Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
File: hugNGBwlPRTaHgupwdVmb1Ym1YE.mft (raw, json)
Hash identifier: 0IEFMuk5af1cJRJv+X5d3KcCCt9Q2TFRSqeTOkmmXJo=
Subject key identifier: 8E:61:6A:13:69:B5:D8:7A:73:C0:06:75:A7:2E:4D:79:A5:91:9A:08
Authority key identifier: 86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
Certificate issuer: /CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Certificate serial: 0198D5162DEF0C21536EB912A3870D1E5055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
Manifest number: 6E
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: GduTVoXL90rcY5IbBMohmd6Di4U.roa (hash: FpxhDiPtRQpdrB9mwbp5ACWnV465MFksntDsy9t3DCM=)
2: hugNGBwlPRTaHgupwdVmb1Ym1YE.crl (hash: vC81R6fyjEpX8H6HJFVIJ3TSHTMMEidDXwMHCKEZYwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2d:ef:0c:21:53:6e:b9:12:a3:87:0d:1e:50:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=8e616a1369b5d87a73c00675a72e4d79a5919a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:ec:d9:bd:52:b8:83:60:f6:99:c0:3c:53:
77:6e:a9:74:24:8d:dd:6c:c2:13:b1:d6:a7:65:ee:
63:56:e3:d4:09:97:8e:e4:e5:01:6b:da:bd:6b:f9:
62:60:b2:23:42:5d:7a:26:85:f5:e4:60:a5:9c:e4:
d1:fe:ba:b1:f8:64:18:f2:ba:26:01:ba:05:ec:a7:
67:90:1f:f7:a8:9f:94:3a:2d:6a:a2:9b:05:9e:0c:
75:4f:ab:d9:fd:72:8f:a4:ec:df:12:49:13:88:7b:
61:99:50:8f:82:f1:c7:86:c9:e2:79:c6:a6:8f:00:
81:7a:0a:30:0f:ee:6a:8d:d5:91:2b:d3:bb:c4:d5:
97:58:52:25:54:da:a0:31:1d:03:03:80:5b:5a:8b:
65:74:c8:4f:e3:60:6a:34:f1:1b:f4:36:7c:d0:5b:
66:a5:1c:cd:c8:4a:b1:20:b0:88:20:39:34:69:c0:
57:2f:32:ed:20:bf:81:b7:76:7b:aa:c0:79:6b:db:
7e:c5:ab:83:91:47:82:e2:2b:84:1e:65:43:4b:ce:
44:d9:15:27:aa:e4:6d:61:48:c5:2e:6c:18:dc:07:
da:7a:49:4d:cb:bd:fb:8b:0e:b8:78:d0:11:33:58:
61:82:7a:26:3a:32:2c:54:48:83:ff:30:2e:85:d3:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:61:6A:13:69:B5:D8:7A:73:C0:06:75:A7:2E:4D:79:A5:91:9A:08
X509v3 Authority Key Identifier:
keyid:86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0b:20:09:e5:e1:dd:c6:9a:37:76:06:8f:ea:4b:9d:70:3c:
ef:78:33:e9:d9:6b:5c:83:12:ff:fd:b9:4d:92:8f:5d:a7:24:
97:1a:58:df:b1:eb:5a:b1:bd:a8:9e:5b:56:b3:33:49:a2:b6:
13:3b:17:ec:7a:0f:93:51:6f:cc:71:5d:4b:87:a3:d7:fb:f3:
d7:f8:6e:17:6d:58:23:fa:23:15:8a:45:af:a4:dc:9e:f2:96:
a5:66:d6:93:da:bd:22:48:fa:f3:6b:c0:e1:40:0e:8c:ea:f1:
29:fa:4a:6f:58:02:16:a7:1e:46:6b:ff:df:a3:d5:66:a3:5d:
1b:49:db:d6:db:4a:57:a1:73:33:c4:5a:f4:c0:45:9b:cc:22:
29:13:ed:e6:ee:eb:84:74:f9:39:e2:ab:4f:c2:27:65:82:54:
3e:37:36:1d:eb:61:07:a9:f5:d1:d6:ea:8a:08:16:e3:bc:92:
c1:1e:51:74:bb:83:67:2e:ec:80:75:2c:b4:52:8a:7c:d8:fa:
be:73:b5:db:b0:39:3d:9b:77:14:5a:1d:e5:90:74:d5:66:00:
33:d5:87:30:34:66:c4:4d:a1:94:0c:ed:e4:d7:cd:3c:44:85:
05:12:c9:26:ab:4d:c5:18:3f:22:7e:bd:35:2c:9c:e9:b3:24:
44:84:dd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:36 2025 by rpki-client