Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: P8WBpHQdNP/q8/hpUqH1kKYjckiT5YOo2Sc0o+O+ZT8=
Subject key identifier: 97:58:B9:6F:66:9E:88:C2:74:FD:84:44:E0:2B:5F:19:9F:62:20:75
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 019923310266256D9A281EC5337CA9FE4B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 081F
Signing time: Sun 07 Sep 2025 08:00:38 +0000
Manifest this update: Sun 07 Sep 2025 08:00:38 +0000
Manifest next update: Mon 08 Sep 2025 08:00:38 +0000
Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: 9w/B+70wdYyLoVwS7CRLhaT/CuQXwpxMSWbsbhjj4nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:02:66:25:6d:9a:28:1e:c5:33:7c:a9:fe:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Sep 7 08:00:38 2025 GMT
Not After : Sep 8 08:00:38 2025 GMT
Subject: CN=9758b96f669e88c274fd8444e02b5f199f622075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:e5:6f:b3:ce:fd:43:6e:1d:3d:4e:17:1c:
42:2f:2e:81:7e:dd:04:e8:49:29:04:e4:a5:e7:cd:
df:8a:fc:1d:04:6e:97:af:cb:df:5c:d4:e0:51:1a:
32:5d:3d:70:84:9a:ce:d1:ef:e3:45:66:5f:28:82:
d4:d4:d3:15:67:ae:49:d2:24:d5:21:24:27:11:91:
74:75:71:b9:21:17:4a:f9:eb:f5:39:a8:54:63:e4:
da:43:60:1e:96:d7:a1:b1:aa:9a:33:9e:0f:69:ab:
59:ac:c3:9c:81:92:6b:b9:c5:52:5f:1f:48:dd:8b:
89:f9:c9:9c:5f:2f:fb:74:75:e1:60:1b:7b:b2:9a:
4d:a3:26:4a:04:cb:4a:1a:00:fc:3e:77:80:42:9c:
6d:cb:b5:1b:a8:18:ef:1e:ae:05:aa:29:cf:7e:64:
2b:3e:6f:63:c4:a2:bd:27:1e:f0:0e:63:5f:64:6b:
35:e6:a5:0a:74:22:b6:68:b4:c6:bb:88:e3:80:fe:
aa:c2:f8:1f:c6:b0:ca:4f:b8:4a:bf:a2:46:38:50:
ae:f8:97:65:aa:0b:ac:09:f7:f8:23:20:f4:8e:07:
9e:3b:7f:23:0c:eb:bf:7b:a0:3b:50:bf:61:5a:14:
b8:5e:3b:e1:6f:ba:b0:15:da:fa:41:d6:06:0d:6c:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:B9:6F:66:9E:88:C2:74:FD:84:44:E0:2B:5F:19:9F:62:20:75
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0c:dd:7c:ac:fb:13:fc:20:53:e5:f2:34:f9:c3:f8:82:39:
ea:d7:8d:e3:75:a0:01:2a:2f:c0:d2:b2:05:5d:cd:e7:9d:f4:
12:8f:57:26:47:7f:12:c6:a9:27:7d:5b:0e:eb:73:b0:f7:15:
c4:53:1d:01:da:c3:eb:9a:bb:17:16:92:ea:ad:33:13:5f:ce:
da:92:22:a2:b9:d9:1d:2d:e2:f7:c5:fa:11:a0:3a:e8:fa:2b:
58:e9:8a:94:c1:e1:06:33:e5:5e:c2:5a:1c:58:4a:f2:95:4e:
85:b9:22:f8:03:f3:0d:c9:41:60:f9:1e:40:4a:9a:ce:49:62:
52:0c:84:12:80:53:40:53:da:31:18:8e:2c:f6:64:ae:34:15:
94:67:98:ff:18:87:6e:50:dd:31:e4:dc:3d:29:ca:0e:00:a2:
5c:dd:96:df:89:df:4a:63:11:02:71:ea:01:41:5f:bf:f9:72:
00:34:57:e9:bd:68:73:85:30:e0:d5:e6:18:33:42:85:74:91:
7f:ca:97:7c:62:1c:c9:0e:c9:8d:a0:c0:b7:d3:53:5a:f7:18:
93:c8:13:a9:86:8b:00:6d:fe:ce:74:e4:5d:a8:a5:41:6f:3a:
04:61:25:50:4e:7a:30:8c:81:a8:dd:0f:dc:80:d7:e6:6f:00:
76:51:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:09:20 2025 by rpki-client