Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: pGOoRdTwCLL7ICu8cP90YkBKd8/SPhUrRGS2SkLUkn4=
Subject key identifier: E0:F0:6B:BB:B1:36:E7:90:F9:EA:59:84:AE:11:27:FD:6B:A1:56:77
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0198C7C92B65537117FC7D02C9CD644BE0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1641
Signing time: Wed 20 Aug 2025 14:01:46 +0000
Manifest this update: Wed 20 Aug 2025 14:01:46 +0000
Manifest next update: Thu 21 Aug 2025 14:01:46 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: fYuOMvAlJRDi08N3ED43Zh462Xqk1GoLMogDA72klAk=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:c9:2b:65:53:71:17:fc:7d:02:c9:cd:64:4b:e0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Aug 20 14:01:46 2025 GMT
Not After : Aug 21 14:01:46 2025 GMT
Subject: CN=e0f06bbbb136e790f9ea5984ae1127fd6ba15677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:30:bd:2f:62:16:31:b7:3e:12:0c:64:9c:
fa:33:bb:6f:69:79:9e:f0:ad:85:fe:6a:b4:e4:62:
7a:84:0a:5a:46:33:85:33:9f:0b:90:79:2e:d8:dc:
bb:27:ec:3b:b4:1f:1d:44:cb:bb:50:62:fe:f4:4e:
fe:e5:e0:3e:ae:c6:3b:5a:7e:f3:fa:a9:e3:6e:4b:
cb:63:4d:ae:c7:e6:d2:73:82:21:b1:74:20:e3:44:
f9:e6:ec:bc:4c:c3:0f:dc:29:b6:94:d4:c5:11:41:
0f:de:24:bc:ce:26:0c:29:cf:67:84:40:2d:70:80:
4d:a4:4f:c4:09:51:c9:82:29:65:98:39:e3:e6:5d:
6c:c8:2b:0a:ec:19:b1:0d:53:4b:0a:6a:18:ad:12:
96:fe:57:e7:88:87:0c:6e:af:9e:8a:9f:e8:7c:eb:
b1:3d:b8:24:b6:a5:4a:33:91:fb:d7:c0:22:d1:f4:
93:a7:55:9e:af:25:41:da:25:5e:1d:3a:fa:1d:1e:
34:36:31:4e:39:29:7e:2b:33:5e:02:9b:55:15:c6:
c1:06:c1:ef:1e:cd:2a:f2:7a:84:f2:6e:7a:9b:24:
19:d1:ec:b6:a2:c8:fe:e5:2d:b4:9e:31:5b:84:df:
96:e5:af:bd:f8:e3:20:0c:83:96:e4:2a:e0:78:a0:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F0:6B:BB:B1:36:E7:90:F9:EA:59:84:AE:11:27:FD:6B:A1:56:77
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:63:bb:9f:55:09:8c:fc:7e:2c:69:a6:51:b3:90:aa:1f:a0:
7d:5f:a7:b4:db:08:3d:16:98:83:97:a7:ee:5b:ff:91:2d:93:
f4:02:b6:09:70:40:bd:e3:e6:a8:d3:c6:db:f5:6b:f6:42:64:
26:5b:bf:d8:c0:a4:5d:9e:09:98:9d:d3:05:7b:e1:d7:d6:53:
a0:95:ee:3e:89:5a:a0:fc:19:1f:c9:36:43:03:99:08:1f:d8:
c7:58:1d:fe:e3:71:e2:82:fa:e9:84:45:47:1a:b6:fe:ee:37:
70:c4:17:61:36:27:e5:7c:fa:34:ba:9e:4e:ef:d7:71:21:93:
63:f2:15:40:6a:32:06:c1:2b:b9:f5:45:bf:12:87:ee:32:37:
c5:b3:d0:04:ec:77:54:18:56:8a:b0:ba:0b:94:80:df:1e:ac:
67:ad:05:2c:2e:bb:ae:4e:67:13:d8:43:ec:2b:e8:f7:ae:75:
f4:2d:58:30:b7:f9:8d:2e:b5:43:a0:68:a5:93:e5:27:30:27:
e2:6e:27:5a:e9:65:8d:a8:a9:11:39:51:29:06:0e:33:5f:76:
0f:f4:fc:fb:87:20:44:ed:83:99:c1:4e:35:3f:1e:84:1e:7f:
b2:81:50:47:c7:f6:f4:b9:38:51:54:3a:49:11:80:66:d7:e1:
a4:0a:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:36:01 2025 by rpki-client