Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: mBWEDdwVD9AezSKeW5kg5JlyY07B2YrJNtqm9L1KSkA=
Subject key identifier: 11:75:82:BD:34:53:57:08:06:6D:0A:F3:96:48:D9:EB:E0:A3:6A:63
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 0198D583CC8CE459F85670AC6AB9F330F5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0B11
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: rWFZFGY3VXJMLVPe6Pb2xWWQtu0JRilxbOEPpokDF6A=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cc:8c:e4:59:f8:56:70:ac:6a:b9:f3:30:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=117582bd34535708066d0af39648d9ebe0a36a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:60:d9:50:42:e8:7b:76:de:19:8b:f2:83:
92:f7:7b:f5:64:58:e5:e3:26:e8:c9:85:4d:6c:1f:
9e:37:47:45:2f:60:5f:89:7f:ba:74:a0:44:d9:35:
e7:05:37:5a:c9:c3:f8:b0:c4:29:69:23:e7:39:6b:
75:19:15:c7:eb:1c:2f:89:27:ca:fa:e1:e3:be:14:
45:e0:fc:6d:b6:13:47:9d:ef:99:89:d9:7c:ef:a3:
27:07:6a:97:d2:c3:df:33:47:4d:49:dc:b8:0e:8f:
57:a8:df:f9:ed:f8:fc:59:c1:6a:b0:2d:0e:be:15:
ad:95:d7:7a:91:c5:64:fc:94:57:03:0b:2c:96:cc:
5f:ba:90:97:5c:db:23:e4:5f:58:d7:f3:e6:3b:cb:
19:7f:76:bc:7a:6c:0b:ea:85:5a:1a:1a:92:2f:45:
79:56:0e:eb:84:aa:f8:1e:79:84:0e:c5:9e:9f:98:
4a:d6:28:57:55:0f:61:d3:14:76:a3:8d:d0:11:cb:
2b:da:80:9a:65:d1:64:fb:51:99:f3:91:a6:60:5a:
9d:c3:87:7c:88:f8:83:15:ba:c4:d3:0d:0a:b0:63:
76:41:f4:32:32:b0:45:13:1d:f2:3a:39:16:77:85:
8e:82:74:6d:34:f1:df:cc:6b:d8:d1:c6:89:86:f0:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:75:82:BD:34:53:57:08:06:6D:0A:F3:96:48:D9:EB:E0:A3:6A:63
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:57:7a:74:cf:1e:c1:95:0c:c2:3f:88:7a:96:b2:86:aa:49:
ff:97:96:93:48:ea:8c:df:36:e2:0b:ad:a5:0d:6c:57:04:58:
ac:b3:82:d9:ba:f7:ac:c5:18:c9:a5:23:ab:11:fb:47:fe:31:
81:e1:b1:b9:c5:ce:8f:e3:af:af:21:93:cd:d8:fc:f3:3e:75:
dd:a6:c9:d8:d5:23:07:f0:13:b9:80:84:1c:bb:36:a9:06:ff:
a0:e2:7a:57:93:20:77:6a:ea:bc:43:cc:78:38:12:cd:78:e2:
d0:e9:f3:d4:72:78:f4:0c:be:29:ef:1d:96:ba:24:8b:e7:83:
ee:cb:19:c1:96:8f:33:b0:2c:4c:65:5c:a4:25:a1:b5:05:e1:
b0:47:d0:33:c1:3b:f6:28:96:a7:99:ac:a6:65:8c:66:7d:f6:
b6:10:d3:36:12:6f:0c:47:96:55:24:52:46:76:ea:30:24:0d:
4d:d0:02:9e:6f:24:e1:a6:92:49:15:bc:f2:80:dc:fb:6a:7e:
0c:21:1f:5b:e0:bc:43:2a:1b:be:24:49:9d:a5:0f:62:a7:b2:
3e:dc:5a:e0:0a:83:1c:ad:49:3a:23:01:57:d6:99:e8:b9:a3:
b8:d2:55:fe:66:0e:d0:c6:3b:4e:d2:5a:8f:65:a9:95:9c:10:
33:6d:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:54 2025 by rpki-client