Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier: SRRXA4kWJMuUVfLg917OU9NGVqrZpLBMf7VSbfqYcV8=
Subject key identifier: 53:C1:2C:7B:77:0B:33:D6:D4:C4:C8:2A:60:69:66:93:05:97:68:6E
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 0199228CB28F8A0F894D5A3E8164AE1A89C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number: 069D
Signing time: Sun 07 Sep 2025 05:01:09 +0000
Manifest this update: Sun 07 Sep 2025 05:01:09 +0000
Manifest next update: Mon 08 Sep 2025 05:01:09 +0000
Files and hashes: 1: 5RI4SZ7klYwbXOltWz9mLe7dxD8.roa (hash: GWR45JMOb96igm8o2PgndioWHr8iBdYB9L2Wx8rR7YM=)
2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: f4K2O05VycUblRlOM2+2ONUMv5fpYa8+G/k+vuqob0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b2:8f:8a:0f:89:4d:5a:3e:81:64:ae:1a:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Sep 7 05:01:09 2025 GMT
Not After : Sep 8 05:01:09 2025 GMT
Subject: CN=53c12c7b770b33d6d4c4c82a606966930597686e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:cf:0d:03:ff:f4:a1:3c:fc:ac:0d:42:38:
bb:b6:7d:13:da:f7:3f:29:39:d2:bc:32:9d:cd:03:
e3:d9:7b:b3:f8:7d:af:e4:9d:e8:fe:b6:e1:76:77:
32:0f:ae:03:3b:2a:b2:da:d3:95:ed:57:4b:7f:41:
63:35:bd:84:cd:3e:b5:19:6a:db:7a:ae:20:30:07:
3a:67:9d:36:43:18:cf:3f:03:ae:2c:e3:9c:36:81:
08:74:74:09:1f:dd:26:60:8e:2d:36:1e:16:c0:96:
4a:0c:aa:d2:5e:fa:99:5e:ef:7d:43:36:a7:eb:29:
a7:69:3a:36:50:2b:2d:69:85:d2:04:7f:91:d9:6c:
40:0d:7c:59:d7:84:15:a8:99:6e:82:da:00:0c:c6:
c9:4d:27:89:9c:ab:5d:d9:0e:36:97:c6:2a:3e:9b:
09:18:48:7a:93:c4:af:48:ae:c9:7f:99:c9:11:79:
3b:05:2a:94:6c:32:28:8c:22:dc:b8:dd:a2:ba:7a:
f7:cb:bc:a0:75:86:96:e1:e9:af:82:29:a7:c9:85:
96:62:d0:08:c6:ed:77:c4:3f:90:c2:db:30:66:11:
9e:02:7a:10:d6:3b:49:f3:e0:2d:1c:e0:98:c3:17:
0f:3c:85:42:6d:1e:e8:d7:fb:8c:a2:4e:bc:9a:41:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C1:2C:7B:77:0B:33:D6:D4:C4:C8:2A:60:69:66:93:05:97:68:6E
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a2:77:cc:c6:45:8f:50:47:29:92:b5:40:77:af:f6:8e:f9:
ff:e6:20:14:88:2a:3f:1e:85:16:4b:dd:52:02:fa:b0:22:82:
27:90:dc:c7:96:b5:e0:26:80:dd:33:55:b7:f5:19:ff:f7:02:
0a:91:d2:b1:2b:da:0f:8d:8b:2b:ae:4f:83:47:bc:e2:84:02:
8f:b6:51:ab:6e:4c:d5:3b:cd:17:d2:03:f1:50:9a:75:0e:0b:
65:22:88:89:b2:e1:45:7d:4c:b8:e2:f5:8f:94:9f:44:00:41:
a6:4e:57:63:fc:90:9e:15:ed:ac:84:04:61:b8:c9:64:f7:28:
df:83:be:27:b2:35:58:fe:8c:52:5c:3d:6f:31:bc:97:84:65:
05:38:54:a2:fb:bf:0f:aa:c5:f5:8b:b7:f0:74:63:5e:10:1a:
c7:8b:52:c1:fb:d8:75:f1:e2:77:a0:c4:0a:fe:98:2e:3f:ae:
23:2d:03:20:df:a3:81:97:62:a9:25:43:9f:27:7c:2b:e7:55:
fb:44:5f:af:d0:b5:8b:5f:22:42:e2:05:cb:f9:97:6e:35:0c:
6d:cf:e8:85:95:3d:24:e7:2e:d1:04:8d:22:9f:01:66:ad:13:
dc:73:cd:2d:84:89:a0:0c:91:31:a9:cb:24:33:85:e7:47:17:
7f:1a:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:48 2025 by rpki-client