
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
File: hpNlUyawRyyGbFyZMC4rLXjL3fc.mft (raw, json)
Hash identifier: T4bOKcOXkp+fyJ0+GPxJ90z7Qeatu0Dq0fITa55yP9w=
Subject key identifier: 90:B3:17:82:56:48:D6:7D:81:E2:1F:23:6C:2A:EA:38:56:49:50:55
Authority key identifier: 86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
Certificate issuer: /CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Certificate serial: 019848F7A7AA416DF79F6343274A8E07CAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
Manifest number: 0ED8
Signing time: Sat 26 Jul 2025 23:00:46 +0000
Manifest this update: Sat 26 Jul 2025 23:00:46 +0000
Manifest next update: Sun 27 Jul 2025 23:00:46 +0000
Files and hashes: 1: hpNlUyawRyyGbFyZMC4rLXjL3fc.crl (hash: goPucKRUeBJ2HCLBf0sm2vBulSp4Q8zULx/RvbtiySA=)
2: z8Qgne-FkfA3KYq3e01ob5TLZp0.roa (hash: 7fco4lzAt1GZtpXkjpIq4UVmOihkqjl0I1nfOSI77gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a7:aa:41:6d:f7:9f:63:43:27:4a:8e:07:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Validity
Not Before: Jul 26 23:00:46 2025 GMT
Not After : Jul 27 23:00:46 2025 GMT
Subject: CN=90b317825648d67d81e21f236c2aea3856495055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:46:2f:78:05:60:9d:31:f6:05:df:ec:9b:
9c:dd:10:1d:27:92:f9:44:16:b1:64:9f:e6:42:1d:
88:f2:5c:39:96:c0:57:7a:4d:39:60:ee:68:1d:8a:
e1:4b:86:34:ca:fe:94:db:ed:30:3d:9e:96:4a:dc:
02:c9:d4:45:e6:8f:e6:d5:59:3c:be:4c:ad:99:82:
08:c9:63:0a:be:63:58:0e:1c:b5:94:3b:46:ff:f4:
12:84:36:bc:71:7d:f3:e9:48:76:4e:bd:55:ab:e6:
de:f6:00:54:23:ca:1e:42:dc:2c:89:f7:4d:64:02:
9b:7a:9d:f4:03:59:ed:7d:d6:87:70:d1:d5:66:3c:
21:56:96:fd:f0:7d:fa:f4:42:72:63:04:2b:2e:a9:
17:12:39:72:ff:c1:4e:73:30:3d:1b:d0:72:97:82:
1a:f5:17:ad:b5:b3:bd:6f:1c:04:a0:a9:28:b1:bc:
09:3a:df:71:a7:b1:59:ed:93:f8:a4:e2:20:76:87:
ea:5c:a4:3b:f2:06:1f:15:be:af:94:60:a6:90:1b:
bf:af:b0:aa:64:63:40:b6:ac:58:4b:1f:35:c1:b3:
03:84:ee:86:af:0c:d0:a0:2d:fa:1b:a8:5e:70:1a:
45:9a:d8:49:88:eb:55:70:cf:9f:a4:10:44:b7:7f:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B3:17:82:56:48:D6:7D:81:E2:1F:23:6C:2A:EA:38:56:49:50:55
X509v3 Authority Key Identifier:
keyid:86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:53:cd:c0:59:c5:97:e6:f4:bd:bb:5b:cb:ad:31:1f:b9:ab:
1e:bd:66:11:f0:a9:eb:df:bf:2f:cb:d3:31:4b:dd:ee:17:e0:
5f:63:7d:2c:51:19:6d:92:c6:04:2b:3b:58:3d:b0:9f:de:c1:
9b:2b:81:18:ee:fd:84:14:70:33:69:9b:70:ee:18:ae:4c:6b:
5f:f0:d8:48:53:49:c5:99:d1:99:08:77:af:39:06:88:b2:e4:
b8:66:04:f8:5b:64:29:c8:ed:40:e2:25:df:42:3e:07:69:a5:
26:89:db:62:18:e2:24:3a:b6:75:a1:53:fd:36:69:f9:e7:de:
fc:49:31:76:55:27:ae:48:9a:90:93:10:b9:1c:32:51:77:5f:
c6:2b:10:19:40:31:0a:88:57:e8:65:34:7e:c5:9a:9a:1b:98:
48:c3:69:8c:f9:25:9b:33:9c:56:60:4f:3b:8e:c6:f8:1a:a2:
6d:48:9d:b6:3b:65:89:9b:9c:f4:ea:63:35:be:10:c7:b0:23:
5e:c8:8e:a6:b8:e0:60:ef:d6:13:13:c5:68:05:c6:d0:8c:46:
00:ba:9f:09:b2:4b:b8:cb:f4:e2:49:84:1c:2a:e8:5b:f0:5e:
95:57:27:e9:c7:fd:bb:81:cb:b1:be:18:38:33:04:e4:3c:26:
c3:75:58:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:37 2025 by rpki-client