Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: m1zP9yo5PO+WDJWKq7wGU1uACUCbykVwdTe0N+3pwqc=
Subject key identifier: 75:2A:C6:86:12:44:74:1C:8E:77:DD:57:09:78:00:D2:0C:F2:96:C0
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 01991764A49D093CEFC997CF64F1BB586BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 166F
Signing time: Fri 05 Sep 2025 01:01:35 +0000
Manifest this update: Fri 05 Sep 2025 01:01:35 +0000
Manifest next update: Sat 06 Sep 2025 01:01:35 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: FBUBuqu4Uk1rFfK4o0vggBmOpm/nJSrUG893SquQlyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:a4:9d:09:3c:ef:c9:97:cf:64:f1:bb:58:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Sep 5 01:01:35 2025 GMT
Not After : Sep 6 01:01:35 2025 GMT
Subject: CN=752ac6861244741c8e77dd57097800d20cf296c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:b1:2e:6c:09:a2:20:eb:5f:fe:8c:05:23:
f0:0b:6a:e4:a2:e6:1f:2a:1c:d8:c5:80:56:e2:db:
76:3e:fb:0d:d8:9e:44:57:1d:6e:72:2e:01:06:a8:
38:d6:55:85:b5:ad:a1:de:cd:96:bc:29:df:29:9f:
8b:d5:96:0a:a0:f9:0f:c5:cd:05:8f:8d:09:87:30:
83:c3:32:96:ba:65:13:04:ba:e5:1b:ad:f0:2d:c6:
91:6e:04:dc:65:bf:3c:15:9f:90:2b:70:7d:a9:41:
57:0e:fd:b7:0a:b9:1e:dc:38:8b:ae:ae:da:3e:49:
4b:51:41:a6:b4:d2:1c:fc:c1:52:e7:5f:f2:4e:af:
1a:ed:4a:54:2b:76:5b:d7:1b:e9:12:5b:b8:f0:67:
ab:1c:86:e7:99:27:88:e4:dd:7a:15:63:36:f2:9d:
09:da:17:11:6b:e5:27:26:1d:2c:85:23:5f:bb:71:
91:47:e5:b1:99:f2:c3:1a:34:39:01:ac:14:a7:f2:
8b:96:08:3c:c2:61:c7:db:aa:28:b2:f7:88:a7:73:
ee:d6:3f:9a:c0:7c:db:d7:04:98:3c:8f:12:5d:32:
af:84:93:90:9f:55:aa:b0:e3:b9:fe:a5:33:1e:7e:
be:46:9f:0d:91:f9:1b:cc:a1:83:bf:cb:23:78:a7:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:C6:86:12:44:74:1C:8E:77:DD:57:09:78:00:D2:0C:F2:96:C0
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f0:c6:cb:9c:1e:99:1e:03:0c:cf:fb:e8:0e:1f:7d:06:d7:
ee:95:47:4c:f3:a1:81:6b:0b:c3:4d:3d:95:52:82:15:f9:96:
c8:a8:c8:d1:4b:9a:40:5b:0c:f9:01:1c:05:8c:93:e9:b2:20:
5f:16:13:1d:a8:fc:78:6f:b7:a2:2e:4d:f6:0e:17:0c:30:7c:
51:af:14:99:38:f2:b9:f8:e8:e6:3a:24:65:b5:6b:bc:fe:08:
ca:18:7b:9c:0a:dc:8c:4d:ed:f8:20:cc:9e:b4:5a:30:d8:b1:
f5:0a:96:bd:98:ce:e8:55:71:c0:86:de:a6:2b:47:51:5d:f7:
9e:9c:c7:2f:bd:ef:fa:e9:c9:eb:27:ab:7c:09:92:63:92:ea:
2f:a3:b6:6f:fb:f2:24:50:7c:eb:e0:e4:6e:bd:ab:56:21:56:
1b:eb:50:98:37:68:d7:f1:a1:76:dc:6b:92:da:67:7c:a5:a5:
29:ac:fe:8a:f8:38:91:93:69:89:08:3e:96:5b:a3:c0:1b:14:
56:cf:79:1b:f9:67:d5:f4:2a:59:09:19:fe:e8:a7:71:11:4f:
12:c8:da:9d:51:8d:6c:d2:2c:63:0e:16:ee:ff:3e:d8:77:23:
d7:36:6d:00:46:b0:d4:1f:6d:3c:3d:2c:e1:bd:98:fa:1d:44:
9d:6b:c1:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXZKSdCTzvyZfPZPG7WGvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MWM2N2JkYjZkOGMyMzBmY2RiNDI3YTlmNzFiODAxMzU4
NzJmYzIwHhcNMjUwOTA1MDEwMTM1WhcNMjUwOTA2MDEwMTM1WjAzMTEwLwYDVQQD
Eyg3NTJhYzY4NjEyNDQ3NDFjOGU3N2RkNTcwOTc4MDBkMjBjZjI5NmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww6xLmwJoiDrX/6MBSPwC2rkouYf
KhzYxYBW4tt2PvsN2J5EVx1uci4BBqg41lWFta2h3s2WvCnfKZ+L1ZYKoPkPxc0F
j40JhzCDwzKWumUTBLrlG63wLcaRbgTcZb88FZ+QK3B9qUFXDv23Crke3DiLrq7a
PklLUUGmtNIc/MFS51/yTq8a7UpUK3Zb1xvpElu48GerHIbnmSeI5N16FWM28p0J
2hcRa+UnJh0shSNfu3GRR+WxmfLDGjQ5AawUp/KLlgg8wmHH26oosveIp3Pu1j+a
wHzb1wSYPI8SXTKvhJOQn1WqsOO5/qUzHn6+Rp8NkfkbzKGDv8sjeKenJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUqxoYSRHQcjnfdVwl4ANIM8pbAMB8GA1UdIwQY
MBaAFIYcZ7222MIw/NtCep9xuAE1hy/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUt
ZmI4NTNjNjUzMzRhLzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUtZmI4NTNjNjUzMzRh
LzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfDGy5we
mR4DDM/76A4ffQbX7pVHTPOhgWsLw009lVKCFfmWyKjI0UuaQFsM+QEcBYyT6bIg
XxYTHaj8eG+3oi5N9g4XDDB8Ua8UmTjyufjo5jokZbVrvP4Iyhh7nArcjE3t+CDM
nrRaMNix9QqWvZjO6FVxwIbepitHUV33npzHL73v+unJ6yerfAmSY5LqL6O2b/vy
JFB86+Dkbr2rViFWG+tQmDdo1/GhdtxrktpnfKWlKaz+ivg4kZNpiQg+llujwBsU
Vs95G/ln1fQqWQkZ/uincRFPEsjanVGNbNIsYw4W7v8+2Hcj1zZtAEaw1B9tPD0s
4b2Y+h1EnWvBHg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:34 2025 by rpki-client