Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: /84RMWpDTdPPtXpjsvAov3oACbd1neTUnsctttJL6rQ=
Subject key identifier: B1:FD:DB:D5:63:EC:F2:6B:FF:E8:37:B9:30:89:97:D4:D6:AA:14:44
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 0198D5839CF3EA9BF38068C7D04F3453FAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 03D0
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: saaACoiZR8oW12cnbLKJTfcGnP1uF4pt3pclWRLqlms=)
2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9c:f3:ea:9b:f3:80:68:c7:d0:4f:34:53:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=b1fddbd563ecf26bffe837b9308997d4d6aa1444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:42:94:80:ad:fd:df:77:e2:50:76:be:f2:
43:d1:cb:da:69:22:54:62:71:06:1e:47:a2:3e:22:
ab:14:56:df:44:30:17:76:3b:a1:d4:f7:07:8d:af:
2a:aa:3a:29:ee:2a:aa:1a:fd:9e:9b:77:dc:5f:cd:
ca:f1:ed:57:4b:65:f6:ca:a5:08:0e:c1:28:04:e2:
13:c9:d1:69:9a:3e:f0:c9:74:1d:ff:1d:33:5f:45:
e5:25:d1:4f:e3:29:f8:06:7a:61:8f:fb:cd:db:25:
6b:9b:fe:ec:68:ac:97:a4:e1:5c:83:fb:96:cd:bb:
42:71:4f:10:d8:1b:88:82:33:27:ba:00:67:28:6b:
3f:f2:69:33:5d:3d:cf:a7:97:8e:22:ab:18:0c:82:
c7:27:ba:70:91:89:40:fb:65:b0:f9:44:a3:b8:37:
c9:ba:fb:d3:cd:cd:b4:44:fb:4c:36:70:f8:d9:ef:
ed:18:15:25:fe:61:4e:c2:38:d1:1d:9e:08:71:5d:
06:34:9f:02:8e:ae:bc:6f:26:37:84:18:e0:b7:74:
03:3b:cf:61:37:b9:20:7a:65:ce:1a:3f:04:f7:94:
ad:19:7b:ed:cf:51:ab:e2:87:6b:f5:1b:d7:75:a7:
ed:0d:dd:bb:f7:39:53:32:ba:e3:d4:6a:e4:e7:7d:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:DB:D5:63:EC:F2:6B:FF:E8:37:B9:30:89:97:D4:D6:AA:14:44
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3f:29:12:74:d7:e3:4a:a3:47:7c:40:b7:30:5e:e6:e5:c5:
6a:fd:41:30:aa:5c:88:68:f3:df:29:e8:e8:18:68:e4:a0:cd:
81:57:a0:cc:94:8a:cc:9a:9d:20:f0:f5:fc:10:ec:73:39:7c:
b7:c9:a0:6c:1b:84:8d:16:28:f5:b6:14:43:c2:df:8b:6e:b5:
49:3b:f4:4b:c6:c2:84:2a:91:5e:0d:8d:8d:9f:a2:61:73:0f:
ff:8f:ee:ab:bd:51:74:13:c0:c0:61:66:50:84:a8:2b:f0:d1:
be:a1:4b:ea:18:b6:43:ad:48:ab:bd:d6:34:46:ec:30:7b:1b:
96:bc:eb:9d:e1:d8:48:ef:d9:d8:dd:e2:62:e3:c7:58:5b:90:
34:05:1c:98:24:66:b2:ab:96:69:91:02:29:d7:8c:ee:8a:49:
5c:e0:bd:6e:cd:7c:c4:4a:05:c9:04:76:31:d4:0f:f8:59:15:
d3:52:9f:c4:ab:99:10:4a:49:fb:cf:b4:5a:27:eb:d8:96:d6:
0a:9e:9a:5b:9a:87:d4:e5:ad:e7:ed:9b:f4:33:30:ac:02:54:
da:22:72:f6:35:c2:d9:55:c4:46:71:f2:f3:f8:81:1b:a6:68:
ea:5e:25:a0:69:de:ce:14:d0:e3:62:ca:d3:cb:26:97:7b:0d:
34:b5:0f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:26 2025 by rpki-client