Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: LqLrXNyWJ0Cj3DH7AroiEHVqiteYAVXKEMNz0ItGjrg=
Subject key identifier: D4:DA:BC:42:DB:EA:42:2C:66:FB:37:CA:82:58:75:EA:5B:CB:DE:CD
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 01987C40ADEC89B3BE05E374812111A484F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 0466
Signing time: Tue 05 Aug 2025 22:01:10 +0000
Manifest this update: Tue 05 Aug 2025 22:01:10 +0000
Manifest next update: Wed 06 Aug 2025 22:01:10 +0000
Files and hashes: 1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: ElBAW7OAYv54Jc1YAbIoiuArYECx1tSE4tczY/usZb4=)
2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:ad:ec:89:b3:be:05:e3:74:81:21:11:a4:84:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: Aug 5 22:01:10 2025 GMT
Not After : Aug 6 22:01:10 2025 GMT
Subject: CN=d4dabc42dbea422c66fb37ca825875ea5bcbdecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:f4:e2:86:3b:92:e4:6f:bf:d9:72:0d:b4:
ab:f8:dd:19:83:93:54:9c:27:6e:a4:4d:39:d7:ef:
60:e4:08:8d:59:b7:5b:32:67:62:50:b1:8a:be:49:
ad:f8:73:75:92:56:1b:24:34:3a:42:01:57:25:26:
7c:85:b7:42:19:8d:03:e7:af:c8:3a:9f:4a:af:4b:
5c:94:21:03:5c:a7:2d:27:5c:42:80:30:43:39:0b:
25:7d:61:4b:6e:95:4c:f6:b1:bb:f1:74:8b:44:80:
f4:28:13:10:40:22:6d:da:fd:cc:1b:22:4c:75:69:
fc:cc:91:83:69:eb:45:f4:35:a9:8a:b6:b7:21:d8:
db:75:a3:b3:54:27:be:4a:67:54:a5:4b:95:ad:41:
6c:37:7d:52:36:8a:fb:46:02:bb:88:30:9e:3d:c5:
a7:de:27:f3:d4:90:25:5d:38:a9:05:d6:83:27:61:
26:90:16:d2:75:22:5e:cf:11:b4:a2:90:0a:c6:61:
6f:9c:41:26:22:83:3f:f4:6c:ca:36:11:08:14:1e:
cb:ac:72:75:07:30:25:19:f5:02:f9:dd:5f:24:7d:
7b:9b:f0:a5:f2:06:84:df:89:1b:24:ec:15:f2:9a:
78:8d:ae:70:60:57:68:f8:8c:e1:ca:25:72:9d:68:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DA:BC:42:DB:EA:42:2C:66:FB:37:CA:82:58:75:EA:5B:CB:DE:CD
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:df:d5:15:eb:13:7f:da:a2:c9:f2:b8:b6:75:96:5d:91:50:
00:e3:9b:d3:52:10:02:10:ee:40:8e:fb:4b:12:40:0a:7b:56:
fa:25:28:7f:13:71:86:4f:3f:30:48:e0:3e:32:6d:dc:34:87:
b7:c0:eb:e1:dc:51:05:14:9f:b6:89:6c:99:37:3d:ed:87:39:
44:ae:1d:12:52:bf:40:77:a0:39:7f:52:f7:c3:1a:b4:f2:74:
90:d7:06:b6:aa:56:c0:fc:7f:74:4e:4e:d1:ca:03:82:37:48:
7d:66:71:44:7e:8e:26:e0:3a:da:d4:d4:3a:fb:71:5a:e0:5f:
1b:5e:6f:e4:cd:7b:c0:6a:f1:2e:aa:b1:08:83:11:40:cc:70:
c3:84:fb:0c:f1:ba:9e:58:e5:b1:9c:df:4c:13:3b:45:99:b1:
dc:7b:84:a0:42:20:e8:2e:64:23:0e:27:21:66:b2:4b:f1:77:
08:b7:55:b5:e4:20:ce:5c:72:1f:90:9b:28:40:3f:82:8f:c5:
d2:f3:55:dc:a9:c2:7f:05:68:7d:bf:8b:43:53:58:20:46:3e:
4e:b2:d4:be:7c:0c:8c:ad:6a:26:7a:27:83:c5:2e:e3:62:5b:
7b:2c:35:ff:60:f2:50:1c:0b:8b:ed:c9:0b:3c:2b:41:1e:36:
00:30:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:54 2025 by rpki-client