Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier: w7awJLQLAoDOGLLYpZ2qEGOPAN1NNujXS8i0UT7lROI=
Subject key identifier: F4:2E:61:38:FF:00:C3:66:CB:AB:AB:8D:CA:FC:7D:13:A9:25:0E:17
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 01992D7E333DDF73619303208236A1494B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number: 09BB
Signing time: Tue 09 Sep 2025 08:01:09 +0000
Manifest this update: Tue 09 Sep 2025 08:01:09 +0000
Manifest next update: Wed 10 Sep 2025 08:01:09 +0000
Files and hashes: 1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=)
2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=)
3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=)
4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: WbD5KV8v6wbqncXj5yL5Hit4NVETMsxZI+Zk0MDn8p8=)
5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:33:3d:df:73:61:93:03:20:82:36:a1:49:4b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Sep 9 08:01:09 2025 GMT
Not After : Sep 10 08:01:09 2025 GMT
Subject: CN=f42e6138ff00c366cbabab8dcafc7d13a9250e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:57:93:2a:07:90:66:99:48:8c:02:b5:1d:
5a:78:df:20:d6:79:17:5f:f9:2c:4b:aa:37:90:b3:
77:2b:d0:99:cf:77:ce:73:e8:ec:72:62:24:9b:b1:
2a:f1:b2:9e:55:5c:04:a7:f2:57:fa:01:2c:77:49:
4f:f1:02:b5:93:3e:05:c4:ba:72:52:ac:ec:74:a8:
36:a5:ec:b3:a2:64:e7:59:46:8b:d6:be:cf:f9:bf:
2d:02:6a:72:dd:fc:13:46:f6:e7:23:d1:6f:ad:3b:
c2:64:b0:fc:15:63:4e:7c:af:d9:cb:6e:09:79:32:
4f:c0:fa:6f:a1:3e:fd:ee:90:7c:76:cf:54:b1:e3:
af:df:e0:b4:87:33:c7:22:2b:cb:a5:a0:cf:47:5d:
e8:e0:0f:a9:96:c8:d6:96:2b:62:b5:0a:bd:49:3a:
03:aa:27:f2:80:22:f5:a8:d9:70:aa:24:73:13:0c:
36:1f:41:75:a1:0a:67:1a:d0:ca:79:e7:ae:49:10:
63:f0:21:28:fe:e2:26:94:26:5b:e8:e4:92:1c:91:
d9:c6:2c:de:23:44:cd:ed:58:61:0f:97:b9:43:63:
14:45:47:3e:81:d1:16:4b:0a:c4:3a:ed:8e:2f:ab:
85:d2:d2:96:b9:58:05:d5:40:16:db:42:58:b7:a3:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:61:38:FF:00:C3:66:CB:AB:AB:8D:CA:FC:7D:13:A9:25:0E:17
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:fb:fd:98:0b:54:97:31:74:9e:e2:7e:fa:1c:cc:0d:06:
0d:43:63:0d:b8:ab:e2:a2:38:a9:bb:48:31:d6:af:58:1d:46:
4a:e8:c0:db:d5:ae:44:26:44:2e:e8:a3:2f:ae:99:d0:eb:f2:
a2:4b:40:9a:0c:fe:3c:e6:4b:98:c5:a2:c6:31:d8:39:fa:4d:
57:18:2e:86:97:87:4c:89:6f:63:6b:49:7c:ac:12:e2:20:c9:
5a:0d:63:f0:0c:20:9a:b7:e3:7f:49:b2:bf:16:78:17:ed:82:
64:62:44:95:ac:ca:c6:41:df:e2:cb:ef:a1:f6:cf:c0:01:fd:
59:31:c8:e0:8b:c4:a9:c4:e2:a9:85:92:90:65:57:21:0e:b6:
d6:5f:eb:31:37:32:40:a8:c1:72:21:ba:72:57:25:72:59:da:
14:96:68:5e:e2:f4:75:a6:04:42:99:5b:78:90:6f:8f:d1:fa:
4d:59:c3:2c:5c:68:c8:84:00:90:70:45:a1:87:85:8b:ec:53:
01:06:f3:3d:ae:0c:63:03:a9:cc:ed:42:e6:f3:6d:e5:05:1e:
7b:f2:bf:cd:ef:b0:b8:09:fa:78:ab:8d:6f:24:e5:21:5f:0d:
00:4b:5b:2d:95:94:b0:cc:b3:d8:11:8d:34:d1:3c:a3:54:f1:
3e:ad:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:04 2025 by rpki-client