Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: GshtRX1TYFWT418ZvdsdmuFF09FHCefTRoZxJ+Q0Mu8=
Subject key identifier: 68:1D:C1:71:3B:74:B6:11:AF:57:EB:BB:40:F6:28:9D:D8:C2:14:94
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 0198936CCC3C6CD2CA423CF7C70E878B12C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 1027
Signing time: Sun 10 Aug 2025 10:00:37 +0000
Manifest this update: Sun 10 Aug 2025 10:00:37 +0000
Manifest next update: Mon 11 Aug 2025 10:00:37 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: ZRE4TQyxdqo2iu2GKLMbeZ7Kv6TR47F0LvKfEOb9f8E=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:cc:3c:6c:d2:ca:42:3c:f7:c7:0e:87:8b:12:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Aug 10 10:00:37 2025 GMT
Not After : Aug 11 10:00:37 2025 GMT
Subject: CN=681dc1713b74b611af57ebbb40f6289dd8c21494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:35:2d:8b:33:1c:55:f9:7f:eb:9a:e7:43:
64:f2:a2:5e:47:10:4f:5b:56:2c:c6:65:22:9c:26:
c9:88:51:47:ab:db:89:d4:cd:3e:c3:91:a0:85:3d:
e8:98:50:7b:4f:64:35:82:e4:92:5a:af:78:30:b3:
70:91:bb:8d:35:69:79:c0:ea:7b:54:c6:d0:94:86:
b0:f6:0c:e3:15:a7:fd:64:4d:8b:69:da:80:b8:e3:
06:fb:89:a7:5c:6b:42:ca:57:ef:79:b9:bc:03:4f:
dd:50:56:3a:94:d0:ad:92:14:29:44:3f:40:ed:4c:
97:b6:e5:47:79:b2:66:89:91:35:ef:12:78:5f:1c:
89:28:e0:9f:98:79:79:db:05:95:0c:68:b0:3e:85:
9f:a3:54:6e:21:94:c3:3d:76:7e:98:47:be:95:f0:
90:d8:c5:0a:6e:e7:f8:4f:35:42:49:e2:f7:3d:6d:
d7:38:6c:1a:55:b6:b6:5b:2a:ef:2f:0a:d6:1f:a5:
99:b0:96:22:c1:30:94:b6:1e:fb:bf:e5:81:81:d8:
58:26:d8:d8:5e:63:a6:3b:16:82:ad:08:b6:ca:70:
2f:4a:5e:41:24:79:0c:bc:4f:bf:c2:74:d1:82:33:
db:f7:f2:0e:65:86:81:5a:e5:fc:35:03:05:47:06:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1D:C1:71:3B:74:B6:11:AF:57:EB:BB:40:F6:28:9D:D8:C2:14:94
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:d9:43:5d:cf:ba:b3:70:33:c1:d9:f7:45:f9:75:52:14:
23:38:d5:b4:91:6f:2f:c0:be:75:2d:c3:86:56:97:d9:c3:09:
f0:77:36:e9:2d:16:6a:9b:e5:cf:7a:a8:a3:b3:66:a9:27:92:
8d:ea:16:82:64:b0:29:a7:96:04:fa:8f:bf:1a:8f:bd:90:df:
bd:4b:d1:4e:e1:6d:6c:39:5a:5a:3c:a0:69:90:6d:af:e8:0a:
83:6e:af:55:93:7a:c9:ce:00:63:ca:5a:ae:92:a9:c9:4b:11:
42:e3:e8:3d:1b:7e:b8:57:cf:5e:72:8e:b7:98:74:8c:5a:a4:
cc:dc:e1:6e:69:e6:e8:43:cb:44:1e:6d:50:c5:a0:66:80:40:
46:c3:83:43:23:63:09:21:b5:9d:e4:50:d4:34:a5:84:12:ab:
f1:12:81:b6:86:1c:49:71:c4:27:7c:b2:69:90:fd:f3:22:ef:
93:0c:50:07:9f:61:ad:30:9c:74:d3:46:64:c2:5f:fc:9b:20:
95:90:46:09:5f:a6:4e:08:30:bc:78:f4:bf:d2:ee:a0:d9:87:
10:75:c2:21:b2:dc:74:ed:e7:c4:85:5f:fb:3f:56:78:4c:eb:
ee:2e:d0:ff:10:f0:f7:9f:5c:4d:6a:30:32:3c:c9:34:86:3c:
4b:bf:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:29 2025 by rpki-client