Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: EW12JWbKTBg3suFyh0fWsvy0DEp+8tH0QiWxrISlemU=
Subject key identifier: B9:2F:AB:74:85:77:8F:6C:DE:73:21:1A:57:92:0B:33:6B:49:DE:48
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 019936EEC198BA8CBC0A09B90A4A5EB03E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0C84
Signing time: Thu 11 Sep 2025 04:00:40 +0000
Manifest this update: Thu 11 Sep 2025 04:00:40 +0000
Manifest next update: Fri 12 Sep 2025 04:00:40 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: j0p5BhqJxQumgr43E9eTykL+oYjC80AtkgH6vO3WYR4=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:c1:98:ba:8c:bc:0a:09:b9:0a:4a:5e:b0:3e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Sep 11 04:00:40 2025 GMT
Not After : Sep 12 04:00:40 2025 GMT
Subject: CN=b92fab7485778f6cde73211a57920b336b49de48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:4e:9e:4e:0e:be:0c:53:aa:88:7d:8f:df:
37:92:76:38:1b:3f:a4:9d:78:93:8c:bc:74:6a:51:
be:99:e3:76:c2:95:27:c1:23:de:53:75:85:c5:7c:
d9:8e:57:fe:76:09:bb:cb:01:dd:59:7c:ca:8d:76:
57:e3:26:09:24:1e:65:2c:22:ef:dd:6f:0d:4f:35:
87:84:b9:ca:1c:8c:a8:8b:df:55:81:7f:37:fb:7d:
b7:c2:b9:4d:ef:bc:29:f5:c5:de:df:0b:8f:38:18:
cc:82:a3:ec:99:20:9e:22:4c:72:97:06:4f:7c:cf:
f4:9d:f6:88:17:1a:59:a0:88:2b:43:7f:7e:33:b6:
36:5d:f9:b7:fd:1e:bb:4d:de:83:30:79:94:ec:db:
43:70:09:1b:78:7e:95:9e:0c:60:44:91:38:dc:ff:
c4:2e:7b:9e:31:6e:84:c6:cc:e6:27:b8:af:d5:f7:
81:58:46:0c:fc:4e:e5:5e:e3:31:47:c2:29:13:7c:
af:f8:18:fd:18:f5:dd:77:63:ff:71:eb:84:5a:9f:
18:ea:03:39:4e:d3:6a:e3:ab:2d:72:09:37:9d:b4:
f0:1a:0e:7b:d6:21:4c:27:a0:5d:c4:d5:05:03:eb:
b8:7d:f9:a2:12:e5:01:8e:54:9f:d6:5d:29:c5:78:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:AB:74:85:77:8F:6C:DE:73:21:1A:57:92:0B:33:6B:49:DE:48
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:13:d3:de:96:b3:58:7b:a0:8f:ba:95:1f:c8:8a:a2:6d:12:
7c:62:6a:db:dd:fa:1d:ee:3f:a4:ed:e7:48:9e:db:4d:e1:cb:
b1:5f:af:91:97:70:b6:1f:1a:83:b7:9f:48:f0:e0:a4:e2:38:
79:bb:a0:b7:27:78:e2:44:5a:f0:aa:89:a1:e7:1a:29:15:0f:
15:5c:0f:c4:78:4c:3f:9a:f6:b6:b6:5a:63:66:d3:d9:36:68:
f4:aa:93:7c:c5:1f:fd:c6:43:11:70:c1:ba:1f:53:6c:01:7f:
ef:8c:52:52:45:5c:e1:5a:fa:11:19:ac:ec:6d:bb:66:71:02:
ec:73:62:ac:1b:f9:48:eb:04:ae:4e:d2:93:e6:45:e7:e4:c9:
8d:fe:e6:b8:4e:b8:36:43:77:cd:f1:11:13:1c:95:43:84:14:
9a:54:ab:8c:35:81:13:f3:9a:6e:d8:c9:2b:24:e3:ed:79:e7:
a4:aa:25:9b:05:61:d3:d2:e5:b5:ff:b7:2d:dd:51:a6:3a:fd:
d4:e6:e7:c6:48:5b:5f:20:80:99:eb:1a:35:9b:3f:93:4f:a2:
3c:8d:ec:6e:58:62:a5:9d:7e:f0:97:ce:de:6f:ef:36:42:cf:
11:68:be:af:8e:47:2c:a1:1b:86:dc:64:7a:dd:61:c4:bd:f0:
25:24:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:50:33 2025 by rpki-client