Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File: HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier: jhm7ps68F/Zgko38lx01fR0Zfnw8sxqAQo639KKnWWw=
Subject key identifier: 9E:8C:6B:E3:D0:F5:D0:67:C7:43:96:22:9B:DD:05:FC:E5:84:C1:4D
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 01987306A5911491686818C678F9C47B3505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number: 13AB
Signing time: Mon 04 Aug 2025 03:01:12 +0000
Manifest this update: Mon 04 Aug 2025 03:01:12 +0000
Manifest next update: Tue 05 Aug 2025 03:01:12 +0000
Files and hashes: 1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: uPIAFNW2u0jDb0if9HRIf8IYAvD8ZQ0tPCQeQEJ0VuE=)
2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a5:91:14:91:68:68:18:c6:78:f9:c4:7b:35:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: Aug 4 03:01:12 2025 GMT
Not After : Aug 5 03:01:12 2025 GMT
Subject: CN=9e8c6be3d0f5d067c74396229bdd05fce584c14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:ba:e8:e4:f5:ad:82:a0:55:09:1c:d3:56:
ab:2f:9a:b7:7c:08:a2:ea:db:b8:e0:61:7b:68:c8:
29:7a:96:1d:5a:fb:58:26:4e:f9:05:7b:cd:af:cf:
fc:34:67:83:10:e7:66:c4:be:ac:bf:ad:1d:4b:54:
db:7d:23:a2:55:d9:06:8e:c1:81:02:cd:4f:51:e3:
d0:30:6f:02:f4:14:93:d2:49:c3:58:a3:f5:3c:d1:
af:40:c4:dd:f5:9e:c1:fc:23:62:3b:29:7c:6d:e1:
64:a5:c2:40:aa:41:8d:b7:24:df:f2:90:14:03:a4:
57:ea:63:c8:4b:90:b9:17:4d:0c:4d:ab:83:46:f2:
1e:dd:a0:ad:3a:74:29:02:59:83:a7:65:07:97:7d:
99:4b:95:8b:33:b9:14:cd:f8:57:e0:22:26:4b:b6:
1b:0d:6d:8a:40:99:78:f8:f1:89:fc:d2:12:3c:9a:
99:0a:7c:0d:fa:50:1f:64:07:4d:59:65:c3:71:4d:
19:3d:cf:2b:dd:18:80:18:89:36:35:96:2d:e1:34:
14:03:08:b5:69:cd:38:a0:ac:36:10:e1:0c:fa:0a:
74:1c:48:0d:59:72:ff:88:3e:be:bd:49:ae:5e:bf:
cc:f3:c0:80:47:ac:b5:31:85:54:a8:17:25:17:68:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8C:6B:E3:D0:F5:D0:67:C7:43:96:22:9B:DD:05:FC:E5:84:C1:4D
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c2:79:f0:61:ad:41:6c:37:cc:0b:a8:66:b7:e5:6e:95:5c:
04:52:dc:38:d3:4f:26:a8:be:95:c5:b2:10:34:8d:c8:9a:54:
81:c7:94:9c:91:9c:d1:88:f9:23:20:ac:7f:fd:ba:f3:4c:ad:
f2:bd:fa:a5:ed:d5:ab:8c:8e:92:b3:6e:a9:b9:72:3b:af:31:
e5:d0:bf:48:5a:52:c3:93:b9:56:f6:e9:44:3f:c0:9b:f8:91:
d6:49:01:f5:65:f6:66:0e:4f:bd:21:3a:73:71:e4:60:23:6e:
a8:4d:82:46:6e:ec:2c:1e:33:ad:92:90:4d:10:a4:e0:ea:36:
b6:fd:cd:93:a3:54:bf:e3:98:49:27:57:eb:5d:51:45:fa:50:
c8:7c:ae:8c:4f:12:95:71:36:47:c6:33:5e:d3:5a:6b:48:f3:
42:04:3e:a3:6a:ce:b8:94:28:e1:b8:b5:e4:58:8a:00:0d:e6:
85:21:d3:0f:84:12:e8:62:26:8e:be:6d:a4:e2:e5:2f:17:9d:
87:b9:ae:53:8c:a4:39:ee:98:48:a1:e9:24:b3:95:99:b8:66:
e3:11:e8:8c:43:97:40:42:83:4c:79:04:9e:57:be:87:e5:22:
80:fc:f0:74:d2:50:ff:8f:c1:c6:11:42:ec:67:75:89:49:34:
c3:b4:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:35 2025 by rpki-client