Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File: pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier: x90hQeUCPxP2PzeiHINJWIkF2X83Jo0MaF/auVGF+8k=
Subject key identifier: 49:05:10:00:8F:09:35:76:5D:AC:72:55:F3:A1:6F:05:A9:F1:30:C1
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 0198537B38D3247574D6AC8647D55C5C53CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number: 09A3
Signing time: Tue 29 Jul 2025 00:00:41 +0000
Manifest this update: Tue 29 Jul 2025 00:00:41 +0000
Manifest next update: Wed 30 Jul 2025 00:00:41 +0000
Files and hashes: 1: H2ciew030YT_ZKL58SNBSDs0iQc.roa (hash: dr7FPAyraTf1nqxR0HjlvGsow4ZxkGibDCSpB0tZ3CU=)
2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: pq6ReGfdl8aa46PWjfPhqtSjcoUM/L9u6evJ6hMaZrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:38:d3:24:75:74:d6:ac:86:47:d5:5c:5c:53:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Jul 29 00:00:41 2025 GMT
Not After : Jul 30 00:00:41 2025 GMT
Subject: CN=490510008f0935765dac7255f3a16f05a9f130c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:21:4a:62:34:6b:76:c0:37:b9:61:99:dc:
b2:66:8a:2a:59:be:0e:e2:5f:d1:35:cc:b9:05:1c:
06:06:50:85:ab:9e:c5:82:e6:95:b5:3c:0d:91:dd:
60:8c:d8:da:c2:23:fd:8a:41:04:b3:82:bc:69:9d:
2a:e3:4f:b2:5d:5f:a7:b8:0f:5e:a3:58:26:44:33:
d1:32:e1:ee:4f:31:0e:b4:38:31:0f:49:2b:21:f6:
81:cd:d3:e8:64:87:2b:16:6f:69:7d:50:91:e2:12:
ba:82:e0:b9:e5:ce:b1:41:5c:d4:e3:83:26:1e:72:
fa:f7:33:9e:76:50:d9:78:e4:72:2e:51:f0:3e:e9:
fe:e2:58:0b:b5:ef:34:55:af:ae:f9:b1:bc:cb:b7:
07:16:89:fe:62:52:58:62:cc:ed:e6:1d:18:ee:7e:
b1:05:c9:1b:9f:03:4d:79:5e:39:53:6d:70:ac:fb:
2d:a1:83:de:c1:04:2e:aa:d6:6a:ee:82:5a:65:2d:
b9:db:68:e8:1b:c3:32:56:ce:3e:58:2d:41:ff:2c:
33:9c:b7:9a:f1:26:2d:f6:82:83:5a:1c:2c:ce:07:
2c:e4:fe:0e:3d:02:a3:bf:0f:36:d2:f7:66:ed:56:
02:00:7a:ca:9e:70:4d:03:c3:7e:20:3b:41:a0:a2:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:10:00:8F:09:35:76:5D:AC:72:55:F3:A1:6F:05:A9:F1:30:C1
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2d:81:4b:48:a5:a3:36:08:ea:f9:2a:47:1a:2f:2e:34:cd:
b8:22:99:47:f5:a2:3a:76:d0:f6:d3:35:cd:b3:83:66:49:cd:
8b:6a:40:18:92:ab:81:c7:96:4c:fb:4c:8b:f3:da:e4:d8:44:
8f:ef:ec:cc:7e:6a:f7:ee:f9:77:ce:20:99:40:d7:4d:ce:b0:
2b:4b:17:64:9d:b0:ad:af:1c:36:25:de:4a:5f:78:76:20:9b:
64:07:54:98:dc:7b:4d:9a:f0:a6:76:5f:12:a1:f1:08:a7:e3:
f4:2c:8d:5a:5d:de:cf:0f:e5:94:9a:e6:9f:9b:b3:7f:a7:10:
c2:45:3c:3a:3b:8b:32:bc:96:ff:26:ae:66:a6:36:2b:ca:16:
64:0a:d5:30:73:7a:26:d1:4f:2c:78:fe:e3:9d:ca:d7:ef:8d:
3a:7c:a2:f0:8f:f4:e1:45:6c:8a:59:29:83:79:3a:aa:e4:4b:
1f:a3:46:b1:aa:a3:93:81:23:eb:17:c3:81:a6:67:e0:8e:ba:
4e:f0:39:0f:de:44:be:7b:1b:1f:fd:00:1a:c9:ad:ca:f5:a2:
a6:86:fa:21:87:6d:d6:ae:0b:e6:1b:a6:02:c9:16:a6:6e:ab:
7f:ac:2a:6a:cd:9d:7a:fd:33:cb:3a:51:1a:6b:6e:1f:ed:a1:
ec:8d:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:57:37 2025 by rpki-client