Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: 11rZ7jivoBsAKGzzsLfVyYocY7tm9OGCT7IbjoEKHKY=
Subject key identifier: 16:A6:8C:A1:F8:6D:9F:82:2F:B2:73:A3:C6:76:19:29:74:D4:B4:9E
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 0199240CE6B690CE553669EE0D256213E4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0C7B
Signing time: Sun 07 Sep 2025 12:00:49 +0000
Manifest this update: Sun 07 Sep 2025 12:00:49 +0000
Manifest next update: Mon 08 Sep 2025 12:00:49 +0000
Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: y0GY1rHKNFPwBsNiSXSJxypMYDZznwVmqN7LoMDxyZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:e6:b6:90:ce:55:36:69:ee:0d:25:62:13:e4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Sep 7 12:00:49 2025 GMT
Not After : Sep 8 12:00:49 2025 GMT
Subject: CN=16a68ca1f86d9f822fb273a3c676192974d4b49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:e4:95:15:63:96:d3:0b:a1:02:75:91:27:
12:ef:1a:41:c9:f8:d0:37:ec:ed:70:a0:9d:93:d4:
0a:24:bc:b9:cf:57:8b:18:e7:ca:0b:e7:c4:a1:81:
bd:ff:57:c5:48:ba:64:ba:0a:45:9d:32:2d:70:1d:
b9:10:b8:9e:73:f5:da:1e:04:aa:f1:d5:fc:96:f4:
50:0a:b4:1e:fd:d3:5d:53:35:f9:f5:b8:07:4f:73:
91:38:51:67:fb:42:af:9b:c4:77:5d:ed:a3:7a:6a:
d8:2c:3f:29:c2:ea:6a:1c:69:70:f4:d7:59:b0:fe:
76:f3:5d:ad:7b:f3:2b:b4:f5:b0:52:0f:46:8b:7a:
b1:55:b4:bf:36:ab:75:c4:f4:88:6d:2b:3f:14:cb:
c5:a3:66:67:95:42:7f:29:72:3e:ea:6e:43:13:cf:
68:74:1b:09:cf:50:07:32:0c:22:20:38:4a:cf:f4:
26:ad:5f:20:8d:e2:16:0a:2c:a5:1e:7e:df:47:9c:
34:46:2d:9e:0c:a8:3c:ca:bc:c3:9d:7c:2b:d9:e5:
1c:9c:8c:25:33:f6:43:4e:3c:cf:01:fd:7d:7f:c5:
40:1a:b2:20:26:41:97:ee:88:34:47:26:87:06:26:
d9:43:40:eb:63:c8:35:43:b1:b0:27:e0:c2:89:7a:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:8C:A1:F8:6D:9F:82:2F:B2:73:A3:C6:76:19:29:74:D4:B4:9E
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3a:ae:e4:c8:3c:3b:49:ce:be:7d:3f:e0:1e:e3:92:32:f7:
2f:5f:51:d6:67:0c:90:bd:23:a3:e3:36:5c:a5:e7:7b:69:d5:
36:4b:d3:7c:23:b1:a2:26:c4:b7:86:9b:41:93:d1:24:6b:68:
f9:46:06:ae:37:81:b3:15:a1:c5:6e:67:d4:c1:0c:31:b3:89:
a2:0e:f9:93:4c:c8:11:ee:78:b6:fc:55:7d:2a:29:54:bf:8b:
4b:93:f5:62:d7:33:8e:d9:06:eb:09:1a:48:7b:77:26:23:63:
b8:8a:5a:59:03:30:46:67:ea:12:ef:60:17:8b:ff:65:6b:db:
bd:fa:1c:5f:0a:51:13:de:07:2c:b3:bb:e4:bc:8d:81:b6:88:
0b:11:14:9f:ff:da:5b:fe:db:3b:bc:3d:0f:c8:23:73:46:c4:
98:ae:dd:1f:65:28:41:7a:3e:cb:f9:82:e3:3d:8f:b6:92:10:
54:bb:91:f3:54:62:d3:23:44:cb:a9:e2:a3:f8:57:88:32:eb:
89:a6:d4:8f:9f:94:c3:07:69:97:01:b1:05:4f:3f:10:f2:08:
3d:a8:e3:34:86:b5:8e:7f:17:de:72:a9:b0:19:62:29:c8:24:
5c:d5:33:0c:6b:9b:7c:92:ae:bc:85:35:ad:3e:be:a0:75:5b:
29:42:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:41 2025 by rpki-client