Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: p+P8bi+fz8CTo7WjlrqRzLqeTusUKzkLHhozdMW6kfs=
Subject key identifier: E3:2C:4A:59:2F:C9:20:7B:B6:1D:02:D3:DC:22:E5:CD:E7:23:88:72
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 019872988B25E55BC3E3B02263B5B40D5EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 01:00:56 +0000
Manifest this update: Mon 04 Aug 2025 01:00:56 +0000
Manifest next update: Tue 05 Aug 2025 01:00:56 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: HllPN9wBWSUEpri5v/zGNWO4kD3kAVfwLX4SXFFOA30=)
2: MCvxtXhDv-4sOFSG3-70es9IbCc.roa (hash: zG6t5oGWGri6Roj7Zds9875D3+Pp2Gk1iyyfA9Fh0BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:8b:25:e5:5b:c3:e3:b0:22:63:b5:b4:0d:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Aug 4 01:00:56 2025 GMT
Not After : Aug 5 01:00:56 2025 GMT
Subject: CN=e32c4a592fc9207bb61d02d3dc22e5cde7238872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:91:03:15:7e:18:0f:0d:b9:4e:cb:1e:cb:
49:d2:1c:38:37:09:62:2a:be:be:5e:0f:ab:27:60:
9e:17:86:5d:18:b5:5b:7c:74:43:97:45:bc:5a:4d:
3c:98:df:4e:cc:65:19:b1:dd:5b:8c:e4:b3:37:0e:
9c:18:c5:a4:8d:de:07:cd:0d:f8:70:1e:60:fe:51:
0c:4a:a4:4c:5f:66:8f:f3:95:8d:33:05:77:93:dc:
4f:73:9c:c8:0f:c0:20:cd:a2:89:df:06:1e:b7:8b:
a8:c4:1a:4c:5f:1e:b4:c5:d7:9a:97:64:d8:fd:10:
be:69:21:14:ce:e1:d2:be:77:d2:48:5e:2c:6a:84:
c7:c8:72:86:5c:04:61:f2:13:15:62:2b:cc:a6:41:
d4:a5:3a:c3:7c:66:9a:d2:c1:e1:23:eb:58:0d:6c:
d8:65:f6:cb:d2:dc:1a:32:12:ad:35:96:70:15:df:
f7:2e:09:df:58:a2:55:58:2c:c5:d6:a1:76:9a:00:
12:37:a8:58:4c:2f:4c:66:7d:c8:29:e3:4d:a2:b6:
a2:f0:68:a4:64:8d:60:a0:09:46:18:5e:7f:17:84:
e5:99:05:fc:f0:25:0b:c8:8d:ea:fa:bf:ab:88:27:
f5:0a:7b:4d:e0:7f:1d:ca:ad:71:27:e2:f8:78:50:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:4A:59:2F:C9:20:7B:B6:1D:02:D3:DC:22:E5:CD:E7:23:88:72
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:69:a4:64:e9:73:0a:14:db:5d:bb:11:ab:f0:0d:d1:66:79:
e7:df:2c:35:bd:24:64:30:6c:9b:fb:a2:d8:1e:5b:11:b8:fd:
92:83:59:b9:81:ee:9f:ec:e4:8a:38:42:56:0f:c0:67:14:6b:
39:8b:ce:a5:4c:d7:48:49:ca:b7:ae:cf:dd:e6:c3:34:49:d1:
77:ce:f0:00:c6:bf:ca:f5:53:de:64:7e:d6:e7:94:44:45:9f:
17:17:c3:10:69:49:73:71:b5:7a:3f:39:2f:91:87:44:4f:f4:
89:3f:34:7b:0e:dd:1c:02:43:57:3b:f0:7a:97:8c:af:9d:63:
b2:23:e9:e8:b3:21:62:cd:56:d9:d0:da:06:66:f3:25:41:4c:
c8:d3:90:92:bf:0d:b9:f1:2f:b3:3f:a4:e9:84:39:5e:38:06:
23:d9:d5:c4:e2:2a:d8:63:66:a2:3c:94:b1:40:54:22:99:77:
63:8f:2e:f7:7e:e3:1e:7e:5d:25:7b:13:89:10:aa:af:af:73:
69:03:eb:83:79:aa:7f:77:d6:62:e9:71:a9:99:2f:04:02:ac:
3e:e1:b2:17:8e:3d:08:a1:44:4e:22:30:ab:54:b2:91:05:db:
c9:61:49:c5:58:b4:6e:a7:a9:83:dc:d5:22:ff:7c:47:77:0d:
b1:67:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:30 2025 by rpki-client