Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: lQe1JG0lNX4yQC/1sARAS3GkqdQaSniXikOA4BRN778=
Subject key identifier: 2E:6D:ED:5F:5A:A1:84:E0:45:DB:1B:CB:8D:12:79:E0:2A:1A:F4:7B
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 0198D6CDDB61C7D018FF41C35F42712DC12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 0217
Signing time: Sat 23 Aug 2025 12:01:11 +0000
Manifest this update: Sat 23 Aug 2025 12:01:11 +0000
Manifest next update: Sun 24 Aug 2025 12:01:11 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: 7ftNLl5eXsthRrtaBxawoqe6EEGBaFFoy/S451iv2ns=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:db:61:c7:d0:18:ff:41:c3:5f:42:71:2d:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Aug 23 12:01:11 2025 GMT
Not After : Aug 24 12:01:11 2025 GMT
Subject: CN=2e6ded5f5aa184e045db1bcb8d1279e02a1af47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:bc:4d:8f:67:3b:18:68:67:eb:7b:58:c1:
66:3f:65:15:23:61:9d:70:78:a7:76:28:fe:14:6e:
a7:9f:76:bc:d9:9e:ee:de:0e:47:2b:96:b8:03:5d:
14:9b:fb:11:84:12:ba:ca:45:85:d6:81:af:fa:77:
f4:ca:b4:27:ea:31:06:57:67:17:23:00:c2:3f:1d:
11:7e:96:75:ce:6a:c4:56:92:10:f4:69:60:f9:83:
4a:fb:10:8c:6e:9e:19:c7:1c:e7:95:7d:85:a4:cc:
82:58:e7:a0:33:fa:d0:a2:62:dd:f1:2f:6c:ce:62:
8e:07:f1:2d:45:18:39:31:0e:d1:ad:04:9a:bb:1c:
15:cf:26:f3:fd:17:87:3d:77:4d:b2:54:ae:73:86:
e4:b4:83:0f:28:21:2f:de:3b:66:c7:cc:57:a3:bc:
65:06:75:3f:da:5f:23:4e:a4:2e:32:83:5d:cf:c1:
0c:2f:17:be:28:54:0e:f1:90:61:0d:39:df:b7:b6:
f5:88:57:f6:28:9b:a4:6e:7c:a7:f1:d2:65:3b:ad:
92:0d:0c:14:8e:20:59:9b:5c:45:73:1e:3b:e6:53:
ec:a8:a8:8d:32:5e:c3:e6:66:19:47:9a:3b:01:9d:
c0:6e:47:6e:e1:72:b6:39:f5:29:a9:e3:e6:e1:14:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:ED:5F:5A:A1:84:E0:45:DB:1B:CB:8D:12:79:E0:2A:1A:F4:7B
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b1:4e:37:0b:bd:89:ed:19:59:2b:75:a5:5a:6d:7d:ee:68:
d7:ec:ad:97:85:1d:11:23:38:75:76:07:0b:30:bd:7c:9c:da:
c3:c8:da:de:0e:d2:14:73:01:7e:50:7f:d3:b3:c7:0d:9d:ce:
e3:c3:e4:34:7d:19:5d:00:1a:1e:fc:84:41:f0:3d:fc:be:4a:
1b:bf:a3:14:ff:c4:ab:cc:c6:17:5f:a6:3e:d1:60:38:7f:0d:
78:3a:f3:79:7e:5f:d8:6b:e9:f5:92:1c:bc:1e:78:5c:d1:6d:
6f:97:8d:bd:d7:f7:72:57:78:9f:76:e8:bc:7a:50:4b:64:fc:
fc:47:6b:db:60:87:5f:79:00:81:19:a3:bd:9c:23:a4:2b:e7:
64:cd:4c:04:4a:6e:06:99:a4:51:f5:8c:a2:30:3b:ec:01:df:
6d:59:cd:cd:08:4a:be:7e:18:73:5b:22:99:69:3d:f9:bf:15:
c2:62:c0:1b:f3:1e:c6:d1:b7:da:42:8d:b4:1d:b4:53:1b:73:
8e:ab:c6:13:8c:fc:bb:05:c7:2b:e9:32:6b:c6:51:b4:3d:53:
55:39:53:4c:ca:32:4b:93:9e:0e:8f:e5:c7:bd:79:a2:e7:9d:
bb:78:8c:c8:8b:3d:e6:3d:ba:61:63:73:27:3c:8b:18:73:65:
11:cb:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:38 2025 by rpki-client