Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier: vP8kJGJpBnk+z2WVdRe4lkNGDT4azs79Irao82GHNeo=
Subject key identifier: 86:FD:9D:37:AB:7B:E3:F6:2C:BA:88:2C:81:0F:9B:F0:E4:67:D0:53
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial: 019922C30E08558E8C3567736FE2B4175A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:32 +0000
Manifest this update: Sun 07 Sep 2025 06:00:32 +0000
Manifest next update: Mon 08 Sep 2025 06:00:32 +0000
Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=)
2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: VOHwWvzutNAMNbUXHARjYLxt06cpvSRwyD/SgwA2Gp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:0e:08:55:8e:8c:35:67:73:6f:e2:b4:17:5a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Validity
Not Before: Sep 7 06:00:32 2025 GMT
Not After : Sep 8 06:00:32 2025 GMT
Subject: CN=86fd9d37ab7be3f62cba882c810f9bf0e467d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:31:9c:ae:f1:6a:29:31:b2:a9:d4:9a:92:
5a:14:5d:49:0c:04:45:89:13:b1:52:cd:72:b0:fe:
f2:94:65:5f:7b:bb:f6:a9:70:77:7d:97:a0:09:ad:
bf:41:2b:14:8f:12:44:a6:0c:d5:be:d5:e1:e1:c1:
07:8f:5d:93:61:08:ed:67:c5:36:15:00:2c:c4:69:
0b:3e:2c:24:c7:4f:6e:e2:cd:e3:cf:a3:94:68:50:
77:16:12:c3:10:9b:15:d3:6e:63:e9:f0:dd:0c:40:
fd:35:53:63:8f:01:5a:7d:46:8e:f9:c2:e1:22:85:
2e:30:37:c1:15:b7:05:f6:cf:eb:36:a6:b2:d0:5a:
b5:5c:6e:65:16:c1:eb:e9:63:b9:85:c7:4f:e7:79:
c8:aa:54:e1:d5:b5:03:f5:1d:e1:09:ef:ac:69:c8:
f0:e3:57:d1:43:86:7c:bb:9f:40:b2:6e:36:ad:ca:
6f:9e:05:bf:94:d9:36:03:15:5e:88:9e:80:83:49:
f4:77:8b:66:90:47:ef:a1:e9:db:ae:d7:38:1c:68:
3f:81:1f:7a:fe:23:be:52:5b:f1:dd:0f:59:10:11:
10:97:72:ed:6e:6c:73:13:5b:1e:67:ad:6b:7e:03:
94:8c:13:5f:20:03:3a:7f:88:c9:84:a5:e2:f6:4b:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:9D:37:AB:7B:E3:F6:2C:BA:88:2C:81:0F:9B:F0:E4:67:D0:53
X509v3 Authority Key Identifier:
keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c1:cd:82:b2:b0:6e:a7:2d:76:36:3c:64:0f:50:de:c9:88:
8c:a7:5a:d3:be:11:3d:0c:f6:d2:24:ed:d7:fd:b8:33:7d:1d:
cf:72:48:ff:ca:12:58:e1:f5:3f:a9:31:91:25:f0:0c:cc:ef:
45:8c:fb:75:1a:61:1e:d7:58:62:18:82:46:11:c8:89:18:30:
b5:67:36:cf:18:6c:4b:a5:bc:f4:b5:4b:b9:c0:5a:6e:68:f8:
c7:b1:3c:ca:9e:be:5c:9c:b5:b7:64:a6:bd:57:94:05:f2:0f:
01:70:b7:71:0e:27:dd:ab:47:e9:82:2a:4f:df:25:25:da:12:
fb:99:d2:c2:0b:4e:b2:83:82:4b:d4:9b:e4:f6:47:f8:95:44:
61:1f:ca:d2:3e:08:6a:43:5f:55:02:da:ff:1b:ca:06:ad:81:
5d:ad:13:05:81:43:9f:f7:59:1e:9e:02:73:27:78:33:49:cd:
01:c1:55:2b:8f:36:32:f4:69:f4:2b:db:4e:67:73:a6:9a:00:
e7:af:04:59:81:92:3c:55:88:34:e4:94:08:e2:a5:62:18:21:
8c:6b:00:b1:07:87:d2:72:ed:f6:eb:52:25:b8:58:1d:39:eb:
3d:c6:5b:2c:b5:d6:98:aa:44:69:7c:17:8d:54:b4:54:21:0b:
fd:61:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:29 2025 by rpki-client