Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier: DpHBYzxdE5BrhO8bqzQQYdvSSa+OuOTPSlpjHN6GPRs=
Subject key identifier: 12:C4:B5:E0:53:66:A8:F6:5C:EF:95:BD:4C:99:1D:94:77:DA:32:9F
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 0199239FB5E7BA3E2DF774C8DE1A66B19CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number: 06EC
Signing time: Sun 07 Sep 2025 10:01:33 +0000
Manifest this update: Sun 07 Sep 2025 10:01:33 +0000
Manifest next update: Mon 08 Sep 2025 10:01:33 +0000
Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: i4q/+ogqpI5FYxER9Ydk80kPykkCXy8/8rVsFeuNiJ4=)
2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b5:e7:ba:3e:2d:f7:74:c8:de:1a:66:b1:9c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: Sep 7 10:01:33 2025 GMT
Not After : Sep 8 10:01:33 2025 GMT
Subject: CN=12c4b5e05366a8f65cef95bd4c991d9477da329f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:d6:b7:dc:85:19:d4:94:8d:62:31:4b:88:
bf:39:cb:00:32:4c:37:e9:66:99:9f:9f:16:1b:dc:
14:5d:ba:54:87:a6:83:d9:e0:c1:3b:8e:d2:3f:d1:
6f:82:05:ff:1e:1b:e0:bd:09:a6:7b:8e:99:1c:02:
2d:2e:b4:11:f5:f4:0b:f1:94:b3:01:e5:56:06:8e:
7e:4e:d3:6e:29:0d:fb:bd:8b:25:95:07:2e:6d:94:
d3:ee:d6:76:61:f6:d0:74:83:fa:c2:4d:69:a4:6d:
4a:2f:39:ee:4f:6c:89:5d:b6:c4:ac:d5:0f:78:92:
c0:fb:d8:fe:eb:03:42:f9:33:d9:d6:d9:d5:a1:14:
64:f8:8d:cd:68:15:0b:03:00:15:19:01:cc:81:e8:
ec:3f:ff:3e:a7:f6:28:6f:6b:a5:bc:0a:ad:e0:66:
05:02:51:8e:08:4d:b1:c6:33:75:f5:9a:f1:e7:06:
15:11:40:37:d6:ca:bd:82:36:c5:0a:d5:e8:c4:c9:
c4:a2:7e:9e:b3:72:91:c2:c5:3e:db:f1:05:8d:ab:
f4:d5:c4:4e:a2:33:c2:9d:91:d1:69:3d:b4:5a:99:
65:98:b3:38:11:a9:55:b8:80:8a:c5:29:fd:4b:e9:
e0:31:ac:f8:f0:e6:c3:dd:5f:72:21:0b:d0:3d:ec:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:B5:E0:53:66:A8:F6:5C:EF:95:BD:4C:99:1D:94:77:DA:32:9F
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:80:b6:7b:6a:38:39:d7:5d:e6:6c:3e:fd:d1:ff:78:5d:af:
bd:18:bf:b5:ef:a8:22:3e:01:df:3e:d0:f8:0d:4b:65:73:8b:
03:3f:41:0c:07:56:da:1b:59:37:a4:f1:d4:38:d2:63:00:78:
ec:5b:d7:27:27:e7:54:c2:88:17:2b:2b:ab:a2:48:82:c4:1c:
1a:aa:c0:34:25:ca:e1:b1:68:77:94:eb:6d:b0:7b:66:22:18:
d5:7a:05:d2:78:e4:5b:0d:25:38:b3:0b:5c:49:0c:06:34:e0:
e3:47:ed:da:50:02:98:4a:7d:1a:a3:50:d4:43:8d:cf:7f:a5:
21:d6:15:c7:86:61:4c:2f:2e:75:f7:3e:db:57:b1:3c:b0:01:
d8:26:72:8f:ed:02:38:ce:a9:2a:26:eb:a6:dc:41:49:cd:a3:
63:8a:d5:33:17:2b:61:54:65:95:15:9a:0d:f1:6d:37:8c:89:
a2:36:54:3d:b9:ab:86:a3:f2:c5:a7:23:88:a5:7e:38:73:dd:
68:93:aa:34:f7:61:6e:b5:0a:87:93:1a:c5:ba:14:bc:51:db:
8f:fe:92:0d:21:32:fd:bb:59:35:46:d0:3f:11:63:28:05:b3:
8d:08:2e:e7:7b:e6:16:ff:e1:00:7d:56:1c:9f:1a:bb:8d:c2:
d2:0b:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:46 2025 by rpki-client