Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: 0uTmVGN+8xgITxya1i9nTmg86L9ra41Xj8ecFKj22n4=
Subject key identifier: 0C:01:59:63:40:11:53:FA:A4:E8:1B:89:AF:15:BB:9E:4A:78:11:99
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 01993124B31F78C7C0013A9FC3B4EC581611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 07CC
Signing time: Wed 10 Sep 2025 01:01:52 +0000
Manifest this update: Wed 10 Sep 2025 01:01:52 +0000
Manifest next update: Thu 11 Sep 2025 01:01:52 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: ltRiAoDNteyilwvf0xmlXt4BMRg2oV0B6UDzG2gj3TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:b3:1f:78:c7:c0:01:3a:9f:c3:b4:ec:58:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Sep 10 01:01:52 2025 GMT
Not After : Sep 11 01:01:52 2025 GMT
Subject: CN=0c015963401153faa4e81b89af15bb9e4a781199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:0c:14:d7:22:1b:dc:c5:bd:06:96:c6:91:
5d:3e:a2:5d:a3:69:93:0d:b1:1d:f3:01:62:67:26:
87:6f:62:04:6a:53:af:68:bb:16:77:32:ac:56:b2:
a6:0b:00:94:88:f7:cc:72:bf:85:a1:ed:bb:30:d8:
86:34:25:b4:b4:eb:6f:5b:6d:d5:3e:e5:85:45:3a:
da:f7:6a:51:c1:d2:c9:19:43:c4:84:7f:1f:64:a7:
a0:86:ce:f0:da:3f:93:78:f4:ad:c8:29:3d:7d:b1:
89:25:f5:85:d5:0c:cc:60:e1:79:a2:c6:3d:2b:f4:
77:dd:d6:77:06:17:04:88:d6:7d:dc:09:d8:d4:6a:
56:9a:40:a9:df:bf:73:97:3a:2f:dc:c6:ab:1d:5a:
45:6f:98:ff:7a:aa:24:0e:03:4d:30:95:29:2b:78:
b0:39:49:91:3b:b4:2e:14:78:55:99:28:27:4e:31:
25:1f:9a:9a:4d:e4:81:34:bd:6d:2a:c0:88:f1:9a:
a2:69:b9:9c:61:d2:4e:98:7c:66:ac:56:86:bd:04:
94:84:9d:0b:92:af:0a:75:0f:93:33:90:7d:42:fb:
5f:e8:70:c6:6f:8e:10:f2:79:34:96:45:f7:0a:a3:
f2:30:81:50:40:74:4e:52:82:7d:db:bf:72:fb:5e:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:01:59:63:40:11:53:FA:A4:E8:1B:89:AF:15:BB:9E:4A:78:11:99
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9c:59:0f:6a:b9:54:de:77:8a:6f:0c:33:2e:92:ae:09:0f:
cb:2b:f3:96:2e:16:1b:df:5d:fc:f7:e7:57:57:49:d7:bb:48:
83:d3:31:ae:9b:ad:25:e4:e5:d0:05:99:2e:87:48:75:dd:7b:
f9:48:53:93:5c:b7:5a:ee:0c:4a:1c:23:cd:09:08:58:33:00:
b2:67:fc:dc:9f:80:7e:73:e5:56:bf:56:0d:49:de:81:b9:0a:
d4:6c:78:e2:7a:b7:84:67:09:20:a7:6b:1f:fb:5d:95:04:34:
2e:2f:7a:fe:f9:f9:84:b2:26:44:1c:dd:48:8c:ae:79:d4:50:
87:0b:aa:28:23:ea:7e:09:a3:de:1f:27:97:57:9f:58:d3:f2:
96:78:91:c9:b8:9a:32:31:e1:93:76:ad:ab:5f:30:18:5b:b1:
77:63:b4:ec:b7:17:41:fb:c9:c9:14:cb:68:34:ce:64:f9:13:
7c:e5:a4:91:4a:53:14:f8:a7:43:3c:44:3b:f7:d1:21:e4:f1:
f1:ab:25:51:40:19:0c:56:d5:52:ab:69:dc:32:06:fc:9c:f1:
33:48:f7:fa:97:b0:91:65:86:69:79:56:27:4c:f3:ed:d7:df:
18:a3:b5:b7:f1:7c:e4:2c:d1:10:5e:90:dc:48:72:e9:67:1d:
b1:04:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:54:03 2025 by rpki-client