Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: G55U2oz3+ACnJ55SXzqSJpC6krBriEBqJjFnYn3lKPE=
Subject key identifier: 33:ED:61:F2:31:54:F0:45:4A:56:DE:DF:80:AB:61:20:71:19:EF:A2
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01992D0FA99F432E49A6F19FFA6AEC7136AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0644
Signing time: Tue 09 Sep 2025 06:00:25 +0000
Manifest this update: Tue 09 Sep 2025 06:00:25 +0000
Manifest next update: Wed 10 Sep 2025 06:00:25 +0000
Files and hashes: 1: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: I6rOpTcKbJycT8vORkFwK5qxJUbeFCMTCYdla1vj+uo=)
2: NfUK1WerAdsfJiTM68i5Lnvkb2w.roa (hash: ZGezIXFkpMHBb+7ell8DWUCsKtD9DU2fEiI/6174M+w=)
3: x35TZBfjRzydIntP1wj4bzkffVI.roa (hash: m3lAcV9738Nh7P2x7upDgBTiTVZP/HAse993nyHmPOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:0f:a9:9f:43:2e:49:a6:f1:9f:fa:6a:ec:71:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Sep 9 06:00:25 2025 GMT
Not After : Sep 10 06:00:25 2025 GMT
Subject: CN=33ed61f23154f0454a56dedf80ab61207119efa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:c6:64:b5:c6:2a:7c:ee:f5:6a:ec:5a:e0:
af:4e:ca:cb:e6:e8:39:1d:47:06:01:bd:cb:0e:42:
40:79:10:73:c9:23:7c:42:70:4d:d1:bb:ae:07:39:
8a:8c:eb:54:91:64:06:18:88:c1:c0:b8:03:e8:dc:
58:06:e0:46:64:e8:ba:54:4a:ea:f4:6b:32:68:72:
e0:0e:cc:51:e6:dc:f9:c7:22:7e:93:99:c9:4e:14:
29:bd:3b:30:cd:ce:1b:00:23:45:9c:fd:ea:72:a4:
c2:1e:f1:28:1d:de:d3:c3:88:c4:dc:74:7f:41:3f:
ed:47:98:d7:a4:c9:c7:ef:ec:d7:f3:3f:31:1f:92:
3a:85:fa:fd:67:b6:66:3b:e9:4c:32:f9:9d:42:15:
87:88:31:51:d0:82:f5:53:e9:2a:35:db:2c:9c:ff:
c5:bd:a8:32:bd:b1:ce:08:8d:86:09:cd:4b:42:9b:
8f:b1:b8:c7:60:9e:8f:1c:43:7a:b5:5c:ed:bd:49:
5b:c8:68:7b:70:e7:be:69:de:48:03:01:7f:c6:d0:
f5:2f:26:fe:4f:ad:66:b2:14:a1:df:46:4e:0e:0a:
3d:3c:42:9d:37:72:18:19:da:10:db:3c:03:9c:21:
33:69:09:be:48:ec:ae:10:7a:61:ac:a4:fe:1e:6e:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:61:F2:31:54:F0:45:4A:56:DE:DF:80:AB:61:20:71:19:EF:A2
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f0:7a:ec:f1:8e:e9:3e:4d:ab:c0:2c:47:87:a1:dc:ee:3c:
d8:b2:18:cf:66:3c:f8:fb:5c:d8:16:fe:2e:e6:cd:34:9f:ec:
55:7e:49:f1:07:cd:7e:92:95:c9:05:54:f4:2e:ce:80:79:fc:
5f:dd:4e:9e:d2:2c:e7:b1:07:7c:8a:20:af:71:65:b5:3e:99:
76:7b:b2:8e:2c:45:22:00:45:18:41:57:ca:23:b0:46:28:eb:
e8:c2:11:4b:48:2b:75:cd:cf:e6:6e:75:77:e4:83:60:63:5a:
15:41:79:d8:d7:92:7d:03:41:98:22:c9:5b:a9:8b:f0:5b:7b:
56:83:26:c2:be:31:a7:d2:1f:3a:fb:dd:cc:3a:82:d2:c7:3f:
ef:43:91:bb:f7:9c:84:49:ba:7b:6f:72:bc:ee:3b:db:fb:36:
c6:73:78:95:41:e5:48:44:27:ce:84:98:32:cf:f0:10:e8:e3:
7b:9d:fc:0a:7d:5b:03:cd:62:84:da:47:fb:50:2d:4f:d5:9a:
b4:31:9b:d3:fa:89:63:4d:fd:2d:c7:72:c5:59:75:7c:cf:d5:
28:7c:e2:0f:36:1b:56:5f:0d:58:21:e3:bf:8f:3d:f6:66:c1:
13:6f:8b:b9:f2:ed:97:fd:c0:fe:dc:eb:04:3b:f7:dc:9f:86:
ea:05:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:02:20 2025 by rpki-client