Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: LH2NVV8UZa9PaEblJB9DjC87LtE391epzDE1oB+DBts=
Subject key identifier: A2:B8:70:E8:70:86:31:51:24:F0:D4:C4:6D:45:92:3A:9B:26:6C:CC
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 0198D65F68DA073B863AF7353DC0DCD6D4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0C52
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: QSbgseuo4yfXl956xwYKIzoM4aEabcD6OJMOolPclag=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:68:da:07:3b:86:3a:f7:35:3d:c0:dc:d6:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=a2b870e87086315124f0d4c46d45923a9b266ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:af:7f:bf:ab:58:86:be:32:d2:67:f9:e7:
45:3d:73:df:d5:6a:d9:68:e2:1f:0f:8e:b3:73:d9:
16:0e:e0:31:4a:d0:86:14:c3:8d:17:33:aa:b1:da:
5a:cc:7f:83:5d:8f:c8:0e:50:85:9f:62:a3:03:c1:
5e:49:69:e0:f3:0b:54:80:4c:63:f2:1f:84:34:e7:
8a:ba:d5:9f:af:0b:14:51:8d:2f:2c:50:1f:d6:4d:
eb:04:d0:67:74:bd:33:a7:70:4b:4f:fb:f4:8a:7f:
20:96:5f:3b:0c:bb:fc:26:fe:e8:64:54:c8:24:9f:
dc:94:69:27:32:d2:5e:2c:61:17:7c:2d:5e:55:f7:
af:5e:48:aa:13:7e:ea:7f:e7:03:08:2b:60:32:a2:
75:8f:52:11:c6:8f:e5:f4:1a:c7:05:db:32:a2:f4:
8c:7b:1d:8b:75:4f:d7:4a:49:f1:4d:62:52:2e:3c:
70:ab:06:c0:56:71:22:9b:be:af:47:3f:15:2c:96:
52:26:c3:88:94:fb:9d:2f:22:77:84:07:ae:4d:6a:
38:37:90:41:31:d0:5a:ca:78:18:64:14:6c:d3:1f:
7c:6e:72:80:48:7f:d1:25:43:c6:6c:ff:96:06:a7:
09:3b:5e:4a:c2:be:fc:b4:e3:52:79:d0:59:50:bf:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:70:E8:70:86:31:51:24:F0:D4:C4:6D:45:92:3A:9B:26:6C:CC
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:e1:d2:46:4c:3d:df:3f:61:e0:9e:72:66:fc:db:e9:da:
29:ca:af:02:fb:dc:29:8e:aa:bc:93:5b:5b:ed:72:cd:bd:83:
fd:45:9c:7d:32:dd:91:c8:83:f5:59:77:ab:3b:ce:dd:d0:57:
f2:62:6d:62:fd:b5:dd:a6:48:77:c4:32:b9:f1:bf:5d:56:ed:
06:1f:8c:c2:55:21:6f:b9:27:42:7f:22:e2:88:98:11:90:65:
61:c9:37:e4:26:fe:c7:1f:e7:e8:2e:ad:bb:7e:64:63:df:64:
57:66:5a:86:ca:7c:ac:aa:5f:ad:16:e7:29:76:ff:e3:43:6b:
72:74:d9:33:08:cc:ba:d3:fe:ed:51:21:16:9e:62:fd:15:1c:
57:08:36:8b:76:89:85:29:26:67:c9:e8:af:e9:ca:34:3c:45:
8f:91:8e:b7:9d:56:e0:f1:a7:ce:b2:39:29:3b:13:28:24:62:
3b:aa:5e:fa:2f:9f:a4:33:d2:c1:9e:5e:91:b9:55:fc:f8:51:
f6:3d:03:c2:94:78:29:17:b1:31:54:80:0d:14:1e:60:6c:6d:
a5:0e:23:d6:4f:5e:70:f7:a7:1d:d3:c0:1c:7d:2a:b8:16:76:
cc:ab:f6:6f:99:7e:8b:8c:8e:c3:d3:27:40:b0:a4:d7:43:4f:
bc:01:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:01 2025 by rpki-client