Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: I6EdeUpQmShyYCt1iwG+qpMap4Z8cSVD9Zs/CVyB00Y=
Subject key identifier: 3C:B1:FD:29:CD:E3:18:59:D3:8D:7B:72:BC:E1:CA:0F:3E:21:67:11
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 0198D4E0B4405545B813CDFD9A983619C52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 1350
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: e2SQSmJ5Uij4VeGzNgyMcf8tHqM.roa (hash: /jn7jwBSYHJhjR+sZRgi9zex0zsrMd1Ejp9Gj9O6Ons=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: eTzEn1g2VnK8/bJlcFkirBPAnMmdjx40Z023DSd8r8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b4:40:55:45:b8:13:cd:fd:9a:98:36:19:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=3cb1fd29cde31859d38d7b72bce1ca0f3e216711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:fb:55:a3:a0:e3:dd:85:0e:7a:6c:be:b5:
00:99:5d:00:c9:81:b5:4e:d4:95:cb:89:9b:ac:13:
bd:b7:21:a8:b2:3d:1a:ef:aa:37:56:9a:be:7d:66:
1e:fd:6c:3e:fc:b4:98:32:36:20:ea:b4:e7:8f:5f:
e9:7f:03:46:95:f7:9e:0a:05:2d:9e:c9:37:80:6e:
7a:fd:c9:c2:ba:e7:6f:8a:7f:fc:9a:14:9c:c4:72:
19:0d:49:41:e8:4c:57:06:2b:34:80:da:d5:9e:8b:
29:0d:c6:4d:0e:56:53:d1:90:a9:e0:6b:af:96:a7:
8f:fa:87:15:37:d7:26:8b:5f:82:81:df:20:15:67:
3f:e8:99:22:45:90:32:86:03:1a:bf:db:ef:9d:4e:
b1:40:46:a0:a6:4d:a6:6a:a4:58:d3:f3:40:ed:87:
2a:e8:f2:0c:c4:d2:76:2c:a5:f4:c7:f3:c1:01:0d:
da:ae:b3:82:f2:66:4b:02:32:56:b3:00:41:b1:65:
2d:31:a4:5f:c2:88:d1:ec:16:c4:5e:48:85:3d:4e:
28:42:96:a4:a1:8c:72:12:9c:70:5b:db:59:2f:94:
59:30:45:b0:15:14:1c:90:c6:96:d8:9c:61:ef:74:
b4:48:be:c4:c7:88:69:69:c1:3d:f9:f5:e5:91:61:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:FD:29:CD:E3:18:59:D3:8D:7B:72:BC:E1:CA:0F:3E:21:67:11
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3a:00:42:c8:f4:d4:7c:b6:3c:8a:a7:de:9d:50:c3:d3:c6:
36:e3:70:d4:f8:6a:00:cd:51:26:cc:1b:ba:74:df:5b:bc:9f:
ba:78:4f:45:0a:19:4e:e8:90:0f:39:1b:66:3f:9a:59:4f:64:
fc:9f:d0:10:a5:e5:f5:18:c9:bb:ce:f3:e1:d0:5a:b6:e3:3c:
08:f0:f7:ca:0d:d6:b6:d9:05:4c:8a:31:f4:80:0f:66:4a:a5:
d7:42:15:22:9a:84:94:41:07:9a:66:85:b2:b2:30:71:db:98:
8c:19:f1:92:58:f6:cc:47:1b:77:ea:b9:60:35:7f:5d:b6:63:
2f:19:91:21:f7:40:43:a0:62:ac:e9:b2:31:bc:c9:8e:23:78:
d1:7d:29:6e:1c:dc:2f:20:b2:82:52:b8:18:16:c2:b9:44:5f:
d0:46:5b:5d:c1:fc:d4:2e:d1:76:4c:07:1a:7e:d1:63:5a:30:
f0:3e:9e:9c:65:30:4b:01:70:2d:ac:cf:52:89:3a:df:68:af:
da:f5:11:73:ce:c1:c7:dd:ec:43:e5:8a:01:25:b9:dc:03:98:
ef:7d:25:3f:a8:63:11:aa:3d:7e:70:ba:d8:af:ce:19:f5:4e:
c9:dc:ec:7e:a3:f6:63:2d:f3:4c:51:89:9f:3d:54:b3:1d:b6:
07:90:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:15 2025 by rpki-client