Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: JFOJ0JYU5ThNOGFZSaF8m0/XmFFtsVGI6Hm9Aoa7JOE=
Subject key identifier: 8F:7A:40:17:79:00:68:55:47:E2:5A:6F:B2:55:68:97:0E:7B:31:04
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 0198A0BB4C8592CB915AC8A2CA08ADB95566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 0808
Signing time: Wed 13 Aug 2025 00:01:25 +0000
Manifest this update: Wed 13 Aug 2025 00:01:25 +0000
Manifest next update: Thu 14 Aug 2025 00:01:25 +0000
Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: aUrzwAb19k/KJNFpUZYLo8Frmc7Wbumn2gBoF3QApZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:4c:85:92:cb:91:5a:c8:a2:ca:08:ad:b9:55:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Aug 13 00:01:25 2025 GMT
Not After : Aug 14 00:01:25 2025 GMT
Subject: CN=8f7a40177900685547e25a6fb25568970e7b3104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:6b:60:2b:b7:dc:52:8b:d5:02:3e:03:60:
36:a2:3d:13:b0:cd:83:36:aa:9a:70:21:29:d3:55:
08:56:f8:07:33:66:a2:2b:25:ef:df:17:9f:ed:a6:
b8:f7:4a:2e:f5:48:3c:bb:b5:89:67:a5:33:f7:c3:
8a:c3:6b:86:13:62:4b:ca:52:95:3f:c9:ee:28:7d:
8c:04:36:86:fe:95:9e:e3:fe:45:8b:3b:2b:39:56:
f9:08:ac:5e:ae:bd:37:9e:61:0f:0a:36:cf:2a:f7:
3d:3e:c1:e2:36:0a:02:8b:18:b1:4f:d5:20:6b:c0:
54:26:cf:4e:04:6b:37:02:ef:e5:2d:2a:cb:8f:0a:
a3:79:50:d0:34:92:84:79:a3:c3:bf:d2:6d:af:ce:
ea:69:6c:fe:22:9f:11:6f:76:66:07:cd:0f:05:3b:
00:78:41:ab:80:21:f3:ab:95:a2:b4:94:c4:40:c8:
1b:b8:3b:78:f6:f7:7f:1b:d5:62:fb:c4:6d:61:75:
18:e4:7f:ca:be:2a:11:2f:26:93:12:88:d9:e4:06:
53:14:0e:c8:a5:14:20:b1:d8:01:0a:1a:ea:74:0b:
a1:53:f7:60:f3:1c:36:db:f9:7d:65:94:f3:1c:7e:
69:45:15:3b:b4:d5:61:55:83:b0:ff:1a:9c:6b:6c:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7A:40:17:79:00:68:55:47:E2:5A:6F:B2:55:68:97:0E:7B:31:04
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d7:ba:b8:6e:85:38:9b:3b:e2:af:cd:31:ed:34:8f:bd:3f:
20:7f:88:79:7b:8e:83:cc:0d:58:c9:db:72:b1:dd:c5:a5:43:
82:c1:f3:3b:bd:f9:fc:8d:f4:0f:16:cb:d4:90:d6:bf:4e:1f:
63:d0:e7:31:0f:8e:4c:f5:89:68:1d:b7:f2:0b:63:84:43:6d:
11:71:9b:e7:e1:13:ec:6c:a2:ae:cb:2a:44:98:be:7e:33:3d:
cc:52:0f:4c:b5:aa:8e:4e:eb:49:a2:10:05:c4:04:29:61:a9:
16:e2:6a:ae:de:a0:b1:d7:cb:7a:21:cb:29:da:fd:17:04:e4:
a9:fa:e2:c7:a6:79:92:c4:58:32:4d:47:61:be:c6:98:12:d5:
b5:20:8b:72:2c:dc:d6:15:0d:07:ff:3a:1a:3f:82:38:6c:08:
90:cf:b6:75:2f:00:3d:f6:11:38:9e:b0:de:4c:53:dc:ab:39:
2f:5d:80:a5:15:28:48:b9:57:31:70:fd:ed:05:70:02:03:9f:
b5:d5:9c:0a:5c:8b:a5:bf:e3:6b:a0:fc:10:64:c9:ad:16:59:
39:b5:64:c4:ff:32:aa:a1:01:45:49:05:99:2b:72:13:32:ca:
ac:c5:82:57:4a:dd:05:b1:15:45:d6:04:6f:95:d3:27:4b:a5:
73:49:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:25 2025 by rpki-client