Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier: Y4DCq633XLM09aAHYvciuxEoY5UqdBJeEwT3bF+x6TY=
Subject key identifier: B7:54:DC:29:78:9A:C6:27:FE:E5:76:02:13:E5:8F:17:F2:AC:A4:5B
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 0199225582F9C10FD7004269DA9B7940FA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:53 +0000
Manifest this update: Sun 07 Sep 2025 04:00:53 +0000
Manifest next update: Mon 08 Sep 2025 04:00:53 +0000
Files and hashes: 1: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: lifKaISLDzHKarhEkWnE54q2Nopl7dEis6Q3G+Eq9gw=)
2: qsewLApSJANcPGT3dklt2zSF2HU.roa (hash: bPAVtg7OfBYMMJkAVdTPdE+2AmcR0ogISjqN5CtNEqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:82:f9:c1:0f:d7:00:42:69:da:9b:79:40:fa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: Sep 7 04:00:53 2025 GMT
Not After : Sep 8 04:00:53 2025 GMT
Subject: CN=b754dc29789ac627fee5760213e58f17f2aca45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:7c:aa:e5:a7:d3:76:23:c2:56:c3:8b:58:
9a:cb:e1:57:af:b4:e1:e7:56:3b:d7:5a:39:f2:e2:
a7:04:d7:fb:36:42:c9:05:66:b1:79:9e:cf:24:4c:
a4:44:72:1f:5b:3c:4a:90:a1:0b:c0:16:23:27:c4:
00:e9:f0:51:b4:08:0d:c8:7c:ce:53:63:a7:e9:4d:
9f:77:a4:2e:07:17:89:b3:1e:00:aa:c7:24:de:84:
ff:04:75:d6:31:08:f0:b5:1b:6c:fb:fd:d8:33:7b:
63:dd:f8:62:42:c6:66:70:8b:9b:62:33:d4:ac:f9:
b5:60:2b:cc:7a:59:07:fb:b8:20:da:e4:9e:d6:89:
a7:13:1f:b8:1c:44:61:68:94:86:26:3f:73:32:a0:
d3:d5:b3:82:57:67:8b:8b:84:32:1f:77:61:1d:23:
ba:f1:e7:73:5e:66:64:c2:27:ee:45:97:09:50:b5:
d8:23:aa:9e:62:78:85:e8:3c:a3:08:ff:d8:4e:5a:
14:50:db:28:ba:c1:1a:d0:bd:e2:69:44:cc:09:0c:
6b:8d:d4:42:8c:79:30:1c:9e:9a:84:40:46:58:a2:
29:06:03:43:61:68:ed:a4:0f:d5:d8:94:eb:66:c0:
b9:4d:9e:de:75:b7:93:ad:3b:90:c3:33:41:ff:36:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:54:DC:29:78:9A:C6:27:FE:E5:76:02:13:E5:8F:17:F2:AC:A4:5B
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:06:16:27:e8:10:83:5d:cd:be:5f:59:b4:9e:c0:65:71:17:
ae:f4:87:82:35:bb:77:5a:32:b4:c4:4d:7a:b9:d1:fe:30:6e:
33:b7:c5:b5:15:88:e7:17:52:93:27:a1:bb:e2:49:41:af:4f:
cf:5b:7d:ff:78:59:4a:d7:7b:76:4d:75:9c:c9:50:09:fe:ed:
7a:5b:52:fc:52:09:36:40:38:be:64:d2:21:48:c2:58:07:6b:
48:c0:3c:47:e3:f2:f6:ce:fa:5a:ca:8a:07:d4:e1:d5:a5:d6:
6a:5e:ca:06:36:92:a8:36:81:96:fb:2c:7c:20:b8:a6:31:7a:
cb:f7:4c:81:ca:d6:29:90:2a:b2:f2:0d:e4:b3:98:6d:7c:9f:
70:48:5c:8e:4b:84:10:fd:e0:d5:65:b0:be:82:16:b7:c2:92:
5b:65:6d:61:de:a1:74:dd:19:f4:1a:56:d3:df:0a:da:40:37:
91:23:cf:b0:5a:a8:a8:95:15:45:29:75:8f:3c:f8:15:5a:9f:
a3:55:5c:94:aa:c0:d8:af:03:05:29:0d:a5:08:26:95:70:51:
7a:82:da:00:88:8b:53:e3:fd:30:1f:c6:fa:bf:41:ed:76:f8:
61:0a:2f:e0:5d:42:72:f0:96:59:11:9f:06:48:7f:df:0f:6c:
88:d9:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:01 2025 by rpki-client