
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: Qh59C/4Q4P2pNmtdtAQ3AVm/6qaj/4RGesrSYs9oRyU=
Subject key identifier: E6:AF:95:6B:5D:00:DD:9F:1D:0E:92:6C:59:AA:BF:B3:83:21:79:51
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 0198D54E53B28217FD92222F3DF0F8D4E591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 15F9
Signing time: Sat 23 Aug 2025 05:02:16 +0000
Manifest this update: Sat 23 Aug 2025 05:02:16 +0000
Manifest next update: Sun 24 Aug 2025 05:02:16 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: w0rV5pe3Ly2IzQ0DHe2HkKFbNQXFb4eiZGf96if/mhM=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:53:b2:82:17:fd:92:22:2f:3d:f0:f8:d4:e5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Aug 23 05:02:16 2025 GMT
Not After : Aug 24 05:02:16 2025 GMT
Subject: CN=e6af956b5d00dd9f1d0e926c59aabfb383217951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:aa:e8:41:f3:5c:e2:85:d9:31:97:34:b1:
33:9b:db:bc:ba:b6:0a:b5:61:3b:5f:3f:08:dd:bc:
50:30:b0:d9:a1:ca:4c:90:ef:33:ce:5a:7e:13:d4:
0e:5b:49:bf:fd:aa:6b:dd:1a:6f:c1:d2:97:65:5f:
fb:ab:d3:67:c3:14:38:51:98:c3:c9:b1:1c:31:d6:
d5:e6:dd:fb:cf:ae:82:d8:88:4d:f9:ba:09:68:80:
53:40:38:59:f6:79:34:c5:f6:37:ba:0c:11:ba:ff:
bb:26:f8:b0:c5:01:7b:79:23:12:94:ae:ff:0f:e0:
57:94:37:23:5d:fa:1a:56:6a:38:18:c8:9a:79:e0:
44:62:75:4d:3d:6f:b9:e7:d3:69:af:d8:b0:90:4c:
56:e0:ac:6a:7e:58:b1:28:0f:cf:78:ef:66:7c:c2:
c9:10:43:22:46:23:8f:7e:50:63:bf:30:44:e8:99:
b5:91:f7:28:fc:20:f7:5b:5e:80:46:cb:3e:da:a6:
39:40:72:83:09:2c:40:04:ae:0a:3c:a6:df:1d:77:
da:09:63:60:e7:21:e7:5f:0a:fe:13:35:92:f0:9f:
49:da:b0:cf:bb:4f:61:88:60:bd:77:b5:15:3a:21:
55:16:59:49:b3:88:0f:c7:ce:08:0d:8c:97:82:0a:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:95:6B:5D:00:DD:9F:1D:0E:92:6C:59:AA:BF:B3:83:21:79:51
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:71:33:d7:d0:08:de:d1:eb:35:74:21:c2:c2:e7:0f:65:25:
08:9b:78:39:01:36:96:cd:dd:04:37:09:70:50:83:0d:2f:f7:
09:a2:d9:8a:71:b6:8d:c4:52:9d:cd:69:c2:7e:be:69:20:c0:
15:4d:e0:87:ff:12:32:cf:8e:12:f6:7e:b4:44:15:be:95:3a:
14:67:97:be:89:51:09:3e:a4:a4:bb:83:d0:d8:df:5c:3f:51:
06:bb:22:05:ab:c2:07:bc:d8:4d:a4:97:1e:88:77:56:cc:14:
2e:77:34:fe:d7:ff:d1:7c:d9:f0:56:31:bd:9d:5d:aa:0e:ab:
64:4f:e1:d0:62:bb:e9:53:04:b9:54:56:f4:f5:f5:ca:34:8c:
fe:a2:2f:49:7d:17:8e:9c:8e:56:83:85:43:a9:db:b0:4e:8f:
5f:26:37:6e:ae:78:5f:cb:94:6c:83:9e:bd:5a:9a:0d:51:7e:
13:7d:51:4c:d8:9a:71:2f:98:94:18:b2:5b:f6:59:9d:b2:b2:
16:28:73:a8:4b:91:4f:af:b9:43:b4:0b:c0:e2:32:5a:4c:41:
c2:04:d9:e8:fe:c3:d7:3f:5c:70:47:84:88:3e:d5:7a:10:d1:
46:4c:a3:76:2b:d3:30:25:39:0f:87:bf:8d:e7:d5:49:53:ae:
88:7c:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:52 2025 by rpki-client