Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: klCeTaXr2SMiXz8gJHFyYE6RIFZTXbS6dmK7sPn/cT8=
Subject key identifier: 37:B7:EC:F7:89:EC:DE:D0:1E:DE:E1:6D:53:2D:0F:E5:69:91:AA:C6
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 01987DF878D2EA836876CB9A5ABCF35820EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 06:01:32 +0000
Manifest this update: Wed 06 Aug 2025 06:01:32 +0000
Manifest next update: Thu 07 Aug 2025 06:01:32 +0000
Files and hashes: 1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=)
2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: mjvaATsKyJ5F6GNG4y2m0pKir89c7HpYJQJKaoZeW4w=)
4: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=)
5: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=)
6: n-W5m8Lx-i-ynu-cgERA98e1TOA.roa (hash: 4MuuW1m/TV8O5IZ0i/ayNAC7gzR7V1teSLC1JE5/iDs=)
7: pMSZccnz2cyq4EAmIRmDcUPtCn0.roa (hash: rRJO86ohCtFwFSEvJg481KQrtUgLqQRd6A69YZTm2Ng=)
8: ySmmDjcV5o8HMr8fci-zFbiYdNg.roa (hash: QRYJ/tIaqmXv+2YeufSiFwnuiLCPfX4BPxDANJPYOl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:78:d2:ea:83:68:76:cb:9a:5a:bc:f3:58:20:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Aug 6 06:01:32 2025 GMT
Not After : Aug 7 06:01:32 2025 GMT
Subject: CN=37b7ecf789ecded01edee16d532d0fe56991aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:76:6a:17:cf:00:7b:63:0f:53:8e:36:73:
22:e7:94:39:51:97:bd:4c:a4:0b:52:af:d8:1e:ef:
ba:7b:a3:9d:6a:71:f3:26:7d:40:34:5e:ee:67:56:
db:56:1c:54:73:21:e1:67:ed:16:ed:4c:a6:97:f6:
0c:ee:ff:55:0c:28:4b:12:33:a3:3d:97:19:89:56:
9b:6d:43:d7:61:14:69:1d:e2:cb:a3:bc:5a:13:4a:
bf:5e:86:bd:f3:b2:06:91:b0:f2:16:01:ad:e8:6f:
a4:a5:cc:d5:1b:ef:fc:16:6c:6d:0e:75:56:0c:ae:
63:55:80:42:c0:10:12:31:12:7e:c5:dc:60:bd:43:
85:4c:29:36:45:b1:bb:05:ec:90:b5:ca:bb:d0:14:
29:50:ad:09:04:ae:ec:10:2e:99:0b:27:a0:58:8f:
90:09:e6:77:ca:78:95:3f:54:8c:fe:e8:87:e4:7f:
76:90:35:78:47:6e:e3:00:34:16:5c:45:50:5d:ce:
df:27:de:05:e4:21:8f:be:59:e1:4a:1e:52:f8:d2:
48:12:35:34:36:55:fc:27:63:75:5a:42:e9:50:21:
46:03:a4:77:fd:38:c6:56:9c:ee:24:38:c8:48:a4:
27:08:dd:20:b1:92:90:b7:1e:81:5c:0c:bd:81:3e:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:EC:F7:89:EC:DE:D0:1E:DE:E1:6D:53:2D:0F:E5:69:91:AA:C6
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:8e:85:30:52:86:7f:94:e2:13:aa:7a:33:b9:bf:75:46:
20:e1:1c:e3:91:69:97:2f:b2:05:d5:c1:f8:35:ca:a2:04:59:
4f:d3:68:88:5d:f6:52:20:6b:66:0f:80:86:37:12:77:4f:c7:
af:47:66:5a:bf:50:09:f2:a8:71:9e:d5:7c:6e:64:c4:a0:11:
7a:12:21:d2:25:37:85:db:6f:3c:08:54:7b:c8:db:fb:65:38:
64:25:19:7f:6a:6d:7b:23:91:cb:76:e1:07:33:75:ba:33:70:
ef:c7:ea:98:af:a5:8b:e2:2d:71:05:05:b4:0a:bb:8f:27:f8:
7e:c6:42:e3:30:d1:e9:55:35:29:5c:90:5a:ca:74:a1:21:ee:
69:60:8a:a5:00:0f:fc:ef:1e:18:10:fd:f4:ee:20:57:66:6a:
e9:e4:4f:5d:a0:1c:e1:0f:e6:85:86:16:92:9a:3a:56:52:29:
a7:68:5c:a5:46:51:a8:d6:71:ab:c6:b9:21:1c:3a:de:ed:48:
cb:a6:5a:53:4f:50:cc:84:5f:f1:89:e9:90:c9:1c:62:6e:ac:
2e:91:01:da:bf:33:c9:44:20:b0:7d:ee:a1:a7:06:62:57:41:
d4:5c:80:b6:d5:62:9a:84:bf:fe:d9:92:b6:19:d8:fc:d5:5a:
bd:98:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:06 2025 by rpki-client