Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: s9dn7XcPt3ncFonIIstIlc0JTiAETinRggHRBB7B32s=
Subject key identifier: 35:77:93:E4:D0:D0:7E:EA:D6:E5:3F:37:82:29:3C:34:31:5C:0D:4C
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0199285727A2E504BBC2D93EB031B9AC1917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0BEB
Signing time: Mon 08 Sep 2025 08:00:24 +0000
Manifest this update: Mon 08 Sep 2025 08:00:24 +0000
Manifest next update: Tue 09 Sep 2025 08:00:24 +0000
Files and hashes: 1: KNngLPUEeJfGeGvW_sjNLwrjlmo.roa (hash: VdgpRYVhUpsamPtzdnV+HbncE6iEYGQS6JyumMp2yn8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: o+r4fijP7JJbuZykvT55A/+J3xQ+LEQT2eaO3BCnxmk=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: aJuKlK4Eyd-5-SWqzCamWBjJAOA.roa (hash: JqxrD9CIJNSFvb9h8lx5ybgaqxfxBBfuz3mHyoez/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:57:27:a2:e5:04:bb:c2:d9:3e:b0:31:b9:ac:19:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Sep 8 08:00:24 2025 GMT
Not After : Sep 9 08:00:24 2025 GMT
Subject: CN=357793e4d0d07eead6e53f3782293c34315c0d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:e8:7b:dc:fa:1a:3d:cc:69:ff:5f:66:a7:
8d:90:5d:59:12:fc:a8:37:be:0f:13:61:19:3e:a2:
7b:10:e5:ec:c2:7c:82:e6:6d:df:ad:c2:13:ac:fa:
10:56:db:69:e4:ce:d8:6c:13:97:5e:37:28:0f:99:
8b:e1:7f:97:ac:1b:50:bb:b8:66:b6:74:98:24:db:
cb:b3:cd:24:91:a3:e0:30:18:b1:23:97:7a:59:8a:
a1:b8:68:15:de:44:9f:ef:3e:7e:a6:20:78:73:6e:
44:a7:33:ac:8c:b6:e2:b0:38:47:8f:c5:d7:8a:67:
fe:bc:9c:89:3b:f9:75:44:ce:40:2f:b4:94:ee:4f:
3d:67:ab:01:f2:67:e2:06:93:87:da:6e:c1:e2:91:
d3:7f:ef:b7:8b:30:61:f9:a3:a0:c2:3c:07:76:98:
8f:ea:b8:01:c8:1a:63:b5:3c:50:c5:9e:79:5a:51:
88:d1:59:46:08:d8:6e:d7:7f:ff:9d:78:41:bb:27:
c9:22:65:d4:dd:04:75:56:22:2b:8e:dd:d8:d3:c7:
58:5c:05:2c:0b:3f:78:be:3c:a7:0d:cc:2a:68:eb:
e1:c1:95:ad:fc:87:6b:b6:e9:61:0e:b6:19:30:0c:
d1:c0:a5:55:1d:0f:f7:a3:50:b4:2a:65:d0:ad:e3:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:93:E4:D0:D0:7E:EA:D6:E5:3F:37:82:29:3C:34:31:5C:0D:4C
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a5:1d:d4:56:4a:4e:78:7d:e0:22:37:cc:b7:83:55:42:f2:
9a:d6:02:ea:55:c3:98:76:72:e9:26:14:69:a0:44:6f:5f:1c:
59:94:98:48:c2:54:03:24:f4:b0:42:f7:37:bf:a1:61:59:f9:
93:07:6d:5d:2f:b6:d3:27:23:b5:db:f1:54:5a:91:05:aa:ff:
89:17:4a:5d:d5:43:0a:da:c4:b7:a1:20:e2:02:f2:f1:5b:f7:
be:38:d6:fe:ad:c7:ed:70:54:31:3e:72:3b:66:df:c5:ba:82:
64:e8:35:61:3b:da:a7:04:da:34:1e:0f:10:5f:d5:46:c8:e3:
aa:6d:d8:33:44:d3:82:86:e9:d3:39:f8:19:0a:f8:26:75:3f:
4b:64:47:b0:a5:d2:49:82:4a:0f:39:41:cf:39:4c:2c:d4:69:
50:2c:5f:c9:70:ae:55:d7:f0:e1:d1:75:5e:a9:c9:b5:46:18:
d2:c9:8a:09:d5:f8:84:d6:3e:07:2b:54:1b:f2:2e:f0:76:fd:
9d:06:0c:9c:ca:ba:87:e0:d4:de:45:15:92:d5:af:c3:40:c2:
98:96:27:a0:a5:cc:96:55:5e:64:62:b9:e7:22:7b:56:f8:fb:
69:94:17:9a:e6:50:e5:bf:e4:33:46:4c:7f:e0:44:22:f9:49:
93:6b:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:53:41 2025 by rpki-client