Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: sGN7KkIM10+Xdfv1918ZynQ9JO+yRDeTNC/K0NJ0CVg=
Subject key identifier: E9:7B:52:75:5D:28:5A:0A:32:58:A1:37:DF:04:EA:03:D6:91:A7:B2
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 019921B0AD5F2A774C7A3340428C19BFF17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 15A0
Signing time: Sun 07 Sep 2025 01:00:50 +0000
Manifest this update: Sun 07 Sep 2025 01:00:50 +0000
Manifest next update: Mon 08 Sep 2025 01:00:50 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: xUYMEp/bPIG8UpVGU4D2xSTgt2lUrV5oG+i/D2C2qQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:ad:5f:2a:77:4c:7a:33:40:42:8c:19:bf:f1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Sep 7 01:00:50 2025 GMT
Not After : Sep 8 01:00:50 2025 GMT
Subject: CN=e97b52755d285a0a3258a137df04ea03d691a7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:06:63:57:36:00:86:5a:c5:53:61:42:85:
63:1e:78:18:cb:c6:c3:64:1b:57:d4:44:dd:a5:a5:
8d:e1:ba:50:d1:2d:fa:5d:1b:df:95:14:28:d7:35:
52:06:7b:2e:cc:bb:6d:89:70:40:7a:e6:03:56:09:
94:05:7a:15:05:00:5d:5d:cb:77:84:b3:b1:94:68:
de:63:09:41:24:01:64:45:74:75:b7:e0:9b:1a:f1:
e0:2d:97:f7:f2:31:94:37:2e:57:03:08:45:9c:e8:
e1:e3:78:17:a6:78:bb:cd:8e:7c:7e:4b:2f:8c:8d:
cf:c7:77:a2:06:83:02:3d:5f:85:1d:84:35:6b:5e:
0f:a9:0b:c1:f1:e4:53:f6:68:b2:d0:06:d9:e8:72:
cb:3f:a2:24:fb:11:e2:f6:82:5a:db:fb:7d:2e:4d:
54:ff:a0:e9:43:24:e7:54:c3:fc:d5:ef:f3:c5:8c:
58:69:3b:e4:8f:2b:88:60:61:b5:e0:0b:fd:9a:2a:
32:51:d7:e1:c5:c5:29:d9:c4:1f:45:56:87:c1:69:
c6:ad:7e:22:bb:54:ef:0b:f6:99:6d:7e:94:7b:f5:
df:a7:9c:48:50:5f:f7:4b:2f:e6:dd:3a:06:cd:22:
22:e8:db:e2:f7:ab:5a:5f:64:8b:3f:8b:66:9d:ca:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7B:52:75:5D:28:5A:0A:32:58:A1:37:DF:04:EA:03:D6:91:A7:B2
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:a6:60:23:00:ba:97:07:29:de:2f:00:ad:b1:0b:ff:52:
45:2f:4d:af:7e:a3:a4:9e:95:35:a2:03:71:19:10:28:5c:0c:
b1:f4:ad:db:31:44:3d:70:6e:90:8f:71:5e:a5:5e:fa:38:c0:
65:ca:c9:85:1c:0b:7c:3b:88:20:11:91:9a:07:47:c3:7a:a7:
83:79:48:74:f1:24:71:75:50:5b:08:f8:32:36:c8:2c:97:a5:
24:1f:cd:5f:ba:ae:fa:e7:74:f3:9a:68:f6:8d:1b:d3:ec:b0:
40:b2:65:53:eb:bb:93:8b:95:f1:2a:d2:1c:a8:ce:90:c1:13:
9b:34:e3:f5:db:fa:ed:80:4a:d5:3d:78:16:19:ea:eb:34:e9:
a9:e9:a1:fe:35:79:c2:65:69:8e:70:64:a8:05:28:4e:96:0d:
cd:45:6b:7f:aa:72:b6:d6:64:ff:00:ba:4a:f0:5e:c2:91:37:
b4:1c:c0:ec:a2:df:41:5a:80:63:ff:30:ef:18:72:1d:b4:11:
2e:17:7a:e3:b0:e6:50:e8:d7:05:97:b9:33:9c:ee:05:6a:e2:
17:f4:f0:7e:76:1f:b9:de:e5:dd:83:d1:11:2f:cb:fd:e2:45:
f5:a8:6e:c6:e3:6e:ab:98:8b:73:97:f5:96:82:72:ec:45:b8:
ee:80:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:36 2025 by rpki-client