Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: aMiQMNIK4AFWKGFHZiWDGkxuv0jDlbP/faXW8HnNXqk=
Subject key identifier: 43:B3:21:EC:4A:2D:AE:B2:9F:38:4E:FF:3A:DA:F4:80:05:B3:45:04
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 0199221F5CB40B7F6B64EC96ADFF7BFCB1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:01:44 +0000
Manifest this update: Sun 07 Sep 2025 03:01:44 +0000
Manifest next update: Mon 08 Sep 2025 03:01:44 +0000
Files and hashes: 1: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
2: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: MX0YoQXI8LEh9BDuh0sWEnHUyvID5aCuCzBvOHFl+0w=)
3: ie3Ij3d9SbHwlFZKN1iAPlTDPF8.roa (hash: LDgmzuKBYv7wHEv9dhDlxCP+uQjNRE91nisvU0AfRTM=)
4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:5c:b4:0b:7f:6b:64:ec:96:ad:ff:7b:fc:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Sep 7 03:01:44 2025 GMT
Not After : Sep 8 03:01:44 2025 GMT
Subject: CN=43b321ec4a2daeb29f384eff3adaf48005b34504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:65:19:9a:7b:9d:af:11:1b:ab:e4:46:9e:
26:5e:e3:6a:2f:cb:7d:de:56:1c:96:87:4e:4f:78:
c7:b6:36:ae:8f:a7:ae:e6:af:b9:41:3b:10:00:a6:
cd:3f:c1:2c:e9:d6:a0:b3:23:e3:9b:88:0a:dc:ff:
cc:e5:e4:dd:83:d9:7c:d1:03:d8:53:67:80:59:1b:
e4:ce:47:6d:a4:6c:bd:5d:39:c4:1a:73:a3:3b:43:
61:cb:79:3e:81:2a:8f:50:c8:2a:77:72:c4:7d:ca:
f5:63:35:10:cd:7f:ce:99:30:a5:8b:8a:ec:ff:2d:
1e:6d:f8:66:24:54:c0:71:d4:29:da:74:1b:b3:a2:
5e:c8:02:75:4d:47:a2:57:09:63:6b:a7:9e:fa:9e:
07:31:73:ac:2a:17:13:a4:c3:76:93:a5:81:ad:fe:
c3:28:22:25:ff:2f:1b:61:20:23:01:c2:a2:7b:3a:
3f:80:5b:27:63:a2:bd:9f:eb:0c:06:b0:d2:af:58:
64:f1:ae:5a:94:34:29:6c:19:83:6f:67:a6:b6:cc:
51:13:6e:20:e7:85:e6:98:92:14:46:8a:2f:ce:16:
31:19:9c:6c:fd:96:02:d5:6e:8b:53:cc:09:0b:c5:
42:3d:b5:8e:1d:aa:5c:f0:0f:d9:0e:e1:17:8c:61:
4c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B3:21:EC:4A:2D:AE:B2:9F:38:4E:FF:3A:DA:F4:80:05:B3:45:04
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:b4:8d:3b:40:ef:40:eb:ae:6c:c6:5d:de:57:5a:e0:ab:
73:d4:58:5c:8f:22:48:d7:eb:3c:34:2d:7c:98:3a:56:b5:ff:
a0:1b:d4:94:c5:e3:cd:6d:69:55:80:bb:68:aa:12:7a:5e:bb:
6e:55:e0:46:7c:d9:e1:35:ed:16:71:6e:e8:4e:b0:71:83:d7:
9b:be:15:65:52:e1:26:9a:d8:92:f4:4d:2c:93:08:27:ad:a4:
b8:ac:c7:7c:ba:79:21:70:5b:9d:d7:64:34:5f:fa:a3:85:6c:
44:0f:b5:bd:bd:cd:e8:7a:7e:8f:2a:01:ee:c6:06:52:c1:80:
24:e0:3e:64:15:13:a8:67:f4:5b:05:81:48:32:d0:58:4b:8b:
ec:fb:2c:c8:fc:05:2a:eb:e9:85:e2:9a:bc:b8:03:67:3f:30:
84:04:c7:d6:28:94:a9:28:1d:7a:df:b8:12:cd:c9:ec:b9:b5:
01:a5:cb:6c:c2:a9:b0:e1:07:ed:51:e4:f3:ba:ef:50:69:80:
b1:20:65:1e:98:41:b8:cd:d3:07:23:56:00:0c:b3:f3:de:18:
81:fc:b0:e6:d0:f5:30:03:94:e6:fc:1b:33:2a:d4:31:07:0d:
0c:5c:c8:7d:f6:4e:bc:36:58:40:b0:67:91:13:98:93:63:5d:
bd:ea:f1:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiH1y0C39rZOyWrf97/LHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MTA3ZTNmZDliOTRiNGIzNmU2YThmMzcwZTg2NTBhN2Y1
N2U2YzMwHhcNMjUwOTA3MDMwMTQ0WhcNMjUwOTA4MDMwMTQ0WjAzMTEwLwYDVQQD
Eyg0M2IzMjFlYzRhMmRhZWIyOWYzODRlZmYzYWRhZjQ4MDA1YjM0NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgllGZp7na8RG6vkRp4mXuNqL8t9
3lYclodOT3jHtjauj6eu5q+5QTsQAKbNP8Es6dagsyPjm4gK3P/M5eTdg9l80QPY
U2eAWRvkzkdtpGy9XTnEGnOjO0Nhy3k+gSqPUMgqd3LEfcr1YzUQzX/OmTCli4rs
/y0ebfhmJFTAcdQp2nQbs6JeyAJ1TUeiVwlja6ee+p4HMXOsKhcTpMN2k6WBrf7D
KCIl/y8bYSAjAcKiezo/gFsnY6K9n+sMBrDSr1hk8a5alDQpbBmDb2emtsxRE24g
54XmmJIURoovzhYxGZxs/ZYC1W6LU8wJC8VCPbWOHapc8A/ZDuEXjGFMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOzIexKLa6ynzhO/zra9IAFs0UEMB8GA1UdIwQY
MBaAFIcQfj/ZuUtLNuao83DoZQp/V+bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUt
NzYxZGFiMzg5YjViLzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUtNzYxZGFiMzg5YjVi
LzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijO0jTtA
70DrrmzGXd5XWuCrc9RYXI8iSNfrPDQtfJg6VrX/oBvUlMXjzW1pVYC7aKoSel67
blXgRnzZ4TXtFnFu6E6wcYPXm74VZVLhJprYkvRNLJMIJ62kuKzHfLp5IXBbnddk
NF/6o4VsRA+1vb3N6Hp+jyoB7sYGUsGAJOA+ZBUTqGf0WwWBSDLQWEuL7PssyPwF
KuvpheKavLgDZz8whATH1iiUqSgdet+4Es3J7Lm1AaXLbMKpsOEH7VHk87rvUGmA
sSBlHphBuM3TByNWAAyz894Ygfyw5tD1MAOU5vwbMyrUMQcNDFzIffZOvDZYQLBn
kROYk2NdverxFQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:39 2025 by rpki-client