Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: WYevDzRoCiLeeHHNrynRjZxzlbv82t40BSd+YX3tWls=
Subject key identifier: F0:F5:F6:61:B6:53:09:6F:C2:D1:E2:E4:9A:BA:C1:1E:61:F3:D8:5F
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 0197B8210959A78DC3415A50668F662989ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 147B
Signing time: Sat 28 Jun 2025 20:01:02 +0000
Manifest this update: Sat 28 Jun 2025 20:01:02 +0000
Manifest next update: Sun 29 Jun 2025 20:01:02 +0000
Files and hashes: 1: U-9gs6-HPp-63tFVTgK5YJ7Vtx0.roa (hash: is1qZnviSeshx9o2Nm8hFCS4enc7GdrzL/0sgsJwTiY=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: nGBIA1EPz5t1fuJ7xHs7N7Lrmz1CKmI+hUe29eCQECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:09:59:a7:8d:c3:41:5a:50:66:8f:66:29:89:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jun 28 20:01:02 2025 GMT
Not After : Jun 29 20:01:02 2025 GMT
Subject: CN=f0f5f661b653096fc2d1e2e49abac11e61f3d85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:44:f7:00:1d:23:c6:e6:22:b6:92:bd:bd:
c0:c4:d8:d7:84:d1:7d:4c:ed:51:e6:bb:05:ad:9f:
ee:de:f9:b8:7a:14:51:e5:12:e1:f3:fb:c8:ed:93:
47:61:78:d6:22:54:c3:4e:5d:bf:06:8c:15:15:c0:
ff:15:8a:7e:97:ef:03:7d:0d:39:c5:40:cd:18:c4:
9f:84:52:5b:80:e0:8e:97:aa:d2:7c:02:c6:61:49:
e0:33:c5:7e:2b:d3:12:fc:c0:82:b9:22:f4:60:4c:
b1:e3:2f:d6:11:3d:85:b4:55:18:ae:6b:57:d4:11:
5b:c4:86:73:59:d4:95:6b:db:76:8e:fc:8f:bd:dc:
6f:99:83:22:e3:ce:2a:b1:d3:16:18:8a:1a:9e:49:
68:e2:24:8b:2e:37:81:e5:af:46:06:86:db:b3:ef:
51:65:9d:b3:d5:56:03:15:01:02:77:7a:05:06:2d:
aa:ed:82:59:ec:1a:34:47:fe:9a:b3:d2:3f:99:3b:
48:03:7e:4f:db:6b:3a:5e:6e:5f:8d:3f:94:7b:8b:
ee:02:f1:35:60:4c:93:aa:e7:ab:22:a8:aa:13:d0:
58:90:82:5c:55:0b:56:65:81:8b:5d:68:e0:4a:ed:
e3:13:52:d6:15:6b:2c:77:44:e1:d9:47:04:49:ed:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:F6:61:B6:53:09:6F:C2:D1:E2:E4:9A:BA:C1:1E:61:F3:D8:5F
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:a6:fa:16:ff:07:47:44:6b:8d:c1:81:54:b2:15:28:5e:0b:
b1:fb:01:73:07:d1:fc:eb:6b:90:2f:d0:60:0a:c0:28:93:5d:
34:d1:84:f2:66:57:22:a2:b7:6c:18:15:30:12:c7:08:58:7b:
fc:92:c4:37:c7:8d:f9:55:3f:4f:1d:f8:8d:12:30:e1:b5:16:
e9:cf:05:58:b3:8d:22:e6:67:74:15:5c:45:f4:79:3f:6f:e4:
e3:e6:65:33:37:2b:a9:c8:8a:c7:3b:45:f2:d1:70:2e:31:7a:
2d:9b:64:9c:c2:f0:7d:cb:dd:91:25:92:63:48:c4:ec:06:2c:
11:1e:2e:05:63:ea:25:14:f1:88:d1:97:65:2a:d1:59:35:c3:
b5:c8:ed:6f:24:60:8f:3a:ce:6b:f2:70:1f:77:99:63:54:27:
7a:00:6e:e0:67:b1:a1:53:13:18:5d:bf:06:e8:b4:2c:8d:41:
15:58:56:4c:d1:8d:e4:a0:db:65:ad:44:db:ba:b1:df:90:b9:
81:74:ff:4c:9d:51:a0:45:dc:35:9b:47:16:6e:aa:c2:de:23:
73:c6:51:7b:9f:c9:e2:d0:a2:a1:b4:c4:61:7e:e3:8e:88:e3:
43:64:c4:2d:52:0d:d1:5f:cc:d6:36:a7:1f:87:08:9a:7c:f2:
58:14:3e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:28 2025 by rpki-client