Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier: lrvFriG3Fyb3mfy+YBeb3pqJ1eiQQcB70cPa3sY0a2E=
Subject key identifier: EA:20:5D:26:E1:75:65:43:A8:F5:C9:6D:48:EF:41:A7:20:AD:C1:E6
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 0199221E6A168A079DD816A3859196A6A0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number: 1125
Signing time: Sun 07 Sep 2025 03:00:42 +0000
Manifest this update: Sun 07 Sep 2025 03:00:42 +0000
Manifest next update: Mon 08 Sep 2025 03:00:42 +0000
Files and hashes: 1: 9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa (hash: Fm2Q+Megk5GLVl9u0EHQZ20RgFMN11FSbY9n50k8CTU=)
2: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: rZcboc+S2yCflQ/LXqs+6nxcRnFN0l1qqqPz0tkGpS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6a:16:8a:07:9d:d8:16:a3:85:91:96:a6:a0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Sep 7 03:00:42 2025 GMT
Not After : Sep 8 03:00:42 2025 GMT
Subject: CN=ea205d26e1756543a8f5c96d48ef41a720adc1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:f7:4b:13:5a:d1:17:f4:a0:27:ed:8c:a8:
2a:1f:d4:f8:88:76:86:9a:37:c8:c5:09:05:6d:e3:
d7:1a:f9:c6:00:fc:f5:33:2f:b7:f9:30:c2:a6:79:
a7:5c:21:86:d1:4c:1f:d0:1c:28:fd:50:ef:7c:1e:
30:24:68:06:f9:02:cd:b2:61:f6:4f:49:29:b5:4c:
a8:c3:1b:a9:30:a1:03:97:9e:69:8e:c5:62:43:91:
47:7a:3b:4b:58:73:d9:b7:f7:4a:ce:81:a0:12:83:
be:39:5e:c2:25:76:7d:3f:7b:c6:e9:8e:b9:4e:97:
13:87:a0:68:6d:9a:7f:5f:f6:25:70:99:5b:44:3e:
d8:c5:dd:17:de:ec:8e:1f:6c:be:4b:ff:12:47:4e:
23:aa:a8:61:5c:56:12:72:83:29:8e:68:3b:fa:48:
83:f5:3e:ab:3b:12:a2:3f:a6:ef:95:44:96:45:99:
97:34:d5:30:39:36:87:89:65:d5:65:d8:8e:cb:9e:
17:28:62:16:dd:2d:ee:15:09:25:ed:54:cf:c8:03:
23:64:25:5e:e9:fc:c4:5a:04:e8:d4:9d:09:7d:ed:
6d:41:5c:68:7c:5b:fc:e6:f4:c0:dc:2b:b0:7c:fe:
86:53:40:0b:99:d2:3e:30:d7:67:29:81:b8:53:a0:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:5D:26:E1:75:65:43:A8:F5:C9:6D:48:EF:41:A7:20:AD:C1:E6
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c5:10:b9:04:29:0a:06:f7:92:f6:f4:1a:19:c0:f3:7d:db:
0f:8f:bf:aa:39:5e:7a:65:3b:3d:24:d9:c9:42:fe:4f:d6:7f:
30:fd:93:1b:6d:28:07:d3:63:fa:38:d0:28:35:e6:ee:68:38:
5d:c3:e9:06:a8:69:ae:46:ce:93:f4:58:59:f1:ec:66:4a:7f:
86:d9:7d:3e:64:27:71:90:36:2e:33:5f:77:9c:71:86:24:d4:
ff:f3:9f:56:f0:96:2d:ca:b1:80:20:e8:8c:72:e0:3e:d1:76:
10:4e:2a:e9:d2:47:b5:65:d9:3b:0c:54:3e:01:75:c9:b8:bb:
4d:c4:bd:f0:eb:f0:8e:d5:82:c3:18:25:19:dc:25:ed:e5:d5:
89:c2:91:f3:0d:e5:a9:f2:86:61:5d:bf:22:25:c2:26:11:cc:
da:0b:8d:9c:71:be:d1:96:65:c1:a2:4d:3b:d6:c8:23:b3:6f:
55:46:d1:a2:3f:0b:91:30:27:ec:83:f5:fc:71:46:6d:21:1c:
a2:e8:68:f9:e1:b2:90:fd:04:8c:fc:e3:5c:4d:6e:24:d3:67:
e7:6a:26:a5:b1:32:c8:53:41:51:9a:41:46:71:ff:8b:74:91:
c4:3e:8b:65:69:bd:9f:4d:91:88:67:df:01:21:2d:e8:af:dc:
9d:98:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:23 2025 by rpki-client