Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: DWtyau7M8HS2QoTIZYvXn+uyvgI12xSocn7u3dr1xgQ=
Subject key identifier: 23:EA:E4:F4:77:F2:A8:D0:FB:03:27:A9:B5:C0:58:A3:26:4D:57:2E
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 01988166A0B9088D8BA28A9B62223DAA95ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 116F
Signing time: Wed 06 Aug 2025 22:00:43 +0000
Manifest this update: Wed 06 Aug 2025 22:00:43 +0000
Manifest next update: Thu 07 Aug 2025 22:00:43 +0000
Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: Yjh0N8tdC0m2kUBH1GiQIFNwSodCksXhHk7YaLyqLkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:a0:b9:08:8d:8b:a2:8a:9b:62:22:3d:aa:95:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Aug 6 22:00:43 2025 GMT
Not After : Aug 7 22:00:43 2025 GMT
Subject: CN=23eae4f477f2a8d0fb0327a9b5c058a3264d572e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:f2:ef:66:98:36:5e:8c:8c:f0:9c:8a:0b:
6b:5f:d9:66:5a:2c:23:48:a9:e8:eb:1b:4c:4c:bc:
44:fa:45:26:1f:0f:95:4e:7d:52:7f:f5:8f:aa:66:
a2:1f:a8:53:0c:c7:03:bb:27:77:bf:9e:55:bf:be:
6f:9f:89:6f:56:7e:73:83:7f:74:a9:9a:6f:90:fb:
ae:87:38:60:b0:05:25:f7:e6:92:3f:4d:54:31:f2:
dc:81:7f:33:2e:71:ff:2e:73:23:75:f5:60:dc:0e:
83:a6:3a:16:0c:52:09:64:3a:be:41:f9:e1:c5:0c:
c1:ae:9d:1c:52:18:24:4f:50:00:b0:08:e0:b3:3d:
4d:a1:fe:6a:cc:b9:f6:e3:cf:f0:9e:3d:a0:27:23:
e3:ba:17:04:ea:77:ea:92:54:2b:a5:2c:ca:9e:c5:
eb:8a:5c:30:f3:9d:7b:13:e8:de:f2:75:25:ca:9d:
71:95:38:e7:d4:7e:5d:18:f5:74:df:2a:a8:eb:15:
7d:bf:79:6e:ec:a1:00:b1:b2:13:62:5f:91:5e:5b:
91:fd:88:08:3f:95:2f:05:16:ea:78:88:68:cc:ad:
33:d7:84:7e:d3:1d:f5:87:74:6d:5d:ff:b5:d0:cd:
4a:17:db:43:37:6c:1d:9b:99:f2:b3:8b:0a:88:db:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:E4:F4:77:F2:A8:D0:FB:03:27:A9:B5:C0:58:A3:26:4D:57:2E
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:05:40:7b:eb:eb:4f:5d:db:d0:41:c4:26:3e:bd:bd:4f:b0:
70:31:ba:64:da:66:38:89:f2:4c:81:03:c3:82:d9:2f:75:e0:
98:a4:79:49:b3:25:46:db:a0:4a:9c:59:b1:9e:21:e5:89:97:
37:1d:99:5a:2d:06:59:7a:10:b1:18:25:77:4b:a1:f4:25:61:
27:33:29:c3:c0:9d:45:e7:21:34:8b:67:60:8e:c8:9a:24:cf:
97:35:69:35:fc:85:92:44:da:1e:dc:55:e6:c3:71:5c:4f:b9:
1b:a7:32:cd:f8:df:11:a4:a8:75:d4:9f:8a:4e:7e:d3:b5:3c:
db:e6:ce:7a:ed:1d:09:6c:f8:9d:72:a1:01:ca:f9:bc:f0:1d:
d3:1e:4f:94:16:1e:b8:9c:a4:5c:18:77:50:30:cd:9b:67:1f:
ab:13:e2:95:ec:73:e5:bc:db:0d:48:6d:91:a4:3a:7b:43:54:
b0:18:13:b2:2d:25:4c:b4:9e:49:84:12:b2:04:6b:ed:d1:d8:
c0:ad:3f:d5:45:09:a4:11:0c:15:0d:dd:c3:b1:8d:7d:4a:7a:
60:bd:cb:6c:f6:ca:f2:3c:9f:62:bf:08:00:0f:93:08:53:c1:
73:dd:87:ee:c5:d2:70:38:01:c3:9e:a5:69:52:be:b6:87:b9:
db:d2:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:10 2025 by rpki-client