
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
File: hWhAcEemLmSDAMUYKik1P_WOsF8.mft (raw, json)
Hash identifier: 11lh3tIT7sDWB07joYhhT9RYKm5PdOt70hteaOddd04=
Subject key identifier: 80:4D:13:DF:36:FF:6B:C7:36:E8:2D:BB:EC:8C:65:F1:29:B7:B1:27
Authority key identifier: 85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
Certificate issuer: /CN=8568407047a62e648300c5182a29353ff58eb05f
Certificate serial: 0198485262DCE0F1C66F291CB50E6BCA9E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
Manifest number: 0351
Signing time: Sat 26 Jul 2025 20:00:15 +0000
Manifest this update: Sat 26 Jul 2025 20:00:15 +0000
Manifest next update: Sun 27 Jul 2025 20:00:15 +0000
Files and hashes: 1: 0nvhqw7aFiUkSIOiOEerDMnQ_ZQ.roa (hash: HMe62SGaPYEENwRxXbOtER7G/ZP8W5TpI/QjfFDw0sg=)
2: hWhAcEemLmSDAMUYKik1P_WOsF8.crl (hash: L+KKLDVawODH/GkztoozsVCLWuKUl/21BwIOsPHviIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:62:dc:e0:f1:c6:6f:29:1c:b5:0e:6b:ca:9e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568407047a62e648300c5182a29353ff58eb05f
Validity
Not Before: Jul 26 20:00:15 2025 GMT
Not After : Jul 27 20:00:15 2025 GMT
Subject: CN=804d13df36ff6bc736e82dbbec8c65f129b7b127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:8e:d0:bc:77:9b:95:7a:b6:c4:38:db:a5:
61:52:ac:fc:b2:8a:a3:8d:ff:b5:45:9f:52:59:4c:
9c:df:1e:48:b9:7c:c3:65:61:65:6e:46:6a:fb:09:
ba:50:a2:3c:dc:78:7e:5f:56:fd:f4:20:6c:77:3f:
e3:b4:0c:d0:06:bd:57:09:13:c3:03:f0:6c:67:86:
7c:83:c5:88:bf:79:65:7f:61:eb:11:38:68:ea:cb:
ba:6c:4d:13:a8:b5:b8:cd:de:11:90:7d:47:15:e3:
8e:85:db:d3:f5:21:28:fa:11:ac:bd:bc:fc:a1:20:
9c:8d:17:41:ce:eb:96:87:dd:83:19:45:f3:5f:94:
40:7b:3b:70:2e:56:6d:96:4f:18:79:81:16:d2:3a:
6b:d2:9b:60:64:4d:0b:2c:8e:25:20:a0:42:55:12:
39:2c:b3:86:ad:fe:99:02:45:38:39:f9:00:d5:c2:
64:73:50:ea:80:fc:b6:2a:fd:2c:80:ee:f5:47:00:
75:12:9f:bf:0b:50:05:6f:f9:6f:ae:70:a2:65:64:
b3:7f:c4:91:5f:f9:b2:a8:2b:35:a9:21:90:9c:44:
91:98:8f:89:03:8e:58:3e:1a:05:b3:ad:45:86:6d:
ee:c4:eb:2f:2b:4e:09:3f:d6:57:3f:f5:c2:7e:c6:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:13:DF:36:FF:6B:C7:36:E8:2D:BB:EC:8C:65:F1:29:B7:B1:27
X509v3 Authority Key Identifier:
keyid:85:68:40:70:47:A6:2E:64:83:00:C5:18:2A:29:35:3F:F5:8E:B0:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWhAcEemLmSDAMUYKik1P_WOsF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/320395-70c0-4002-a362-ed3e98c656e1/1/hWhAcEemLmSDAMUYKik1P_WOsF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ae:76:1a:76:1e:1d:4b:2d:72:a1:00:48:de:b8:a2:82:1d:
31:0e:bc:0a:fc:b9:8d:c8:6b:00:78:9d:40:66:d0:f5:c9:27:
31:6e:ad:8d:21:3a:98:8f:3e:3f:0c:76:50:ad:51:c4:18:40:
1e:a2:37:10:e1:1d:c3:21:6a:3d:92:6e:2b:c7:19:eb:4b:18:
cc:88:bc:db:6a:24:85:26:c6:66:81:d4:6b:4e:06:2f:e2:95:
70:95:12:dc:22:22:52:1d:e7:21:47:a3:5d:36:d9:35:d1:e1:
38:1a:f9:d1:2f:83:61:7e:bc:41:f9:66:df:fb:2c:c9:4b:fa:
25:4c:7a:66:68:d9:79:d2:b1:a3:d6:0f:27:a2:08:fb:34:6d:
ba:59:18:60:8b:95:83:1e:60:26:10:b4:7b:5f:c2:8a:58:9f:
f0:f0:84:60:59:28:0e:09:45:8f:73:ec:f5:1b:56:14:c1:77:
59:30:56:ee:e3:1b:d6:3a:13:e7:d0:34:61:f3:d2:eb:c7:80:
07:6e:4f:03:7b:07:7d:28:8b:6f:58:16:6c:ce:c4:dd:61:cf:
aa:47:c1:b9:79:80:be:a8:a8:e6:f5:0d:9a:9d:5d:e1:55:74:
41:d9:0a:81:f1:80:d9:f1:c2:06:0d:b5:01:6b:43:ca:37:2b:
6f:9d:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:55:27 2025 by rpki-client