Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier: dRzRGXSpMo+4GyQ41fv4E06M57su3dQ4rAYT3iY9ykQ=
Subject key identifier: CF:D9:79:B8:66:AC:28:8C:2F:06:7D:A7:50:E0:96:4C:87:21:67:37
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 019874509C67997E814C61777D7EE539FAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:01:36 +0000
Manifest this update: Mon 04 Aug 2025 09:01:36 +0000
Manifest next update: Tue 05 Aug 2025 09:01:36 +0000
Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: Dwa1wylMKihk8hh6qtOT4A8tJadG/l/20GblKhFEuw4=)
2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:9c:67:99:7e:81:4c:61:77:7d:7e:e5:39:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Aug 4 09:01:36 2025 GMT
Not After : Aug 5 09:01:36 2025 GMT
Subject: CN=cfd979b866ac288c2f067da750e0964c87216737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9a:29:2d:c9:c3:49:3b:02:6b:ce:74:21:45:
c6:36:1c:e3:59:85:a0:d3:39:e1:d0:58:7f:f8:ab:
06:dc:69:a2:49:f8:b5:d4:df:d6:6a:29:38:3b:f7:
0e:bf:cf:de:e6:6e:9d:9a:87:d4:88:03:4b:0f:b1:
6f:0c:03:ed:f3:a3:04:73:c5:83:83:7a:2d:b0:23:
08:f2:ed:0c:c6:10:9c:89:3a:79:20:c8:d5:ee:3b:
bf:46:de:10:3f:a6:50:00:80:e9:54:21:7b:a8:66:
53:4c:61:81:c1:b8:fb:0a:de:c7:e8:a6:b0:5e:e8:
00:61:a0:8e:92:1f:5b:11:1b:ba:ca:06:39:0a:0f:
7c:e4:e6:cd:00:ae:4c:ba:73:2a:ef:f8:3c:ab:0d:
46:db:23:62:63:92:74:39:e9:0b:4c:b3:f3:aa:af:
9a:92:db:09:df:ba:c7:ca:d9:e2:45:c0:11:d5:20:
99:66:49:b1:81:51:5d:33:2f:a4:d5:09:65:e8:5b:
d7:95:82:69:6a:01:ad:b8:c6:54:49:0c:25:f7:ff:
5d:ec:dd:24:f6:21:21:01:a9:4d:39:88:1c:45:97:
99:a5:e6:39:56:b4:7a:a2:90:ae:68:25:da:2c:78:
56:c3:f9:7d:0c:2a:58:8b:72:0a:d8:cd:3c:18:20:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:79:B8:66:AC:28:8C:2F:06:7D:A7:50:E0:96:4C:87:21:67:37
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:4c:11:9d:de:2f:89:b7:a5:56:f8:84:da:2e:f4:f7:cc:
5f:59:75:9e:f7:1b:0b:f2:d5:94:3e:40:36:ec:8a:89:b2:b5:
26:12:5f:3d:89:1f:aa:eb:75:69:6e:b3:e2:aa:80:7c:db:56:
76:1d:e3:d7:c1:92:09:f9:20:32:94:ef:60:71:44:c1:18:b0:
98:14:a4:1a:8e:14:9b:96:be:71:20:0b:6d:f6:0d:dc:73:a5:
43:cc:83:4a:bb:c3:c3:aa:90:fd:68:82:83:96:c4:c1:d9:36:
da:a2:21:07:fe:e7:b9:d7:89:ce:1f:6e:77:87:f4:21:5b:a9:
f5:6c:94:c0:4a:9f:da:a9:7f:c1:5d:4a:3d:1d:38:93:26:12:
3c:53:e9:5d:31:09:ae:ab:b0:13:f2:c9:cb:ae:0f:e1:e7:7a:
a0:f1:5a:96:aa:a4:77:d9:0a:10:08:58:fe:62:db:25:e4:5e:
cb:03:b2:2d:05:73:30:67:1e:f0:e0:d3:c1:7f:4a:b7:ab:ab:
54:c3:03:5a:4f:f2:9d:d7:04:67:24:91:ea:d8:1c:8c:79:3f:
ce:f0:be:e3:aa:63:f2:6a:5f:e8:f7:14:e2:ce:1b:98:ab:c2:
d8:35:ca:b2:39:41:a3:85:0b:97:96:ef:2b:53:1b:24:be:8a:
da:59:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:25 2025 by rpki-client