
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
File: H0n8ab9uujufoFF9AGKSchDk6Mo.mft (raw, json)
Hash identifier: +CoEqfljhjJo5TS2CCIuqDLxp3Qyz5GCAix+RKXt3QA=
Subject key identifier: 7E:84:D6:0F:71:E3:47:2C:14:70:60:CB:78:BB:78:25:EE:F1:1B:F5
Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
Certificate issuer: /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Certificate serial: 0199239FE6CB778A7E769B84366E2967D657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
Manifest number: 053D
Signing time: Sun 07 Sep 2025 10:01:45 +0000
Manifest this update: Sun 07 Sep 2025 10:01:45 +0000
Manifest next update: Mon 08 Sep 2025 10:01:45 +0000
Files and hashes: 1: H0n8ab9uujufoFF9AGKSchDk6Mo.crl (hash: o4IB0Rh8q9iocEH45A4doNvKFlxLBM31hZXWEn2IL5k=)
2: Uer55Veb_ut1JsDk-7JNWBypePA.roa (hash: mFvrHyTdVgwfq1zEyZ5X8BtK4+uJoolM6yDZ19bRhfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e6:cb:77:8a:7e:76:9b:84:36:6e:29:67:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Validity
Not Before: Sep 7 10:01:45 2025 GMT
Not After : Sep 8 10:01:45 2025 GMT
Subject: CN=7e84d60f71e3472c147060cb78bb7825eef11bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:ef:1d:68:9a:27:e1:50:95:88:8c:20:97:
68:93:3f:ee:14:f6:9a:ce:b2:f7:b0:3c:18:88:7d:
84:e0:90:bb:dd:25:22:4c:e3:2b:37:b7:b6:35:17:
c6:59:bd:20:fd:80:00:c8:cf:26:a4:fd:64:a0:a3:
11:55:a6:a7:3a:c0:fc:ab:f9:44:46:b6:a7:1a:1d:
62:de:99:a3:d2:ae:42:2b:9f:1f:7b:8b:ac:63:d7:
aa:05:ce:f6:7f:fb:94:9b:90:3e:d4:2c:87:e2:cb:
af:32:e4:60:f2:c7:92:a3:04:ed:06:21:36:ef:de:
06:fb:cd:ec:cd:40:c6:1d:d5:b3:f8:68:c9:84:ab:
81:c7:b6:3e:7d:79:38:b7:a4:1a:06:72:05:57:38:
b6:df:cd:ba:c8:d5:c2:de:67:bd:eb:a8:1c:a6:69:
f9:b8:7e:bf:d9:66:06:90:d6:0c:65:0c:8c:78:cf:
ae:fe:6d:78:70:cc:40:3a:45:a6:05:28:2e:ed:76:
c6:5f:e4:d9:19:e4:0b:fc:27:ed:04:54:41:5d:1f:
c4:4c:a1:31:3c:a8:22:1f:0d:1f:ee:63:0f:5c:bb:
c3:a9:d0:e8:a3:b3:63:58:29:27:bb:d7:99:20:2c:
b8:55:ac:f4:13:f2:23:e3:a5:56:2e:de:4f:e1:0c:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:84:D6:0F:71:E3:47:2C:14:70:60:CB:78:BB:78:25:EE:F1:1B:F5
X509v3 Authority Key Identifier:
keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9b:11:c0:c6:1d:26:0f:6c:59:28:d3:55:c0:fe:03:2b:6f:
ee:53:14:cf:1e:09:29:00:9a:25:19:f0:0e:0b:c8:36:01:79:
d3:80:0f:09:d1:b4:dc:00:63:b6:f1:ac:c1:ec:ac:4c:c1:85:
e4:b3:58:93:18:4b:00:47:95:e3:bb:9e:9f:98:05:98:78:00:
24:32:4f:81:42:4f:10:59:e7:64:75:24:f7:c8:2e:0b:62:1a:
d3:8e:32:b8:55:8f:c2:fb:36:a3:1c:c4:5c:34:85:93:8f:66:
67:61:3b:d4:da:9e:22:a3:6b:90:f9:bb:c4:17:b7:96:7d:49:
af:24:d8:c1:cc:7c:9d:3c:cd:68:d6:9c:25:93:00:b5:19:00:
1a:59:00:16:95:28:fd:7a:d0:a5:e0:f9:af:2e:05:4a:7e:d7:
24:ad:7c:2f:d3:82:5c:33:25:7b:35:95:16:72:57:66:ef:7d:
af:2a:90:f9:6f:b4:f5:62:bb:45:59:3d:17:56:09:ea:71:30:
6f:14:2e:83:7b:f6:3c:de:e9:5f:f3:b4:c0:c5:23:7a:e5:f5:
d1:a5:dc:21:99:ad:94:ca:50:55:c7:e6:9e:dc:8f:91:04:e6:
d7:51:ef:ff:32:8e:da:ee:36:7c:82:50:00:5b:8c:61:8e:15:
40:d1:d9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:16 2025 by rpki-client