Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: glmNJfqqDmgVNh4j+ra+ylXiG00JCXnHskoqxLldMBw=
Subject key identifier: 17:CA:44:66:63:39:8A:03:D5:9F:41:1C:59:A2:7F:9B:09:0D:D3:CA
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 019931FFEBB42031B5A2F25D7F5959734E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 0D9F
Signing time: Wed 10 Sep 2025 05:01:19 +0000
Manifest this update: Wed 10 Sep 2025 05:01:19 +0000
Manifest next update: Thu 11 Sep 2025 05:01:19 +0000
Files and hashes: 1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: JH0y2ALCsKzPA1u5ovHarrfS9duWGh96ueJFLQq3+6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:eb:b4:20:31:b5:a2:f2:5d:7f:59:59:73:4e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Sep 10 05:01:19 2025 GMT
Not After : Sep 11 05:01:19 2025 GMT
Subject: CN=17ca446663398a03d59f411c59a27f9b090dd3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:86:ad:c2:99:c1:a0:96:58:6d:7c:aa:8d:
a5:f4:78:d4:8f:ee:21:ef:17:7d:cb:90:18:42:2f:
1f:7f:38:2e:6f:ad:c8:c4:07:4c:8b:d6:c7:4f:36:
bf:58:17:51:a7:06:b9:39:9f:07:d2:1f:23:c1:58:
bc:b9:4c:da:15:ab:0c:99:c9:29:c6:08:53:3d:bf:
4b:d8:c3:45:89:06:3c:c1:c4:bc:4a:cb:3d:a2:f6:
ef:4b:8a:53:76:a2:96:cb:70:9a:02:e5:54:c1:4c:
28:f8:b9:49:36:d7:d0:5f:4e:45:44:0f:af:15:c0:
aa:d4:04:c9:6d:03:cc:22:99:0a:3e:30:3d:0a:db:
ef:0c:35:0e:3d:ec:93:5b:ee:9a:f5:73:2d:f3:2c:
0a:3e:83:25:29:5a:8a:ac:1d:42:5f:8a:68:8f:b5:
15:da:46:fe:7d:64:c3:91:3d:c2:a8:15:73:c5:a6:
20:80:a0:03:76:dd:87:1c:77:e6:00:fc:27:26:77:
62:8a:f4:c1:3c:f3:62:40:68:9e:9b:8b:9a:8b:4c:
bb:4a:8e:1b:a9:20:a4:9d:22:5f:33:b1:71:87:27:
e9:78:f1:ce:f8:62:2e:38:f9:da:ae:e8:d8:54:4d:
22:65:8f:03:72:61:a7:ee:60:8f:13:10:ed:5d:04:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CA:44:66:63:39:8A:03:D5:9F:41:1C:59:A2:7F:9B:09:0D:D3:CA
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ac:4a:ab:38:57:09:f2:79:be:b0:5e:0e:f4:47:73:fd:f9:
b4:c3:6e:93:4a:ec:08:1e:d4:6c:be:de:d5:c4:c7:69:1f:9f:
af:9c:0b:dc:0b:5c:bc:64:93:86:74:24:5c:6d:23:f0:3b:51:
09:ea:08:fa:52:c4:48:2e:c7:06:fd:7a:c4:80:1a:5c:b4:ed:
8f:be:f8:14:c1:5a:15:a0:1d:5c:32:9e:ba:b0:bd:cd:d0:8d:
af:1d:bf:61:b1:45:3c:ba:24:b0:13:3f:0a:40:56:ca:1f:f7:
88:0a:35:6f:7a:94:81:96:b9:0a:db:3b:8a:ea:8d:fb:9e:ac:
fe:08:ae:3a:f4:7d:2a:97:24:ae:1c:bd:df:c4:1a:c8:eb:aa:
8a:2d:bf:f9:ad:7f:0f:ab:82:e4:be:c4:b7:3a:2d:71:5b:04:
f1:2b:d3:86:3f:8b:eb:d4:d1:79:81:af:fd:19:db:0a:df:8a:
84:3e:2a:58:de:28:00:60:63:5e:e6:63:08:11:9e:a1:d0:e8:
9f:67:65:09:30:23:45:c6:4e:c9:40:05:51:33:93:6d:1e:c4:
8b:f6:d4:96:92:8d:d4:d2:35:fd:60:90:0e:df:bf:5a:a4:11:
f1:b9:61:2e:d5:91:7c:3f:af:ca:e7:05:80:19:45:ce:8a:d6:
36:28:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:30:28 2025 by rpki-client