Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: w06Y7Awf4s8RqMWDIB0DF6Xk2qZ8Ojn0OzTk8LNWikU=
Subject key identifier: 29:BB:C5:E2:14:38:1A:92:ED:C1:B6:F2:5C:DD:C0:18:67:16:AE:1E
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 01983DCFE8896EEF13EF0299EAA8C0E57BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 15FD
Signing time: Thu 24 Jul 2025 19:01:32 +0000
Manifest this update: Thu 24 Jul 2025 19:01:32 +0000
Manifest next update: Fri 25 Jul 2025 19:01:32 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: B8039V9Xx3yq1Fu0kdlyHd837y1YgwCkpkfHHNRbhs8=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:e8:89:6e:ef:13:ef:02:99:ea:a8:c0:e5:7b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Jul 24 19:01:32 2025 GMT
Not After : Jul 25 19:01:32 2025 GMT
Subject: CN=29bbc5e214381a92edc1b6f25cddc0186716ae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:e8:17:62:6a:c0:fd:8e:d9:28:5b:a2:95:
3d:c6:f5:01:55:f8:8e:08:f6:a1:18:ad:a5:1b:71:
f5:3c:0a:54:51:47:d5:b3:11:fe:4f:18:40:00:bb:
69:7b:fd:2a:e6:b0:d2:52:5d:18:2d:a2:c5:1a:77:
5e:ce:a3:8e:ca:be:9e:3d:f7:63:18:e7:e0:04:5a:
a4:36:85:04:26:ec:33:33:f8:72:07:ea:0e:7b:08:
68:14:f8:c2:c8:eb:e6:f5:a8:e4:55:04:65:0d:9a:
81:c6:24:89:b3:7b:0f:fd:bb:54:ce:32:42:c8:d1:
a2:bb:ec:2f:7d:9a:1a:b6:16:32:4e:95:2a:74:75:
76:46:fb:12:5f:be:5e:0c:72:3c:17:38:ce:7a:0b:
89:02:64:11:d5:df:5a:30:09:8a:20:c1:45:c9:8d:
c7:1f:82:65:7b:99:f8:e5:1b:1a:2b:2c:da:98:4e:
cb:ba:2a:f7:46:55:3e:8f:7d:79:49:39:40:4f:ec:
df:e4:68:2d:29:f6:8a:95:ad:15:e3:e0:33:bd:c3:
04:f0:30:4d:c8:0f:08:52:c6:07:2b:e2:cc:0a:b4:
1d:a1:99:7c:49:4d:bf:3f:ba:06:11:bd:c9:42:07:
75:f8:d3:99:2c:b0:d4:21:b3:2c:aa:db:a4:3e:e2:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:C5:E2:14:38:1A:92:ED:C1:B6:F2:5C:DD:C0:18:67:16:AE:1E
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e0:ef:6b:82:dc:e3:c3:2a:7b:e2:a7:d8:be:49:35:a3:a1:
8d:ed:44:1c:96:d4:db:50:68:c1:45:9a:a5:17:ea:ea:4d:07:
94:0f:b1:5f:90:f0:59:2f:e5:5c:39:e8:56:0d:f6:2e:08:f4:
7c:b4:10:f6:a2:50:9c:b0:9d:df:19:e4:cd:57:7a:d3:8f:76:
32:af:fb:63:02:06:50:98:33:f6:47:db:f5:d0:05:ec:8c:65:
e7:76:e3:19:3c:d7:cf:95:7b:56:ec:cc:e4:ec:d0:61:e9:bc:
81:27:9a:32:e9:43:21:33:b5:88:dd:60:4b:2e:e6:aa:ea:99:
30:5c:cb:de:0a:67:22:dc:61:38:78:7d:63:e1:0c:97:38:c5:
09:87:d2:be:f1:74:8c:34:f0:a9:09:ab:74:0d:74:58:0a:e0:
62:05:3c:f0:d5:93:85:81:e0:56:f1:8a:6b:b3:f8:30:c7:1c:
a8:1e:2b:9b:1c:3a:52:07:a5:bd:9a:1e:ed:7a:35:47:e7:5a:
f5:8e:45:0d:ff:c6:c0:08:e3:73:a7:72:0a:5a:21:ee:ad:aa:
d9:7e:fd:13:99:e1:0b:87:97:56:53:89:17:91:a7:ab:0b:e1:
bf:51:ba:d4:01:85:30:f1:47:1b:cf:cf:80:bf:46:a3:f2:9c:
06:42:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:05:17 2025 by rpki-client