:1b:58:75:
e9:62:5f:ef:50:b5:85:11:ae:16:7a:db:c7:ae:a5:74:49:da:
72:07:49:99:34:08:f0:9d:35:3e:49:52:70:96:06:2a:d8:27:
bf:b7:ef:ad:ed:58:46:fb:38:a3:41:8d:0a:bc:ca:c1:62:e4:
c3:91:db:2c:36:c1:f5:15:c8:a0:ed:f3:b4:73:1d:03:1e:f5:
70:48:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:32 2025 by rpki-client