Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: A3Yxd37d7zTt9FlyoRqtVYQyiIFliWFTHGctCqgRnoU=
Subject key identifier: 92:78:66:8E:46:9F:AD:F6:19:ED:47:A4:93:1D:D8:FA:B4:AA:59:FB
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 019921B17295A111996D113AEB4D7B7579C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0ED3
Signing time: Sun 07 Sep 2025 01:01:41 +0000
Manifest this update: Sun 07 Sep 2025 01:01:41 +0000
Manifest next update: Mon 08 Sep 2025 01:01:41 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: 2TxaI35XBkkB7rNKPkENj9qGqxwxR8EsOCHGNT3bv38=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:72:95:a1:11:99:6d:11:3a:eb:4d:7b:75:79:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Sep 7 01:01:41 2025 GMT
Not After : Sep 8 01:01:41 2025 GMT
Subject: CN=9278668e469fadf619ed47a4931dd8fab4aa59fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:f1:9e:1c:66:aa:7d:bb:6b:88:e4:3d:ed:
29:52:ba:da:4d:48:22:ed:3f:a7:84:a4:a1:30:3f:
59:79:ff:eb:78:d2:67:00:bc:d1:bc:ae:49:6d:29:
06:af:20:92:31:8d:ca:85:2e:c2:29:e3:06:68:6d:
ce:82:c2:e6:3f:45:02:bb:c5:9e:ee:0b:1f:65:ad:
68:01:1b:80:fe:3d:a5:69:0d:f8:21:2e:21:69:83:
ee:29:b3:bd:24:dc:e8:a4:f9:61:71:56:b2:68:e8:
f0:26:5f:8e:56:bd:a9:1c:34:2e:11:94:80:4f:4b:
58:4a:9a:17:1b:71:49:60:87:ab:ea:72:a1:44:68:
69:e4:38:4a:71:03:67:a6:76:40:2c:63:7f:f8:f4:
bf:17:a6:3e:81:4b:09:e0:29:44:22:bc:55:08:53:
1e:53:f8:c0:ed:6b:2c:08:16:65:86:7d:28:f6:09:
14:99:c2:28:f4:e3:2e:62:ab:5b:93:30:d2:f6:e0:
11:03:3a:a8:b1:03:68:40:80:16:2f:c3:95:92:46:
50:99:a7:08:7f:00:1c:6a:c7:bc:70:c1:11:72:e0:
c9:20:e3:67:0f:ce:3b:44:d9:4a:65:55:6a:65:cd:
cf:20:77:da:55:90:75:bc:cb:37:d2:dd:c7:c7:10:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:78:66:8E:46:9F:AD:F6:19:ED:47:A4:93:1D:D8:FA:B4:AA:59:FB
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:17:92:ef:83:bf:61:50:ea:01:52:3a:c4:69:41:67:60:83:
60:13:a5:66:3c:2e:df:82:e7:28:18:05:f7:3d:cd:fc:fa:8f:
ff:e9:54:fe:77:9c:f6:9f:d7:fb:0b:ca:d0:f4:f0:75:09:c4:
d0:dc:80:ef:9e:01:d6:54:af:dd:3d:68:e8:6f:98:d4:fe:11:
dc:81:11:95:cb:e1:5a:3d:c5:72:3c:02:31:59:f8:6c:fe:14:
c9:61:a6:db:0d:e7:b9:d2:51:c2:9d:e4:f8:34:d3:ae:6a:37:
14:23:63:a3:11:4b:f0:e9:1c:56:15:c6:af:62:20:83:25:90:
a2:91:5a:5e:b5:94:93:e9:9b:0d:52:18:d6:e8:72:3a:a9:9e:
68:40:41:c0:c2:1b:4c:c6:79:27:e3:9c:9b:f8:50:d7:a6:ee:
9a:5d:ee:d3:57:6c:58:92:8e:1c:ab:f8:e3:f7:01:bb:2e:03:
75:d7:f3:a5:1b:fb:9d:b1:9a:ea:96:5c:cb:a7:ee:8e:b1:2b:
32:f8:c5:cb:ec:11:73:40:9e:fd:4f:3e:3a:d3:e0:90:a2:ee:
c8:03:56:55:53:f9:de:2e:3d:8f:5e:9d:96:d3:02:3f:95:c9:
49:91:d8:29:c7:19:17:d5:cc:3d:6a:2e:87:64:61:17:0c:a9:
17:51:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:21 2025 by rpki-client