Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: BDrylWIJjuhRByH7dbbCHnuL7b+8gcuP0y7PN4QSCMs=
Subject key identifier: 89:05:27:F7:2E:77:BB:E6:DB:EC:5C:02:5E:CC:42:45:D5:CF:AE:FF
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 019916F64A28DBC33858B44A4160F849E0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 04E7
Signing time: Thu 04 Sep 2025 23:01:03 +0000
Manifest this update: Thu 04 Sep 2025 23:01:03 +0000
Manifest next update: Fri 05 Sep 2025 23:01:03 +0000
Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: 3SDE1EgG2kBjnw8Hq4TEV+naXVf4xQBZJx8dNp6g/TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:4a:28:db:c3:38:58:b4:4a:41:60:f8:49:e0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Sep 4 23:01:03 2025 GMT
Not After : Sep 5 23:01:03 2025 GMT
Subject: CN=890527f72e77bbe6dbec5c025ecc4245d5cfaeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:b9:69:2d:40:7e:f2:1b:13:6a:fd:ab:df:
a5:10:39:e6:ce:38:d5:3d:13:8d:13:df:1f:25:f5:
a1:83:4d:fc:b7:f2:46:21:aa:02:4b:f7:35:84:2e:
da:62:12:39:d8:96:62:8c:b6:e3:6d:89:cb:18:8b:
34:e5:7a:82:fb:ee:f7:3e:45:46:ac:aa:4e:09:b1:
77:6d:e8:d3:93:6a:01:30:bf:20:75:09:cb:16:33:
98:fd:a4:b8:94:dc:1b:3f:78:b9:06:7b:58:16:dd:
e8:18:e2:fa:2c:35:f4:0f:55:8a:7c:af:4a:bd:e9:
15:6d:da:6e:d6:40:73:b9:8d:83:09:aa:02:7d:c6:
d7:ce:bb:49:0a:4d:a3:d7:59:b7:03:2b:46:46:1f:
a0:da:02:0d:ad:3f:a0:7b:11:55:34:02:7e:d0:50:
68:38:bb:0d:5a:be:eb:04:fc:14:31:6c:29:f1:e1:
1a:7b:db:51:3a:f6:51:69:38:0d:e4:5a:0e:f6:83:
de:10:4f:d9:01:3b:fd:25:ba:e0:36:29:4d:05:d2:
71:8f:f6:37:89:37:39:33:ca:c2:1e:28:ad:f8:92:
b1:b3:27:3c:fa:ed:65:3e:a8:ce:09:f1:48:85:1f:
e9:fc:89:91:9a:3a:2f:28:e1:10:9d:4b:a5:cd:14:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:27:F7:2E:77:BB:E6:DB:EC:5C:02:5E:CC:42:45:D5:CF:AE:FF
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b2:3d:94:95:ad:e4:e2:16:25:a7:0d:6e:b8:c0:df:19:33:
94:19:f4:c1:ef:e8:11:34:b4:e7:c1:74:5e:ad:76:30:b5:41:
15:9d:6f:65:86:49:08:f5:eb:8b:7e:b9:7a:f1:d9:8e:25:6b:
5f:a5:c1:79:9d:13:7a:ca:d8:9c:da:df:a6:46:06:5f:17:2c:
b1:71:af:96:33:ee:f7:11:02:fc:3f:75:b2:97:37:32:96:d6:
9c:5b:94:f3:81:62:26:91:31:f0:ff:51:04:6d:0f:ce:35:41:
81:39:54:7a:a5:3e:6f:95:48:01:b1:1d:6c:99:fa:fd:de:43:
07:d7:d6:10:f4:bf:18:99:84:99:ee:86:2a:5f:75:49:b9:f2:
12:9a:b3:ce:a3:56:f0:16:f4:a0:6d:98:07:1c:f7:58:ee:89:
36:32:ac:67:60:ca:fa:ac:4c:dd:60:e3:35:61:5c:7e:b6:59:
8b:ab:99:09:62:bf:1f:de:03:30:b7:ae:d1:a5:41:db:ae:4d:
38:58:f0:8a:13:30:c3:41:24:47:79:2c:b2:f9:c6:71:b5:b8:
cd:77:0f:ff:d9:d6:8e:3e:34:08:ad:e3:5e:e2:12:bf:56:c5:
c1:e9:ce:0d:3c:ec:b2:38:8b:b3:61:19:d2:9d:64:c4:45:58:
45:65:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:13 2025 by rpki-client