Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: 1ED/dxmhUAYRgaaP5PQ1MhkyAWpWhZMynrG2b6Ip4F0=
Subject key identifier: FC:D2:A1:2A:09:79:0C:67:23:80:45:FF:86:B0:04:B3:5C:0E:57:1E
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 0199307EE3E3E02F823D14E6327690F25636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 167E
Signing time: Tue 09 Sep 2025 22:00:46 +0000
Manifest this update: Tue 09 Sep 2025 22:00:46 +0000
Manifest next update: Wed 10 Sep 2025 22:00:46 +0000
Files and hashes: 1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: LvlSvfW4yg6gKPqhd+ab+vQURB5jI/O8i/353HbpnMs=)
3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=)
4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:e3:e3:e0:2f:82:3d:14:e6:32:76:90:f2:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Sep 9 22:00:46 2025 GMT
Not After : Sep 10 22:00:46 2025 GMT
Subject: CN=fcd2a12a09790c67238045ff86b004b35c0e571e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:c2:32:ba:c1:ec:2a:fb:13:07:a7:d5:c4:
c4:60:ad:14:68:e5:7b:12:dd:10:c5:9d:08:77:9c:
12:44:43:d7:61:ba:f8:14:56:2a:45:62:86:ae:ff:
f5:49:97:92:3e:67:e9:94:83:75:25:ca:0b:e4:7e:
13:32:ed:38:7c:af:59:7d:9e:43:75:03:a3:f8:b2:
9a:e2:63:89:d1:38:4e:6c:4f:a2:e6:49:55:49:a1:
62:fd:0e:77:f7:51:a9:fa:e9:26:9e:d1:f6:c7:b6:
f8:21:d5:91:48:2d:54:67:e2:8a:df:65:9c:13:87:
57:7f:6b:ae:f7:23:53:e3:d1:a8:89:8a:a0:f8:12:
93:6d:ba:e1:1f:f9:ec:e1:e8:a6:7e:e4:b1:98:50:
77:ae:1b:dc:8e:da:50:56:c5:f8:e0:66:a2:c9:14:
79:09:fe:43:76:7e:d6:ca:ea:d2:31:3d:67:2e:65:
c2:bf:41:08:34:7d:ad:7f:e8:5a:7f:dd:7c:d3:ed:
d0:2a:0b:98:3e:d9:7f:ea:cc:e7:0b:21:ba:28:ab:
4d:7d:b4:97:b3:a5:d0:94:3f:32:88:84:1d:23:3c:
f0:e1:e4:ac:45:22:b8:48:36:4b:58:86:da:90:34:
dc:bb:54:e3:e0:e1:3d:64:a3:75:da:dd:e6:87:43:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D2:A1:2A:09:79:0C:67:23:80:45:FF:86:B0:04:B3:5C:0E:57:1E
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:2a:f8:e3:fd:5a:bf:c4:a1:b5:12:db:24:c9:b4:80:7e:
99:b8:06:87:4a:f4:06:23:41:0a:41:58:22:6c:e3:2e:fa:9b:
95:ce:43:3e:f3:c9:18:75:4b:bd:70:45:bc:e7:e2:25:6d:50:
c2:83:e9:a9:b4:f5:8d:c8:8e:75:c7:23:d7:dc:1a:de:a3:6d:
57:18:2e:ec:da:d2:a7:e7:88:7f:3a:8c:ce:b1:fa:3c:d5:08:
c0:3f:97:a4:8a:d7:98:34:53:88:3a:33:71:e2:93:f7:71:43:
e8:20:f2:c3:74:84:ee:86:20:e7:f0:20:72:14:eb:57:04:8c:
f9:09:c8:c8:70:a9:01:c9:27:51:fd:34:de:28:8c:e1:96:a4:
75:50:15:8c:3f:f7:55:b2:48:bc:5a:d2:1c:aa:3f:e6:ec:a5:
d9:da:49:01:f9:7a:7d:cc:39:e6:ed:91:03:ee:56:b3:77:cc:
31:87:89:94:fb:63:8a:3c:67:f7:1e:66:80:8b:b1:a0:c1:11:
b2:91:59:98:59:43:1f:10:e0:ea:28:00:fe:f9:91:45:d2:5f:
ce:b9:ca:65:4e:4b:95:dd:68:73:dd:1d:14:a0:0c:36:48:cb:
65:a2:87:10:3d:58:1d:6f:96:8a:63:1c:4a:46:a2:0b:01:e3:
0a:91:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:26:35 2025 by rpki-client