Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: kCrnKH3aUdrFJ6xUkD8o/I1V2saWKWn1uJ3lmIZ+HEc=
Subject key identifier: C6:73:AB:5F:8D:E2:01:1F:EF:5D:FE:F0:DA:1F:2B:25:18:F0:4A:E6
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 01995AFB3E1A68A0D3ACC198D137B85449E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 1522
Signing time: Thu 18 Sep 2025 04:00:38 +0000
Manifest this update: Thu 18 Sep 2025 04:00:38 +0000
Manifest next update: Fri 19 Sep 2025 04:00:38 +0000
Files and hashes: 1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: dpHNTfKnm/xxQvAeYNa6R2R0vW/xTp3gp/1KZLfvCis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:fb:3e:1a:68:a0:d3:ac:c1:98:d1:37:b8:54:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Sep 18 04:00:38 2025 GMT
Not After : Sep 19 04:00:38 2025 GMT
Subject: CN=c673ab5f8de2011fef5dfef0da1f2b2518f04ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:7d:fb:fd:40:51:e9:b7:e3:20:e4:58:32:
11:eb:81:c4:ef:5b:72:ae:dd:38:20:64:cd:7e:5a:
99:44:dd:bd:b2:da:6f:2e:bc:49:26:d6:5c:d5:32:
bd:eb:6f:e3:a5:f0:99:51:f6:47:e4:50:39:f0:03:
e4:f6:7c:89:fd:0c:d4:df:c0:80:af:22:2c:3e:db:
28:a3:a9:68:1c:f0:4e:69:2c:5f:28:2e:72:c3:c6:
0b:92:74:f8:4e:5d:84:de:df:a2:de:69:15:41:4b:
d6:84:96:33:42:ca:34:fe:8b:e6:b3:f3:92:34:63:
a5:d2:ac:7b:9b:98:c6:ae:73:a4:43:3d:9f:56:99:
33:1e:92:33:2f:35:b2:be:d7:0d:8a:a8:78:cc:69:
e7:9d:8c:12:81:73:c2:08:ce:4a:36:f0:c2:af:e8:
c5:d5:f4:f3:d5:b8:98:ce:23:54:44:81:ba:a1:52:
51:da:e5:a9:41:81:7c:a5:92:a5:a7:78:a3:42:15:
e3:ee:b2:36:f6:21:6f:4c:19:d4:f1:d8:fc:09:90:
16:7e:9d:c7:18:2c:58:8f:d2:7f:49:17:e4:e8:cf:
b7:2d:52:95:49:3a:9a:d2:38:73:6d:78:c5:d0:59:
cf:c1:72:f3:fd:8c:2c:03:1c:6d:47:c9:2d:b4:88:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:AB:5F:8D:E2:01:1F:EF:5D:FE:F0:DA:1F:2B:25:18:F0:4A:E6
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:89:54:ea:e3:d4:c6:19:42:12:39:46:55:d1:90:f4:61:d3:
12:dc:05:1a:5c:13:56:95:fc:68:94:ba:ad:45:1c:66:90:2d:
33:cf:4a:64:03:f6:62:01:bb:3f:48:54:56:2c:aa:06:7e:41:
72:2a:06:05:25:cf:0d:b3:ba:67:6b:f0:94:12:3e:44:ed:44:
e6:db:a5:47:41:75:2f:d6:7b:33:cf:d4:c6:eb:9b:4d:93:41:
eb:a4:28:60:54:2a:f4:3b:7e:90:e8:ef:71:58:04:39:ca:2a:
71:70:5a:22:bc:6c:66:52:cf:d2:7d:1e:59:3e:81:e1:fb:7a:
ad:54:cf:a5:b2:7d:58:3a:fa:40:14:dd:45:10:a0:c1:b9:68:
79:2f:16:3a:d6:1a:6e:73:a1:2f:03:5d:8e:38:15:62:aa:ac:
a0:d8:dc:46:9c:5d:32:46:36:b9:14:ab:24:16:3a:57:7f:43:
23:49:37:4d:41:f9:fe:fc:f1:55:cb:91:13:2e:64:27:77:ca:
29:87:bd:a1:44:78:92:18:e8:db:ed:6f:aa:6f:99:d0:83:b2:
52:e9:e7:9f:fd:a4:37:1b:ad:35:3b:f5:6e:e2:49:9c:54:77:
ed:0b:8c:9d:16:af:54:54:27:14:54:88:68:ec:e6:39:fe:b8:
e4:88:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:51:57 2025 by rpki-client