Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: qWuwncqwcyDTGQLwNfkykuqHkbHtuahQhUQmw+hGD00=
Subject key identifier: 7B:EF:9A:67:EB:2F:45:2C:33:32:8B:E1:3D:89:57:CD:05:F6:DF:30
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 0199225543DEAC480F2D03FB7596C78E1898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 01BD
Signing time: Sun 07 Sep 2025 04:00:37 +0000
Manifest this update: Sun 07 Sep 2025 04:00:37 +0000
Manifest next update: Mon 08 Sep 2025 04:00:37 +0000
Files and hashes: 1: O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa (hash: 3xRQqmBaiPMEC6+BvwWE12p1a9per8d/4WLoxHZdLwY=)
2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: tdO15EYzyPCZddoyRKL9bYU9i0Wym5EMJpF+2ts/ZxI=)
3: hs1Ttmuuy8oKm2rJqVYgyDXaPIw.roa (hash: Byo6rO4TnKOVrKw6LlKH8flPLRHULJLiFuZMsf82Wv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:43:de:ac:48:0f:2d:03:fb:75:96:c7:8e:18:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Sep 7 04:00:37 2025 GMT
Not After : Sep 8 04:00:37 2025 GMT
Subject: CN=7bef9a67eb2f452c33328be13d8957cd05f6df30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:98:68:2d:3e:cf:24:0b:40:fa:01:d5:8f:
da:08:d4:15:61:63:92:b4:60:e3:91:1f:4e:63:01:
b4:80:c2:2f:5a:ae:f3:d6:35:ca:a7:b5:63:f5:17:
f7:64:6f:36:ce:3e:da:58:47:3c:db:ba:f4:b5:4a:
61:6b:a5:a8:8a:fa:d1:5d:88:e5:74:f9:3c:59:82:
7f:2a:f5:cc:d1:1b:32:58:e5:3f:31:6d:aa:19:2e:
7d:a8:bd:f2:62:77:0d:bf:57:25:eb:51:bf:74:2c:
44:96:fe:99:fa:6d:a5:4e:28:f0:41:47:cd:8c:44:
d0:58:51:af:d5:e9:df:8e:a6:25:d3:54:dd:29:e4:
90:1b:14:61:61:00:3f:e3:4b:6c:4a:92:cd:81:0e:
e3:fe:5f:5b:79:ba:4c:34:4e:0a:1b:42:b9:5d:3c:
bd:18:ba:82:43:44:36:cc:f5:1d:10:90:5d:32:d4:
7c:70:73:8f:65:2b:64:8b:75:94:b3:bf:25:83:d7:
ac:a9:4b:50:d3:ac:a2:de:96:ce:f7:db:27:3c:2a:
60:16:1c:a0:fa:50:3f:10:88:b1:8b:9c:62:57:19:
8e:11:a1:5f:82:58:ae:88:1b:e6:e4:7d:a8:d1:4b:
4a:48:a9:1b:78:18:0c:91:70:bd:5b:4e:e9:fb:08:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:9A:67:EB:2F:45:2C:33:32:8B:E1:3D:89:57:CD:05:F6:DF:30
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e5:60:4e:a2:e3:be:5f:c2:5e:39:89:42:0a:79:8b:df:e1:
db:4f:b2:b3:57:d1:11:81:e7:9b:2c:67:9c:7f:ff:24:93:37:
72:7d:65:12:b5:3d:cf:71:42:b7:98:50:39:0d:b5:49:8d:2b:
7b:6f:69:97:c3:d2:3a:c2:5d:86:3d:14:a8:85:20:62:75:5a:
c2:46:0c:f7:2f:77:be:45:64:17:d5:25:c6:0a:74:39:74:9f:
f5:0b:aa:01:bf:25:07:13:2d:e4:ae:15:4e:bb:7f:4d:ab:4c:
b5:47:4d:25:9c:0c:19:35:02:23:37:20:30:da:e8:e7:9c:97:
32:16:9c:c4:0b:60:c9:60:63:2e:4b:bc:1e:3a:f5:f5:55:bd:
f1:0e:6f:00:64:a9:0c:85:05:32:cf:b0:91:2c:f0:05:ad:28:
f9:b5:f7:a1:cb:80:9c:07:c7:d9:03:c2:fd:a3:6a:39:e0:23:
c7:bc:70:f0:40:eb:1c:f9:9b:3d:5e:22:a4:d6:9c:7c:fc:bd:
d5:cf:be:a2:22:dc:ab:4b:70:87:b1:ed:e4:4b:1b:66:da:9d:
41:55:37:e4:49:e6:56:b2:a9:35:15:e5:65:9a:e2:5e:c7:80:
85:5e:f8:02:76:b0:27:9e:49:5b:14:ad:d0:1a:3c:aa:00:cd:
eb:19:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:01 2025 by rpki-client