Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
File: hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft (raw, json)
Hash identifier: iBksQ7Afm2D8On+dVZczqIkaQJZ939PYL4/lt5vWc9s=
Subject key identifier: 70:F2:24:D9:3A:59:19:57:90:2F:C2:02:FA:23:18:A2:FB:5C:2C:AF
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 0199225568E031B2336B1FF911BECA0E5929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
Manifest number: 0CB4
Signing time: Sun 07 Sep 2025 04:00:46 +0000
Manifest this update: Sun 07 Sep 2025 04:00:46 +0000
Manifest next update: Mon 08 Sep 2025 04:00:46 +0000
Files and hashes: 1: MWwCkyjKodNxojuXE4ToQXLtm5w.roa (hash: Ak0owLXzMtwfRek9KqA/lWNxi61mLQqKV5qpbUxSWP4=)
2: NLcJ1zHiWemoNGCQqxBLJZM1epY.roa (hash: sN7g+z3kFVXgkKd1egNCxj+JRztRoGDD2QPyWEFToRI=)
3: hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl (hash: iGUXtF2ouGBT+GUPipVXKRkWdg34eAhgFEf2BnaRw2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:68:e0:31:b2:33:6b:1f:f9:11:be:ca:0e:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Sep 7 04:00:46 2025 GMT
Not After : Sep 8 04:00:46 2025 GMT
Subject: CN=70f224d93a591957902fc202fa2318a2fb5c2caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:8d:8b:4c:dc:93:1f:10:f9:2d:5a:c1:97:
b2:40:80:98:f2:16:3b:51:e2:50:3a:20:56:46:fb:
85:62:1a:6f:12:46:e3:bd:e6:45:6f:e6:1e:03:97:
b9:ce:32:e0:61:55:0e:e1:54:65:a3:b6:27:d1:c7:
22:d1:6d:ba:a2:a4:92:af:97:e6:7d:f5:84:9c:13:
f7:d9:86:90:54:cf:15:dc:70:99:f8:c2:24:ec:db:
0a:6f:ec:0a:6d:ea:75:d8:eb:5d:33:09:5d:fa:13:
a7:01:75:dc:98:34:36:96:a9:3f:17:7b:f1:60:1a:
be:d1:20:9d:61:a4:c8:cb:9a:bd:d5:5d:75:20:f3:
26:23:81:61:db:81:0e:57:87:60:dd:f6:32:e7:6d:
ce:ae:dc:0f:81:83:0d:89:91:fb:f0:99:10:32:5b:
81:5a:14:d6:68:3c:d7:a6:97:ff:23:39:b5:78:21:
57:b1:d2:e6:d0:dc:a1:bd:50:a7:c8:ec:d2:05:00:
46:c0:c6:1e:b4:a5:fb:1b:fe:97:c9:d1:ea:8f:f6:
8f:eb:36:f4:d1:1d:37:c3:b6:24:9d:4d:43:de:14:
6d:af:84:a6:94:cf:e7:1b:df:01:5e:df:cc:fc:ad:
53:98:ee:e0:57:7d:24:8b:08:0d:2f:1d:e9:1f:63:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F2:24:D9:3A:59:19:57:90:2F:C2:02:FA:23:18:A2:FB:5C:2C:AF
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e7:c4:33:72:9e:6b:3e:02:47:21:97:8f:b7:8a:bf:34:59:
57:ed:0f:d5:27:a9:e3:0b:af:de:8b:d9:a2:1b:8f:bd:18:15:
d5:00:85:a2:4b:49:8e:20:44:ef:38:3b:fc:de:99:c2:10:ea:
83:68:27:45:a8:12:c9:8e:66:a8:e1:49:7a:e1:18:ee:9e:2e:
15:65:e3:7c:b4:e6:6d:52:43:65:53:4e:db:b2:ff:69:81:5b:
17:20:7b:c5:05:11:0f:44:cb:43:cc:d2:fe:58:08:0b:55:86:
d7:19:d3:41:b7:f9:7b:a2:01:59:05:52:41:97:0b:00:4e:36:
00:0f:29:af:93:61:81:d7:54:23:88:0c:e6:a0:6a:a6:50:2d:
ff:8b:b7:4e:2f:0a:0f:10:29:2e:4b:cb:57:4a:c0:86:9b:5b:
13:44:1a:7d:1d:90:85:7b:a8:d1:c7:e8:e9:3a:30:7d:7a:f6:
36:d0:db:ed:80:80:be:d0:b6:a2:8e:01:22:56:b0:e1:45:85:
99:55:d3:23:27:30:a1:c4:d7:fa:4c:e4:75:30:84:ac:6d:19:
7e:36:ed:39:bc:c6:56:f4:d3:6e:e7:96:56:aa:6c:87:d6:d9:
8c:c6:7c:d8:26:12:81:55:11:14:5a:0e:56:d2:b2:55:54:ac:
87:73:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:27 2025 by rpki-client