Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: Vw7AXFf8r8Oxmfw4Ab7yr6V16BW+7uepLGvXChJTVcg=
Subject key identifier: 3C:B7:19:75:99:F7:F6:C7:28:FB:08:E1:D2:A1:BD:35:01:B0:CA:4C
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 0198A04D571D678AF68D051DC2C03D495A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 22:01:19 +0000
Manifest this update: Tue 12 Aug 2025 22:01:19 +0000
Manifest next update: Wed 13 Aug 2025 22:01:19 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: J+hDJBbRQHRGEDFF5hfw5+6gIFtVdBrtHYgRN4XSo2U=)
2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:57:1d:67:8a:f6:8d:05:1d:c2:c0:3d:49:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Aug 12 22:01:19 2025 GMT
Not After : Aug 13 22:01:19 2025 GMT
Subject: CN=3cb7197599f7f6c728fb08e1d2a1bd3501b0ca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:ed:42:41:97:61:df:3d:bb:47:a8:81:3f:
42:99:eb:8b:de:cf:d3:15:46:d0:cc:66:0b:f2:f0:
91:50:1d:ee:13:d1:33:1b:6f:7c:a4:d8:1e:9d:6b:
91:a0:76:09:a6:ce:fc:e7:ba:0b:61:85:3c:ce:2c:
07:9e:73:a2:1c:9e:bd:2f:75:ae:cb:93:be:cc:14:
9e:49:b6:b2:ec:d3:0f:17:ad:75:88:a9:48:d0:06:
1e:ab:03:a2:0a:02:08:ed:cb:8b:49:bd:7e:02:d3:
d3:1f:3f:52:c3:11:c2:b2:f6:cc:cc:4e:c0:06:48:
86:cd:c9:36:8d:f6:20:18:a4:c5:39:0e:da:40:ee:
2e:82:6f:51:cb:2d:f3:25:31:ae:8b:3d:54:81:ec:
1e:24:0a:46:fc:1b:20:d3:ff:d3:a3:45:4a:2a:06:
f2:56:b5:0c:73:bd:0c:c5:c4:6c:61:b4:a9:cb:e7:
42:8c:2c:9a:15:eb:f5:19:f3:c4:75:d9:af:0c:62:
30:c1:8d:ac:b0:9a:7f:e9:6f:99:70:7a:29:ff:a8:
81:fe:a8:07:f7:ae:f2:bb:15:c6:c0:5c:e5:fe:91:
ba:0a:16:21:f8:81:23:d0:87:4c:94:90:13:8f:44:
32:c1:4e:67:fe:f5:5f:b9:77:ab:7e:4b:61:fe:5a:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:19:75:99:F7:F6:C7:28:FB:08:E1:D2:A1:BD:35:01:B0:CA:4C
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ab:7b:e6:90:c0:e0:7a:0e:0d:19:3a:1c:4a:8d:57:71:37:
7e:69:ce:ed:18:5b:38:27:57:c5:65:ea:d9:b7:f8:fe:ea:57:
db:9b:11:62:8e:2b:70:98:f8:c8:a2:17:d9:67:45:4d:05:18:
a4:7a:2c:5e:bd:9b:68:28:f8:0c:4d:5f:16:7f:a7:94:1b:dd:
17:f1:3f:95:9e:3c:13:1e:26:be:4e:2f:1c:c5:dd:2b:d7:98:
e6:0b:52:6b:33:fc:05:38:f4:fb:c2:b9:fa:91:74:64:b5:bd:
92:97:cb:24:da:c7:a2:5a:cc:4f:40:61:fa:54:45:e0:58:98:
80:7b:4d:12:b9:9d:19:f9:d8:6a:f8:09:4f:ec:b8:a0:b0:6b:
b7:3b:b4:af:ce:66:da:69:66:40:c2:f5:79:1e:d4:04:2f:e0:
93:ed:f1:95:3a:44:75:e4:8c:ac:80:8f:b6:3f:62:fe:ac:23:
9b:29:d2:6a:b6:34:e5:1f:a5:cc:53:05:49:5c:1e:8b:71:9c:
7a:ac:e4:4d:87:e1:f5:27:30:7c:d7:b7:03:72:63:13:de:12:
68:6e:e2:fd:48:80:bf:f7:79:d3:c9:8b:33:6d:7c:90:7d:4b:
22:12:93:95:49:13:dd:90:5e:6b:e4:f5:3d:b7:1f:2c:bd:91:
e8:86:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:33:01 2025 by rpki-client