Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: L7RMVbZFnfvuuGEupqkxllnmABA3h+Vtjsz1pewsKl4=
Subject key identifier: DD:22:2F:04:0C:87:53:83:5D:52:DA:E5:E0:DA:B3:48:18:AB:E4:48
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 0198D698090E90581F84EB3F28A0754E2B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0B3B
Signing time: Sat 23 Aug 2025 11:02:24 +0000
Manifest this update: Sat 23 Aug 2025 11:02:24 +0000
Manifest next update: Sun 24 Aug 2025 11:02:24 +0000
Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: aYb8zb2tmoZiUgRB7HAoTppCrXRiuSFS5Gq4yb0vmuw=)
2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:09:0e:90:58:1f:84:eb:3f:28:a0:75:4e:2b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Aug 23 11:02:24 2025 GMT
Not After : Aug 24 11:02:24 2025 GMT
Subject: CN=dd222f040c8753835d52dae5e0dab34818abe448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:fe:a7:b6:e8:fb:d6:95:2d:60:fa:a0:78:
06:bc:43:dd:5d:5f:3a:f8:8e:13:f3:f6:c8:0e:51:
af:ae:d8:90:1a:3f:51:82:9f:f0:bb:42:4b:09:c6:
de:b1:92:d3:ac:0e:cf:c4:c5:6a:07:7c:ba:e3:23:
21:63:66:b8:7c:50:85:cd:62:26:7d:b3:f5:7f:5a:
4f:df:09:ff:ad:40:f8:27:ce:64:f7:80:5d:1c:5e:
95:44:4d:d1:40:b9:e9:55:1e:0b:d8:a1:0c:3f:ee:
52:84:89:72:c1:c2:90:e7:1d:46:b0:59:9b:a8:31:
4a:d1:95:73:77:fd:16:63:8a:53:8a:79:77:04:6e:
db:a2:01:71:83:8c:e9:b1:7a:49:1e:22:b4:79:e9:
e1:0c:f5:ad:c1:f1:c5:53:b8:35:bb:82:77:78:c0:
a4:f4:96:1f:c8:96:45:ed:90:af:d2:b6:81:74:3b:
39:b8:48:a3:33:7a:1f:5e:58:95:2f:02:d5:10:68:
e5:39:fe:55:7d:00:fb:75:d8:e6:d5:27:b1:e6:36:
38:88:21:68:d2:83:c3:34:98:0f:75:46:46:a6:0e:
95:28:47:a9:ea:33:c8:4f:4c:51:a5:da:49:1c:d2:
cf:1b:d2:26:3d:1b:df:9a:26:dd:59:3d:a5:6b:e4:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:22:2F:04:0C:87:53:83:5D:52:DA:E5:E0:DA:B3:48:18:AB:E4:48
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9b:88:81:71:ad:75:43:e9:26:8b:d9:42:aa:a7:2d:6a:f8:
7f:22:ce:c9:ef:fa:c2:c9:05:a4:ac:ad:b0:ab:d3:33:b6:0a:
ea:3c:b7:00:f9:6f:5f:f0:65:37:58:ab:64:fe:68:1a:7f:6c:
8b:2f:3e:7a:fa:17:a0:7c:13:83:4f:2f:12:58:4a:9f:9a:27:
c6:5e:a8:9c:15:7d:d5:9d:33:16:17:bb:f3:da:f7:6a:b7:77:
09:c3:9c:fc:8b:eb:fe:15:7b:84:36:c2:30:b5:86:f7:73:30:
18:59:a4:d0:cb:b8:3c:e4:aa:87:93:ca:62:39:6b:0e:5d:87:
a0:02:41:22:19:11:43:7d:1e:42:6e:70:b3:c8:f8:6e:99:73:
d5:17:a2:c2:29:eb:a5:90:06:31:99:c5:99:26:6d:21:2a:0a:
c3:2e:b5:4a:e8:bf:9d:7f:c3:17:44:0a:e7:da:ee:be:b4:ae:
5b:16:fa:41:4a:83:d4:94:68:2c:9d:67:51:13:d6:4b:4c:20:
95:85:3b:e2:85:d5:d3:ed:49:8a:eb:ed:42:46:15:e6:fd:35:
88:dd:03:f2:b1:64:10:54:8d:6a:ff:74:8d:45:2e:fd:e7:fe:
84:92:f9:fd:15:79:e6:1b:ff:fd:cd:8a:3e:47:92:c9:70:6b:
01:1a:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:56 2025 by rpki-client