Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
File: hugNGBwlPRTaHgupwdVmb1Ym1YE.mft (raw, json)
Hash identifier: QlPL5YPRjBKEhU8xS58TDM6elbHmByPb/j1evIjtb6U=
Subject key identifier: 8F:7E:39:F9:D1:30:FB:11:28:43:AA:F3:82:22:A0:14:62:12:4F:E9
Authority key identifier: 86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
Certificate issuer: /CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Certificate serial: 01982B24054FF3C68121D61E5EDBEF40BA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
Manifest number: 16
Signing time: Mon 21 Jul 2025 04:00:37 +0000
Manifest this update: Mon 21 Jul 2025 04:00:37 +0000
Manifest next update: Tue 22 Jul 2025 04:00:37 +0000
Files and hashes: 1: GduTVoXL90rcY5IbBMohmd6Di4U.roa (hash: FpxhDiPtRQpdrB9mwbp5ACWnV465MFksntDsy9t3DCM=)
2: hugNGBwlPRTaHgupwdVmb1Ym1YE.crl (hash: zFJrCe9q8sLpgO1lwp3Dn2ffItNAiGDXBBEb2TvcFZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:24:05:4f:f3:c6:81:21:d6:1e:5e:db:ef:40:ba:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Validity
Not Before: Jul 21 04:00:37 2025 GMT
Not After : Jul 22 04:00:37 2025 GMT
Subject: CN=8f7e39f9d130fb112843aaf38222a01462124fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:5d:37:53:13:60:d3:81:96:cc:05:fd:51:
19:8f:e6:af:6e:72:0a:09:3d:77:0a:f4:e4:36:99:
a1:75:e0:5d:59:8d:b8:aa:11:c2:99:14:fa:8b:70:
4a:9b:c1:39:4b:3e:20:05:a6:b5:24:06:87:f0:dc:
39:28:21:2a:92:de:7d:5e:7f:d8:cd:db:12:d1:20:
ab:ef:32:b1:49:51:0d:e7:4a:f7:39:16:ed:78:60:
df:62:b4:f6:ea:45:6c:fb:97:e3:4c:2b:57:52:d7:
81:a6:19:bc:ff:3f:09:f3:3d:14:82:47:6e:12:cb:
36:4e:be:73:da:64:30:13:f9:4d:c6:3e:fc:83:44:
55:7d:7b:20:30:e7:51:81:2d:9d:55:9b:cd:ee:42:
72:0f:8b:31:fe:45:04:26:2d:96:76:88:86:14:88:
26:31:56:2a:b2:73:af:ea:69:8f:8f:7c:6e:67:ee:
5f:d4:7f:a8:b3:50:72:8f:21:fd:c6:94:cf:81:bb:
4e:af:ff:c1:08:a8:b3:ac:f7:4d:0e:7a:82:22:cc:
01:d7:d8:7c:f4:ce:8c:f6:f3:7d:34:ab:be:a3:f5:
a2:4c:f6:bd:8b:bf:fb:7f:64:cf:07:14:ff:f7:32:
2b:7e:64:86:14:71:ae:17:35:d6:b1:d3:49:89:d6:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:39:F9:D1:30:FB:11:28:43:AA:F3:82:22:A0:14:62:12:4F:E9
X509v3 Authority Key Identifier:
keyid:86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fe:fa:c3:7f:bc:b3:29:03:44:19:99:c3:ff:59:d3:a3:17:
1e:0e:99:89:03:1a:38:75:fe:15:60:da:b8:e8:09:2e:74:a4:
fb:e4:73:05:bd:cc:78:ee:9b:b7:bc:be:7f:61:d7:99:3b:d0:
0f:a2:e1:a8:9d:3a:b3:31:2e:d0:30:fb:f4:dc:ee:ce:67:05:
f8:f3:6d:18:09:e0:6d:0d:3b:22:23:36:54:bf:fe:f0:c8:b2:
7f:be:ec:f6:e9:8c:ec:31:17:18:42:c7:07:3d:0a:96:23:8a:
c5:9b:f7:3f:16:c9:e5:6f:20:d9:40:80:d0:5b:4b:0d:4b:c8:
03:b8:7a:b8:6c:f2:f7:f1:e5:c4:ed:8b:cc:1c:02:4a:5d:64:
20:ca:63:40:03:be:10:54:0d:6e:4f:ad:3f:6c:17:ff:de:97:
48:c4:32:5d:e3:dc:0d:24:39:98:bf:c2:f7:a1:f3:c7:b0:ee:
36:e2:bc:e5:94:d4:23:dc:6c:0c:61:17:b5:af:3a:f8:0c:4b:
aa:0a:43:48:59:c4:70:b4:27:46:ec:9a:bd:e4:05:4d:7f:43:
78:5b:9b:70:b3:a7:f4:7d:36:90:45:89:e9:e0:24:ea:d5:d1:
f4:c5:be:0e:74:46:5b:d0:1b:9d:67:f3:df:f0:52:4c:eb:f5:
b5:77:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:35:43 2025 by rpki-client