Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: w4i3x4kJ+CrIQMwZybRYljQk7BEjOah0mIOO5MoLFlE=
Subject key identifier: 09:54:7E:9D:84:21:CF:74:44:35:24:04:A7:09:C0:E2:3B:32:AA:E8
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 01976AAA721683D2D44FD885F610CBE4214A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 0F1D
Signing time: Fri 13 Jun 2025 19:00:44 +0000
Manifest this update: Fri 13 Jun 2025 19:00:44 +0000
Manifest next update: Sat 14 Jun 2025 19:00:44 +0000
Files and hashes: 1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: gvrznqXNMPbpsTadHe/OuA8G5lVibmovI9QkTArWnZM=)
2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:72:16:83:d2:d4:4f:d8:85:f6:10:cb:e4:21:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Jun 13 19:00:44 2025 GMT
Not After : Jun 14 19:00:44 2025 GMT
Subject: CN=09547e9d8421cf7444352404a709c0e23b32aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:83:66:47:1a:54:70:72:d4:98:21:dc:59:
14:a3:94:ee:e6:50:0a:a8:a1:20:db:08:b2:2f:52:
40:18:88:b1:2f:25:11:ef:df:fd:fe:d3:90:f4:23:
12:98:97:47:69:74:1a:f5:6b:a9:0b:7b:92:71:e5:
2e:75:2c:44:a6:b6:af:dd:ea:70:b9:a3:36:a3:97:
f6:7e:59:78:4f:56:68:0d:eb:33:09:89:62:02:00:
22:4b:0e:6a:ee:71:f2:4b:e4:a4:ba:0c:96:06:3d:
2b:22:48:ed:db:9d:df:b4:dc:5e:76:cb:16:d8:f7:
01:4a:43:d2:cb:65:d6:d8:43:83:61:b6:2e:56:c5:
f0:8f:1b:ad:2e:e0:9e:2d:4b:25:f3:8e:db:91:7b:
c8:9e:bb:9a:73:2d:2d:16:12:7c:cc:7e:6b:d0:99:
74:10:02:2a:48:aa:1c:64:1e:c2:5e:f9:47:4d:88:
46:85:e3:33:fb:bc:b9:aa:f8:d1:d0:40:96:0f:a3:
a1:4c:3c:80:b2:19:c5:b2:51:56:8d:93:82:c9:71:
53:fe:04:aa:87:f2:cf:3e:bc:97:b1:ad:16:2e:3a:
6d:c5:49:ea:d2:06:5b:ea:bc:1b:91:b7:81:18:9d:
34:d1:bc:bb:e8:14:5e:8b:b1:08:42:3e:6c:74:a6:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:7E:9D:84:21:CF:74:44:35:24:04:A7:09:C0:E2:3B:32:AA:E8
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e8:e5:31:5d:a8:8b:09:8c:c2:f5:dd:30:fb:16:3a:5a:68:
40:00:80:58:05:a8:2b:93:d0:de:73:1c:59:45:d3:bd:e6:08:
25:15:d3:82:0c:07:eb:9f:29:db:2f:1c:44:df:dc:c1:49:a0:
60:34:17:e1:6a:ae:96:ab:c1:ba:79:66:7f:77:45:40:44:dd:
bc:a8:eb:93:38:10:6a:2c:9a:aa:fc:20:e2:1c:9e:0f:ac:5d:
78:62:39:14:38:69:33:c0:a5:54:ba:7c:f6:c9:75:49:44:29:
47:b1:1e:13:76:b1:ac:01:1d:6f:87:f8:4a:56:ac:69:e7:18:
03:45:9f:98:1a:3a:f3:94:5c:75:8f:dd:95:92:19:a4:d8:6e:
27:ce:b1:95:8d:d7:5a:48:17:01:69:ab:f6:07:33:0e:ac:1c:
60:49:50:73:2d:b7:8d:06:9e:86:77:c0:8a:d5:c1:59:62:4f:
9e:72:18:b7:04:eb:f9:e0:62:07:fc:1b:db:ab:a2:90:84:6b:
9f:32:30:fe:b2:68:56:d1:91:71:60:8c:67:45:40:0a:bf:6d:
bb:fe:b6:aa:28:a9:83:1b:02:21:1b:91:58:de:cb:80:12:ff:
0c:4d:ee:8f:b2:c9:3f:b7:fc:23:97:29:70:16:04:7b:37:10:
5a:e3:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:43:09 2025 by rpki-client