Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: CYQOLotEac4VFZ9AEPFNx3oliYykNVxIDx5Zusj1IP8=
Subject key identifier: 93:65:A4:0E:D6:10:69:D8:3B:D4:1C:5B:48:F3:A5:71:89:34:E4:E5
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 0198C64936C7DE78384D1D82FCA8481352E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 0FD1
Signing time: Wed 20 Aug 2025 07:02:23 +0000
Manifest this update: Wed 20 Aug 2025 07:02:23 +0000
Manifest next update: Thu 21 Aug 2025 07:02:23 +0000
Files and hashes: 1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: R80NxdzBiruEEhdN9WTfBHxq2RRF+nAgxl0xDYmO4Og=)
2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:36:c7:de:78:38:4d:1d:82:fc:a8:48:13:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Aug 20 07:02:23 2025 GMT
Not After : Aug 21 07:02:23 2025 GMT
Subject: CN=9365a40ed61069d83bd41c5b48f3a5718934e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:9e:4f:5a:fe:fe:35:16:f1:6a:4d:69:e9:
04:30:cd:0b:23:17:df:7a:5a:84:11:05:b5:46:8a:
69:a9:cc:42:11:41:62:bd:ad:ff:20:08:13:4a:7d:
63:ed:a4:5f:64:3c:9a:b0:9b:76:b2:2d:34:87:ba:
cb:a3:25:a4:39:ea:8b:a8:0b:3e:ef:6d:f1:ed:4a:
b3:08:f1:0e:63:fe:87:f9:6b:18:04:cd:60:2c:da:
e5:c7:3c:3e:99:13:d7:b2:e4:f1:d0:e9:2f:ab:ea:
74:7f:d1:eb:73:d5:a9:c9:08:77:1e:55:17:74:bb:
56:c6:58:bf:c8:6f:37:d1:e4:a7:db:9e:70:b7:51:
54:3b:0e:e5:27:6f:55:21:69:b4:78:ef:9f:15:57:
66:8c:f5:49:74:f4:a1:11:68:bb:bb:5f:c0:56:48:
a5:b7:de:31:0f:43:9c:4b:90:72:65:3a:54:cf:33:
2c:38:f7:79:cc:17:6e:84:35:15:d3:19:c1:a5:61:
3b:5d:6d:0e:d7:ae:85:d9:3f:c2:86:36:24:86:ad:
c8:1a:78:85:b2:d6:b2:49:7a:59:df:bb:97:19:e4:
97:47:6f:65:93:39:04:ec:04:cf:96:d4:3b:5b:7e:
11:f7:2c:2a:27:db:09:62:02:db:7f:f4:4c:38:a4:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:A4:0E:D6:10:69:D8:3B:D4:1C:5B:48:F3:A5:71:89:34:E4:E5
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:02:e9:da:80:16:54:71:6c:fd:1d:be:7c:b4:5e:4a:67:67:
6c:15:ca:8c:fd:d9:5d:9a:72:54:89:a6:a2:c5:77:1f:70:1a:
69:bd:16:ab:2b:f5:0c:91:5f:e8:03:ff:42:ad:fc:f0:0c:03:
be:c8:1d:66:22:14:f4:40:5b:1b:c4:ec:bc:8b:2b:77:fe:ad:
f7:00:e1:48:5b:30:2d:11:69:88:f0:02:f7:5e:b3:6d:7b:5f:
03:ae:d4:e5:9d:cb:3c:11:53:63:b6:33:b7:ea:05:d8:07:51:
23:9d:c2:9c:80:e7:9d:56:7c:18:3a:8c:31:ea:25:bd:a3:fd:
34:3c:39:9a:ae:db:39:59:8f:10:59:de:98:a6:2c:5e:68:79:
5c:4e:12:1e:29:a9:19:3b:dc:74:e8:7c:f4:92:59:b6:0b:09:
35:7a:ac:9c:a3:dd:cd:82:71:8a:62:30:4e:9d:49:19:96:fe:
e0:8e:47:e8:e3:5c:e7:08:5c:98:9b:52:3a:38:2c:37:30:3b:
22:3a:b7:35:24:a3:e5:dd:fb:ac:e6:c7:f2:af:05:28:4d:a8:
5b:e0:1d:89:12:d2:df:54:1f:af:ea:a7:9d:bd:8c:8f:e8:10:
db:1a:95:97:27:e0:16:39:9c:84:3f:33:bf:65:02:a3:0e:5c:
0d:a7:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:54:00 2025 by rpki-client