
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier: yvsyov2Olt5Uu6CyZzREEwy0cpbID/4ve3pKx2gdUY0=
Subject key identifier: AC:EF:CB:9D:C6:0A:53:30:6C:3D:2A:04:10:C4:40:76:0F:FC:0A:C2
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 0198C64969512AAA07BDA62B2AD4FC251E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number: 1083
Signing time: Wed 20 Aug 2025 07:02:36 +0000
Manifest this update: Wed 20 Aug 2025 07:02:36 +0000
Manifest next update: Thu 21 Aug 2025 07:02:36 +0000
Files and hashes: 1: 0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa (hash: 7NVRHz/yavsbwJXBgfeDxYrCqDuUxp9nZbgGaZLZ9oA=)
2: 3wW5MOLSStojI9xiPbeDzYTIyjU.roa (hash: 2XAYsLytjrXYCpBJtfGxqKAam2Z4NRRhSRFoEEd4Llk=)
3: C3bQMRmtLfyKqffanrJ7_7vWCk8.roa (hash: EqbhaUJu7cZDNVqNN0UffRpUBKao2EeOOhzgBDrLfd4=)
4: bpfV9qpUqRU7ZbL5m4qH_-0K2rg.roa (hash: 4P0zOtuiLjjQhgT/25d48jeUAEanfYakXWIUUX0ljiU=)
5: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: HqDY0WPBuGZMGBEPwvAwojQshizcRmIg6+UHHZ/3UMA=)
6: yXjHrq-s43_JYr0rLELUWWQUfRw.roa (hash: 4zzMUSCqPCS+1DFvUjbQidVA6cErC1SxAP7lBmahGck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:69:51:2a:aa:07:bd:a6:2b:2a:d4:fc:25:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Aug 20 07:02:36 2025 GMT
Not After : Aug 21 07:02:36 2025 GMT
Subject: CN=acefcb9dc60a53306c3d2a0410c440760ffc0ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:90:39:45:63:47:8f:5f:c0:56:0c:8f:6b:
71:ea:cd:6e:ba:f9:f8:83:3f:3d:3a:81:2c:9f:72:
e6:c3:13:6a:99:ab:d4:ad:77:75:f4:05:bf:33:cd:
74:c8:77:ad:71:f8:78:8d:39:d4:21:9c:66:6d:3e:
73:83:74:b6:2a:ea:9d:cd:4f:2e:be:e5:ef:17:8a:
9c:59:ce:3f:21:dd:29:86:cf:a8:85:02:51:9a:46:
08:c9:16:6f:86:66:1e:7d:5c:4b:b0:66:d0:2f:18:
75:ee:5c:4d:8f:cc:d5:a4:5c:0a:f5:1f:7d:88:dd:
a9:40:25:49:79:c9:92:92:16:8c:3a:df:e3:a0:1e:
04:b5:aa:ab:f3:86:7c:2a:03:46:78:82:5d:c5:68:
d3:03:e5:79:4f:09:6b:e8:45:13:4c:ce:0e:ab:08:
b6:e4:0b:ae:29:74:93:c3:a0:41:45:c1:ca:49:ea:
48:b6:57:b7:4b:a5:ef:2f:f6:9a:4d:41:12:f1:1c:
0e:4e:4d:ea:d9:d0:00:ed:1e:36:ce:53:18:e3:fb:
7b:a7:34:90:d3:b2:40:be:c8:45:78:49:22:fb:dc:
4c:2f:0e:ad:53:be:fd:f3:e7:27:89:f8:10:5e:ee:
cd:52:de:82:82:9c:6e:be:e5:46:7c:8f:f7:b9:6a:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EF:CB:9D:C6:0A:53:30:6C:3D:2A:04:10:C4:40:76:0F:FC:0A:C2
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:88:ac:e6:df:9f:00:15:38:66:61:88:01:a5:49:5f:e3:13:
9e:9f:c7:90:23:88:00:f7:cf:61:4e:d1:04:e5:c5:7d:10:27:
94:da:d8:d0:74:05:59:44:f9:33:46:40:26:ea:dd:4b:8a:bd:
68:3c:69:5a:11:06:c3:d4:0f:86:03:8e:54:c0:85:f7:d7:e7:
02:3d:c1:3d:0c:d5:65:db:5a:3f:6b:2d:f2:e5:4f:24:5e:c6:
15:4c:27:b8:6a:d7:9d:65:52:49:bc:63:7a:14:d6:c5:d6:95:
b0:a7:af:1a:ce:cd:48:b8:0a:3f:4d:13:a6:17:cf:51:44:6d:
bc:fc:f2:4f:f7:3d:82:02:c8:7c:b2:0c:9f:a7:f9:42:fd:6c:
e7:15:e5:01:77:6d:67:ec:a3:f2:fa:3c:10:f4:ae:2e:d5:5d:
c4:e4:68:ff:02:be:47:12:04:4a:93:0b:1e:d3:cd:99:8e:a7:
0c:45:c2:0d:76:d8:e2:57:f9:bc:b2:19:5c:ee:a7:92:92:a5:
3a:0b:5e:05:8e:76:bd:5c:51:34:ec:ff:57:18:97:85:fa:bb:
7a:49:e4:1c:2d:ac:23:5e:ef:5b:05:de:5d:41:1f:60:54:f2:
d9:e6:89:52:a7:74:87:82:7e:92:01:b3:c7:b3:1e:bf:75:97:
75:2f:99:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:32:12 2025 by rpki-client