Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: vbto9PAbFmT9Td2GjMXkQ7GFG9XTaSLP+x3f7AWwqoU=
Subject key identifier: 42:79:65:B7:B0:E1:C5:66:4D:CD:E1:11:47:9C:C0:8F:E1:72:3B:E4
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019938DFD4F19C8FE3D5989F747FB20930F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0F8A
Signing time: Thu 11 Sep 2025 13:03:37 +0000
Manifest this update: Thu 11 Sep 2025 13:03:37 +0000
Manifest next update: Fri 12 Sep 2025 13:03:37 +0000
Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=)
2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: U2t2OOwaEGw+jnlaxm5dgluKpGl90qnVms0m2B42Dcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:d4:f1:9c:8f:e3:d5:98:9f:74:7f:b2:09:30:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Sep 11 13:03:37 2025 GMT
Not After : Sep 12 13:03:37 2025 GMT
Subject: CN=427965b7b0e1c5664dcde111479cc08fe1723be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:24:c5:00:6f:37:9a:ea:c3:6b:cc:c7:4a:
b0:f0:85:7a:81:42:89:8d:c3:d8:2c:ad:a2:e4:2c:
0b:70:66:09:55:33:78:a4:f9:3e:31:23:77:88:e2:
6a:69:f3:bf:70:12:a9:bb:a2:e5:38:a6:74:ad:67:
49:02:bf:45:9c:47:c3:9f:d4:da:77:63:e1:01:50:
f7:fc:03:83:a0:9e:59:4b:c5:a1:a4:54:89:b3:60:
61:c8:ee:52:62:f2:40:0e:9d:70:e5:51:4b:4b:e5:
7a:ee:9a:e3:59:4e:97:2f:c3:78:5e:3a:c7:72:8c:
e8:61:14:bd:7a:45:a2:f6:5b:20:22:c0:a2:7e:b6:
09:a9:1d:56:1a:57:ca:91:57:4c:7a:9f:24:10:1e:
07:7d:56:d1:c9:74:59:2f:90:35:bb:38:13:5e:78:
8d:a4:a8:c5:dc:ed:9b:5c:f4:29:09:f6:0e:c1:6a:
d9:f4:6e:93:20:85:47:48:44:8b:ed:d1:46:bc:08:
a7:3b:34:7f:0d:bf:54:69:04:36:da:fd:42:2f:6d:
c1:67:62:fd:09:6a:50:86:d1:61:ef:cf:3b:fe:3c:
71:df:e0:46:7e:be:9f:3d:1c:68:22:2b:c0:45:20:
b0:16:28:ca:98:d6:33:bf:b1:62:ce:e5:75:4a:80:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:65:B7:B0:E1:C5:66:4D:CD:E1:11:47:9C:C0:8F:E1:72:3B:E4
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:77:27:8d:05:76:49:a0:40:a4:34:9f:3f:71:1d:0b:15:
90:9e:ed:60:8a:ae:1d:e8:87:a2:2e:db:f2:9e:c3:f1:a3:a2:
de:40:9e:1b:9d:9f:14:eb:ca:eb:0c:85:3b:2b:b6:83:b0:93:
b2:9c:c1:ef:63:1a:e4:44:b2:71:53:28:7b:a7:e8:b8:f2:4e:
0b:08:bc:57:55:71:b4:2d:16:eb:0d:2f:0f:9d:9b:a6:76:72:
92:ca:42:f4:02:58:ad:bc:9a:33:c0:b2:b2:28:df:46:b2:45:
12:15:3d:7e:1b:4f:db:5e:24:d0:1f:ec:c0:f5:6e:3c:9e:14:
9b:e3:df:67:82:3a:26:fb:81:fc:a0:51:a1:d1:44:41:d0:07:
0d:35:28:b0:a1:3f:c3:ba:85:97:7d:3c:c2:16:29:26:09:86:
a8:a7:e8:f0:36:47:41:89:90:aa:f5:34:f7:68:4e:fa:52:22:
8f:d0:ea:db:b0:28:4f:a6:3b:94:7d:c0:1f:e9:50:74:23:eb:
9a:f4:78:23:b3:86:54:65:30:92:c3:22:f2:33:7d:3a:be:26:
c7:dd:6f:4e:ae:dc:64:37:82:36:0d:3b:99:b8:d6:ae:0c:9f:
85:9f:73:c0:7d:6d:a4:e9:a5:f1:59:73:88:56:87:8a:31:eb:
92:e3:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:25:04 2025 by rpki-client