Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
File: hDvoY59AOZk8H254efRynkfcN64.mft (raw, json)
Hash identifier: KAHJhL/lk2goYD2w4pv+3aurT6kSuyb+d4JCCYv3NMM=
Subject key identifier: A4:AD:D7:66:38:FB:B8:A8:00:DA:2C:02:A4:F5:FC:B2:9B:46:01:90
Authority key identifier: 84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
Certificate issuer: /CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Certificate serial: 019922559E6ECDDBCFD7F2C698B642497B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
Manifest number: 0886
Signing time: Sun 07 Sep 2025 04:01:00 +0000
Manifest this update: Sun 07 Sep 2025 04:01:00 +0000
Manifest next update: Mon 08 Sep 2025 04:01:00 +0000
Files and hashes: 1: J7Gy2XDgfHPCSDMpGX8qtAkzxgw.roa (hash: 6l+CaQcFJnHqVrHhZ9HMXXYDvAoiNAEfMopwPsMkNsc=)
2: hDvoY59AOZk8H254efRynkfcN64.crl (hash: AF33WakbWwiyIZL3BEruqgY4f0B+w9CT2TbnPvfP9jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:9e:6e:cd:db:cf:d7:f2:c6:98:b6:42:49:7b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Validity
Not Before: Sep 7 04:01:00 2025 GMT
Not After : Sep 8 04:01:00 2025 GMT
Subject: CN=a4add76638fbb8a800da2c02a4f5fcb29b460190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:c3:d9:6f:16:c0:47:cf:27:74:ab:73:54:
b4:6f:2a:9e:80:7d:c3:20:66:4b:82:c4:4f:59:28:
d0:5e:ab:3b:8f:c7:31:03:14:82:b4:7c:89:1d:a9:
d2:56:27:60:35:3c:03:de:9e:e0:20:c0:7a:a6:a7:
48:b4:2f:8b:ac:58:e9:8a:df:00:e3:e8:b1:4c:65:
09:7e:b3:ff:0c:76:0b:7f:39:a8:77:78:6b:03:5c:
56:29:0e:25:f1:0f:a0:82:2c:90:67:35:44:c4:63:
e8:69:b0:be:5b:c9:41:74:3a:94:80:a8:60:15:e2:
ee:9e:36:15:27:15:43:c1:0e:f4:f8:72:a9:60:76:
e3:cf:cd:6c:78:e9:20:0d:0e:79:99:f4:65:16:52:
6e:16:37:a1:05:f0:83:a4:76:bd:fb:dc:8e:46:06:
a3:90:93:23:4a:e7:4a:b3:1f:e3:a6:6f:4e:59:77:
1f:74:71:56:54:8d:8b:6c:5c:c0:91:8f:46:4d:b6:
f4:ea:32:91:fe:eb:6d:fb:ce:18:1a:c5:7b:32:d2:
18:0c:fb:32:1b:d4:f7:7e:3c:1a:93:d3:34:7d:fa:
73:51:8f:6b:39:f7:94:13:c0:a8:1b:40:67:59:82:
ef:3b:91:ad:79:6d:19:09:b7:73:c4:fc:7c:37:a4:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AD:D7:66:38:FB:B8:A8:00:DA:2C:02:A4:F5:FC:B2:9B:46:01:90
X509v3 Authority Key Identifier:
keyid:84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4b:44:b7:f6:85:cb:88:27:c2:1d:04:7b:31:02:b6:6d:ec:
7d:d2:5f:98:e4:e0:eb:04:7e:be:de:7e:ea:f7:8e:f6:da:c9:
c6:5d:23:bd:87:bb:68:c8:1a:a6:de:20:6a:7b:e6:24:2f:fc:
f2:08:2c:7c:4c:73:a3:dc:0e:7e:65:e7:5c:2c:33:11:c7:6b:
c1:22:39:20:86:b7:2b:43:07:2d:e2:25:71:5e:36:08:27:9a:
9e:4a:fd:24:d7:7c:d6:52:78:e9:a0:8f:40:a0:a4:18:af:f6:
79:23:c9:14:11:ff:3b:1a:ef:20:df:f1:0c:0a:71:61:26:1e:
2f:ee:16:d7:ee:cf:0d:45:37:30:ad:b7:40:f1:cd:31:c5:6d:
cc:bc:66:20:ee:9b:78:f1:9f:27:50:3a:4b:4c:99:b7:c0:5f:
f2:03:65:3d:27:b7:4b:f4:dc:8f:6d:86:64:a8:c8:16:09:1f:
cc:fd:11:e1:41:3d:e5:58:95:2d:5a:b5:6d:f8:a5:cb:31:39:
0f:74:6b:5b:ad:ff:29:b4:d8:7c:9a:d6:35:d0:b8:79:a8:5a:
be:0f:71:1a:f5:53:bc:c3:d3:ee:7b:43:f4:17:d9:70:18:96:
29:bd:39:d9:40:4a:2f:95:7c:b6:34:93:cc:f5:75:ad:88:d8:
66:e0:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:59 2025 by rpki-client