Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: TbR2nU5zIdp5KpsvV9pBt4g1rev1bS/6vVeWmbWey/4=
Subject key identifier: E7:77:BB:47:4D:A2:E0:21:52:04:A9:3E:43:79:79:98:5F:3E:99:07
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019916880A24DFF241752E9FB93AA273D84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 13A1
Signing time: Thu 04 Sep 2025 21:00:38 +0000
Manifest this update: Thu 04 Sep 2025 21:00:38 +0000
Manifest next update: Fri 05 Sep 2025 21:00:38 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: b/S+R7rOC0ms/j4N9PEHUhyKnXCcX/Gpdrmmz4u++IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:0a:24:df:f2:41:75:2e:9f:b9:3a:a2:73:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Sep 4 21:00:38 2025 GMT
Not After : Sep 5 21:00:38 2025 GMT
Subject: CN=e777bb474da2e0215204a93e437979985f3e9907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:e2:e5:8e:78:06:99:cf:65:39:67:6f:85:
f0:c7:91:57:e7:78:c1:55:40:91:b3:2d:c2:6f:d6:
60:cc:fb:fe:3e:f2:27:21:65:fb:c4:e8:8a:e6:55:
54:96:8f:c6:89:af:54:d8:f7:8a:22:75:83:dc:7d:
8d:fa:4d:08:8f:f3:db:c9:99:a4:c0:e7:f1:d3:4a:
a0:9d:23:ab:76:3e:f8:4b:da:c9:9d:94:93:5e:60:
db:ec:9c:6c:7d:01:09:7b:0b:14:f4:b7:af:ad:8a:
4b:a0:b1:7b:dd:a1:27:1d:58:06:af:83:68:fc:31:
be:14:87:37:68:b2:cb:15:4e:c9:6e:8b:a3:ab:54:
21:e2:8b:88:e6:a4:15:a8:b7:6a:fb:4e:b1:54:ec:
6e:00:8f:25:89:e1:1d:b8:0a:57:7a:ba:49:83:fd:
6e:37:85:77:ef:df:3f:75:0e:25:68:03:27:ef:44:
c1:ee:57:05:6f:45:94:5c:cf:0b:cb:69:25:9b:b2:
ab:f5:01:6f:b4:94:1e:da:c1:bd:5f:08:86:35:8a:
1c:75:06:58:38:92:6d:2c:86:e1:19:3e:68:c0:07:
66:f8:5f:eb:b8:f8:63:ac:8a:e9:b1:bc:80:b7:b6:
37:3a:49:17:a1:f7:4f:3b:c7:0b:e4:04:9c:5a:5a:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:BB:47:4D:A2:E0:21:52:04:A9:3E:43:79:79:98:5F:3E:99:07
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:74:b1:f1:a9:e9:a7:cf:1d:23:7e:e4:92:94:c9:d9:4e:28:
07:2f:ac:aa:dc:89:7b:1e:81:f4:70:6b:ba:8a:10:03:bc:f8:
1e:1c:92:b6:3e:ff:28:59:d1:ad:51:cc:1d:ba:41:30:06:cb:
53:54:1a:99:64:2a:73:c1:5e:a4:52:24:58:c4:58:0f:12:4d:
f3:fc:20:79:65:b0:04:67:97:8d:44:88:75:63:7d:0f:62:ff:
a3:19:40:17:c8:45:ba:37:28:ec:c9:56:38:94:5c:f1:28:a2:
dd:47:d6:5a:df:96:c2:fb:9e:52:04:f2:da:c3:93:16:b4:32:
de:fc:a3:0d:1e:f4:ec:26:82:7c:66:9c:40:4b:a4:db:c2:c1:
fc:7e:af:64:f7:07:09:1b:02:c5:f0:81:45:a4:dc:2b:4c:cd:
07:d3:4c:35:d7:d5:44:16:5f:f0:7a:e6:a5:f1:39:cf:d1:37:
df:3a:42:0e:c4:03:19:8a:a2:1d:32:07:af:cf:aa:18:29:e5:
30:69:6a:39:94:c8:38:ae:8c:a3:08:9e:bb:1e:cd:23:5a:42:
1f:6b:4c:b0:34:50:5c:20:5a:c7:4d:f0:34:8f:17:5e:cd:8e:
b2:2c:93:d2:35:5f:f7:fa:02:3e:4a:45:15:6f:b0:e9:a0:06:
8f:13:02:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:22 2025 by rpki-client