Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: rF7V0Lf+FB7vYpSuDMjmXYd1dbQf5kEHwqWYUjybGx0=
Subject key identifier: 2A:0E:C2:63:D3:C7:1B:1A:7A:D4:AB:3F:E1:F9:F4:D1:1D:B9:F6:5A
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 0197BEC89EA0542F0EB05E1E78D0CE50E9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 0186
Signing time: Mon 30 Jun 2025 03:01:48 +0000
Manifest this update: Mon 30 Jun 2025 03:01:48 +0000
Manifest next update: Tue 01 Jul 2025 03:01:48 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: r7WEBNRVqk55GWZPVg5+uv/MYJRFJsJD0weVRX7NkTo=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:c8:9e:a0:54:2f:0e:b0:5e:1e:78:d0:ce:50:e9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Jun 30 03:01:48 2025 GMT
Not After : Jul 1 03:01:48 2025 GMT
Subject: CN=2a0ec263d3c71b1a7ad4ab3fe1f9f4d11db9f65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:41:ff:68:2e:4e:38:e3:4b:a1:c0:5f:03:
ca:6b:1d:a7:13:e2:82:93:61:82:2d:25:23:05:de:
5d:bf:65:36:85:a2:61:40:2a:14:17:a9:a0:07:57:
da:45:80:ed:33:a7:0d:65:62:8a:83:0a:cd:54:8b:
ee:0b:9e:28:8e:05:aa:b8:b5:b1:ba:67:ea:8e:6e:
f6:c7:8f:fb:68:14:a4:ec:0f:b5:5e:6d:7a:e3:c5:
fe:22:bb:ce:04:20:00:22:21:0b:57:15:a9:e2:58:
e6:89:7e:b0:04:ae:f1:44:85:dd:ec:e3:c2:aa:87:
6f:a3:7c:43:b3:23:25:44:6e:87:93:28:fe:ac:fc:
70:09:c5:a1:11:1d:66:1b:fa:35:c3:b1:8d:0f:0a:
9b:b9:5c:61:ee:0b:6d:1f:6d:cb:3b:66:09:2c:2a:
8f:e5:21:02:c9:4c:ff:aa:21:4b:0b:d1:f8:ef:3f:
e9:28:d5:b6:f8:62:94:20:04:92:b4:40:84:d8:0d:
e4:2d:c8:7f:f9:79:86:9c:8c:b8:0d:8d:68:ae:d3:
57:5f:c4:f7:99:39:14:a3:39:16:ba:89:68:82:e2:
8a:db:60:f9:04:bd:af:25:7c:60:f9:66:ee:43:33:
e7:77:60:d1:fd:d9:2f:5c:a0:8a:51:4e:01:c2:e1:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0E:C2:63:D3:C7:1B:1A:7A:D4:AB:3F:E1:F9:F4:D1:1D:B9:F6:5A
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:22:72:d2:45:0c:f2:77:ac:3f:dd:bd:7b:b1:2c:9e:45:08:
07:be:ee:23:80:16:a3:14:e4:d8:f6:80:ad:a0:ac:66:ac:53:
ad:0e:d1:92:89:2b:22:43:ac:fb:ff:00:f8:61:ed:83:bb:63:
86:50:e2:6a:66:1b:cf:f4:a5:e7:b2:1d:83:d6:3a:f5:6d:c7:
db:f2:6b:d9:d8:ec:f2:f8:57:9a:d9:2f:f8:fc:66:39:5b:cc:
a9:3b:27:79:c0:af:b6:0d:c9:49:b2:f8:6d:7c:49:9c:52:32:
7d:34:c9:e2:b6:2e:bf:30:bf:b8:86:ae:8f:ef:5c:01:f9:7f:
a1:f5:8a:db:7d:d9:64:9c:3d:cf:d4:bc:1f:59:9d:06:9b:31:
c0:a7:7b:ca:24:00:24:e2:be:b6:52:54:99:28:4a:c4:92:7c:
aa:84:f2:b8:48:70:d4:8f:bc:4f:4a:9a:a8:7a:8f:49:e3:27:
96:1a:e4:ad:80:0f:4d:a0:91:10:bd:c9:77:74:84:f2:97:7d:
e5:3f:1e:7d:89:b6:ea:c8:65:3f:e4:ee:eb:33:fe:4f:ca:16:
69:f3:00:a4:07:f3:61:b0:8b:a0:e7:e8:7f:2f:49:95:87:44:
1a:d2:65:36:ea:e4:6e:8d:e0:82:86:05:7f:60:2a:cf:db:2c:
c2:54:6c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:03:33 2025 by rpki-client