Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: V7HuHcn1At5BHnuLuPveXLV+IuO7Q0gBsI4l5HkCtSs=
Subject key identifier: 70:A3:0D:01:57:F7:2F:1E:1D:54:2B:A7:38:B4:8A:E4:04:FB:F7:2E
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 0199240D2F5B0FC0823CE71B45E0FA2F1CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 12:01:07 +0000
Manifest this update: Sun 07 Sep 2025 12:01:07 +0000
Manifest next update: Mon 08 Sep 2025 12:01:07 +0000
Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=)
2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: eT/wI1VVcIPhCZfTSID++S7rHjQ0vcxe3f1IN2x+5P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:2f:5b:0f:c0:82:3c:e7:1b:45:e0:fa:2f:1c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Sep 7 12:01:07 2025 GMT
Not After : Sep 8 12:01:07 2025 GMT
Subject: CN=70a30d0157f72f1e1d542ba738b48ae404fbf72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:7f:47:e0:8e:a1:4d:d9:35:ca:e9:2e:1d:
19:d5:79:bc:86:8a:d1:6d:95:b9:86:42:e3:47:b1:
23:59:3d:10:a2:23:e8:7b:36:27:0d:f5:20:86:97:
d1:02:27:16:db:8a:54:76:bb:db:98:9e:68:7f:c6:
e6:62:ec:c3:7f:37:6d:5f:16:46:56:07:75:15:ae:
bb:6c:6a:ff:88:f7:ad:dc:e7:a2:48:2f:e1:bf:c4:
95:6e:29:50:8c:09:71:a1:2d:f3:92:86:fe:36:83:
9a:f4:be:d6:d0:f2:94:a7:91:68:70:e8:ab:eb:7c:
1b:8a:95:37:b3:ef:cc:9e:b0:fb:3f:56:b9:ce:09:
bb:a4:d0:5f:53:17:dd:e3:5c:16:55:6b:da:56:60:
ff:79:61:52:16:f3:c5:85:c9:99:2f:35:bc:fe:88:
a5:68:ad:d5:c2:d9:f1:15:4f:b3:40:7e:5e:eb:33:
90:ee:b5:8a:d8:93:5b:82:ec:bb:e0:a3:61:34:31:
40:9f:89:b9:d2:10:c5:cc:4b:d5:8a:6e:d6:3b:3e:
a8:72:66:ff:c0:9c:7c:74:c1:82:77:2e:eb:2a:3d:
7c:7a:3d:86:3b:cf:ad:c8:46:da:ff:f4:54:df:7f:
63:f9:ac:0a:7f:93:9b:6c:cb:32:11:13:f8:92:fe:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:0D:01:57:F7:2F:1E:1D:54:2B:A7:38:B4:8A:E4:04:FB:F7:2E
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:17:9f:17:85:5b:94:7f:b4:e3:3c:40:97:a5:fd:db:52:f9:
c0:b2:9f:5d:64:39:d4:70:9f:4a:c4:c7:9a:3c:64:a5:fe:96:
07:88:94:95:31:3b:75:ae:1f:45:e3:e3:99:2b:d0:42:17:ad:
65:75:4a:7d:56:17:f8:d4:22:40:da:e3:fa:70:ab:4a:b4:73:
b8:14:c7:c5:1b:59:66:1a:8f:8e:48:e5:16:f9:79:87:b2:ae:
ef:f8:a5:30:8d:11:bb:c3:aa:f8:a2:23:2a:51:5b:4a:5c:ad:
9c:ae:f8:49:1a:09:e5:46:b8:66:b8:28:dc:e9:9b:ca:c9:97:
f7:c6:c1:b1:50:0b:07:e8:e5:8f:4d:05:f6:4d:df:bc:44:91:
2e:bd:f5:f4:ae:77:82:3b:0a:0c:fb:ed:ca:50:15:de:76:cd:
e9:c0:21:21:84:c1:d4:69:91:2c:c9:88:71:0c:bc:f2:9a:ea:
b0:3a:f7:ad:27:1f:d1:33:aa:29:7b:4d:7c:88:e2:36:08:61:
ee:a8:a4:9b:f4:6d:76:7a:ad:cf:ab:b9:1f:66:af:c9:c0:59:
5c:96:8f:d0:1f:6a:fd:88:25:ed:2d:42:07:dd:fc:eb:2f:ca:
68:da:5e:09:d6:38:5e:7d:9a:2a:d8:9a:bd:d6:c5:2d:ce:95:
77:eb:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:52 2025 by rpki-client