Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: IWzW4XgSefuhZKOApoo7yBLt05FouBftlAV85KbmVH8=
Subject key identifier: 4A:31:60:C4:C1:A9:93:D7:4B:42:C5:19:17:94:18:6C:7E:74:22:77
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01992C6B339CBB017ABEF237EA0F9C851118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 130A
Signing time: Tue 09 Sep 2025 03:00:47 +0000
Manifest this update: Tue 09 Sep 2025 03:00:47 +0000
Manifest next update: Wed 10 Sep 2025 03:00:47 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: q1GBu6oTsTE2Ert2yofacS094G8ia/gGCf7JBsu6QB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:33:9c:bb:01:7a:be:f2:37:ea:0f:9c:85:11:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Sep 9 03:00:47 2025 GMT
Not After : Sep 10 03:00:47 2025 GMT
Subject: CN=4a3160c4c1a993d74b42c5191794186c7e742277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:4f:4d:af:f4:da:0d:fb:c8:c9:65:b4:e9:
94:b6:2b:b3:19:e3:91:9f:80:32:17:72:60:25:86:
c2:47:aa:59:73:e9:03:fb:18:d6:97:f1:18:57:72:
9d:7e:36:9d:5d:0f:07:85:fa:e4:39:41:8c:73:60:
04:3a:b1:6a:c3:6c:58:2a:a6:fd:c5:cc:35:e1:d3:
6e:15:9a:8e:33:f9:e6:45:47:0a:44:01:76:c7:f1:
be:0f:6a:87:c8:54:a7:a4:05:b8:ac:9a:da:8e:5d:
e2:14:40:99:35:de:6e:c3:43:c8:e2:be:e6:de:9a:
64:90:49:31:85:bb:f1:28:3f:5b:ee:08:be:41:03:
13:f9:15:ad:3d:b2:20:94:b0:c9:de:9b:44:a9:2a:
98:25:f3:c0:3d:a0:f1:37:d0:37:86:b7:6a:c7:23:
98:f9:b3:c9:e2:48:95:24:1e:aa:5d:ec:a0:64:1a:
37:51:98:04:52:ef:a6:cc:63:5c:ff:5d:5f:2d:4f:
4e:94:d4:18:92:3f:95:dc:12:f0:4e:58:e4:34:66:
cd:79:23:d2:4d:f2:11:6c:65:d4:2c:73:bc:d4:7c:
9a:80:b9:23:c2:e8:8f:6a:2a:47:62:51:98:f7:2d:
dc:3f:27:3f:ba:2c:69:92:6d:41:48:44:35:d8:98:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:31:60:C4:C1:A9:93:D7:4B:42:C5:19:17:94:18:6C:7E:74:22:77
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:87:f7:bb:63:47:6c:6f:76:f5:cc:f7:1c:79:30:61:db:7f:
16:42:45:61:29:70:72:d1:be:93:bd:a3:04:a8:ac:64:ae:d1:
61:8a:1e:1b:ec:03:0a:c4:fb:e4:57:79:ba:26:a4:ab:97:82:
69:e5:f9:b5:da:a6:01:b0:38:e0:8a:f6:53:be:9f:63:86:79:
98:08:53:2e:21:59:53:0f:9c:b8:5c:25:82:9c:b0:1c:21:33:
3e:48:62:92:f2:b9:e7:dc:3a:bb:c4:48:8b:75:ac:90:69:3f:
77:93:28:83:52:dc:57:b8:d1:f2:04:de:88:d5:52:9f:81:e5:
59:f5:82:ad:6d:c4:fa:c0:5c:cc:48:10:63:04:27:e4:7c:17:
95:d0:9f:12:21:a5:dc:1d:4e:bd:66:e3:f8:72:6c:3c:10:06:
4b:59:14:81:fd:57:5c:eb:ff:41:ad:82:56:c3:7a:40:d4:31:
2f:73:1a:eb:cf:89:66:87:b4:13:36:6e:97:50:f7:84:87:79:
a0:ec:6d:98:c4:3f:e3:e1:8b:41:bc:6a:d3:d8:96:fd:c7:aa:
fe:2c:38:aa:c0:77:a9:06:1c:af:41:72:49:48:75:b4:84:4a:
07:af:02:ef:34:82:92:3c:4a:64:88:e0:e7:0f:72:e3:c1:7a:
1d:b2:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:00:28 2025 by rpki-client