Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: Oup2hnhJlRb4VooK/wO+dQKIuIi9uAuVPr2x1ZMxswk=
Subject key identifier: D3:0B:23:9A:15:B6:89:22:B3:39:C3:19:02:24:34:D7:AD:60:9D:49
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 0199500B99025E5B169C65E7729247A2B389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 1067
Signing time: Tue 16 Sep 2025 01:02:41 +0000
Manifest this update: Tue 16 Sep 2025 01:02:41 +0000
Manifest next update: Wed 17 Sep 2025 01:02:41 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: t1gwfDf1jQgy9Rb1Q0rxo7VdDCRiCUirO9T2KrDimWk=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 01:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:0b:99:02:5e:5b:16:9c:65:e7:72:92:47:a2:b3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Sep 16 01:02:41 2025 GMT
Not After : Sep 17 01:02:41 2025 GMT
Subject: CN=d30b239a15b68922b339c319022434d7ad609d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:71:69:30:13:3d:0a:0f:38:c5:94:ad:95:
69:60:2f:e1:17:13:10:34:48:85:57:92:52:61:71:
27:d5:d8:c4:75:d1:e2:7e:8d:85:20:8a:b9:e2:f9:
b2:bf:32:4e:a7:d3:e6:2b:f2:c8:07:4f:8b:0e:90:
eb:0d:35:e0:a3:97:cd:dd:4b:62:9a:50:c5:ee:0b:
ad:c0:e5:95:aa:1d:a2:01:b6:34:cc:be:39:ba:aa:
aa:22:b5:d7:b6:a1:21:48:a0:70:f6:35:43:ba:cd:
af:d3:6e:84:a6:c2:78:0b:cc:49:af:d8:88:39:ba:
da:e4:70:e6:ee:9a:8e:a1:e0:46:a7:7b:75:d6:a6:
18:1e:a2:03:79:d7:ac:70:e3:6b:7e:de:a9:04:81:
a3:bc:c5:98:16:72:ba:9d:1d:c3:73:b4:3b:93:1d:
24:14:ba:52:7f:8b:29:ca:e3:1e:ee:96:01:35:ab:
16:32:d6:0a:dd:1b:6f:63:7b:b6:a5:b4:28:9e:a0:
aa:45:ff:40:ec:86:6f:85:94:52:44:f6:00:3e:9a:
5a:7c:02:c4:34:37:3e:84:3f:03:67:53:4e:c1:17:
7c:d7:11:04:b9:4f:96:ed:f3:85:04:22:b2:b8:42:
0c:8c:8d:04:1e:bd:f0:74:32:59:9b:39:28:25:e6:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0B:23:9A:15:B6:89:22:B3:39:C3:19:02:24:34:D7:AD:60:9D:49
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cc:3f:b8:46:12:fb:ca:88:70:3e:bb:14:b6:e6:91:b6:bd:
75:d8:7a:42:f3:f7:43:b7:cf:e7:06:1e:68:a2:48:5b:43:96:
fe:22:e7:8f:1c:f9:c3:55:89:84:23:a4:b4:19:0b:96:4d:74:
f3:98:cb:b7:f4:af:1d:d6:d9:ff:e8:4d:c6:41:06:5b:a1:41:
d9:9f:aa:f0:c8:4e:ec:f4:0e:c7:8f:ff:d4:9e:2f:a1:1c:8f:
ff:e6:6e:93:c6:f7:dc:c9:de:00:e3:a0:a4:0e:fd:ae:b9:bc:
ab:ee:27:79:ee:be:b2:6f:e8:0f:d8:68:8b:cc:6f:a3:b2:2e:
39:5e:75:d4:8d:69:7c:74:3d:e6:ec:21:bf:9d:a7:54:6e:78:
1b:96:61:45:c4:b3:95:bf:89:30:47:72:b5:81:32:09:5d:b3:
e0:7b:22:cd:1c:a6:91:15:11:80:7a:fd:18:61:53:c0:88:38:
21:1a:75:03:65:b5:cc:cf:20:bb:15:95:d5:29:4b:62:af:d8:
a3:43:51:14:b1:ab:6e:e7:c0:6f:6a:70:7e:6a:6c:d9:3d:ac:
3b:d0:db:a6:8b:c2:6a:86:d9:73:fb:04:0a:23:41:50:93:5d:
30:c1:3b:0c:4d:8d:ba:7e:e9:d1:26:0d:ea:4a:a1:ce:fa:4c:
fa:90:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:00:25 2025 by rpki-client