Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
File: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json)
Hash identifier: 9VE7oewMkSop/dssl7SGLXZVqjXaa4LN6KSaHKumdVo=
Subject key identifier: 84:52:5F:3B:D7:F8:BA:AA:53:56:39:88:AB:63:3A:A4:6A:8B:E7:C3
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Certificate issuer: /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial: 0198733D1D652288999D1D6D27CFD86AC24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 04:00:41 +0000
Manifest this update: Mon 04 Aug 2025 04:00:41 +0000
Manifest next update: Tue 05 Aug 2025 04:00:41 +0000
Files and hashes: 1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: xsdE34C8TTxurtjGwyO+7VsG8YSdzDjRvjvWoluPyZY=)
2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:1d:65:22:88:99:9d:1d:6d:27:cf:d8:6a:c2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Validity
Not Before: Aug 4 04:00:41 2025 GMT
Not After : Aug 5 04:00:41 2025 GMT
Subject: CN=84525f3bd7f8baaa53563988ab633aa46a8be7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:38:43:38:a1:ce:a1:14:31:b0:46:44:6c:
4b:af:42:e3:af:19:35:22:e4:c3:25:5b:ad:13:fb:
d8:ce:81:d3:c7:04:c5:d0:1d:33:87:3b:fe:c7:29:
d0:cf:e6:b7:af:b4:99:5a:2d:18:0e:1c:ac:b6:0b:
92:20:9c:c9:f8:3b:af:4f:67:89:a1:ea:d4:ff:0c:
09:43:03:9b:89:c3:00:27:56:38:5e:73:50:a7:70:
23:18:e2:5f:ef:14:2e:86:72:59:dd:92:67:5e:f6:
da:40:86:df:7b:ca:23:80:e1:61:14:3e:e4:a1:16:
cd:be:02:1f:f7:0e:91:90:8d:f9:da:5c:24:ed:36:
a3:77:a6:c6:b0:53:7d:b6:a6:96:fe:5f:11:75:d3:
b0:3d:a9:49:db:a8:a9:a8:04:29:a6:0c:c1:15:27:
be:98:2d:0d:19:20:9d:0e:a8:23:24:7a:20:1e:ab:
3c:53:86:d5:69:93:f6:22:25:86:39:66:5a:d2:d9:
1c:fc:f8:4e:c4:b2:2f:96:73:42:28:05:4f:89:07:
79:56:a0:60:3f:4f:4e:dd:06:20:71:8b:ce:71:94:
a4:40:2e:38:b0:21:c5:5f:08:95:1c:b8:13:fe:11:
cc:71:68:34:d6:1f:7f:54:ce:18:6c:bb:46:b0:88:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:5F:3B:D7:F8:BA:AA:53:56:39:88:AB:63:3A:A4:6A:8B:E7:C3
X509v3 Authority Key Identifier:
keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:54:17:ab:0c:62:b0:ff:7f:55:bc:75:5e:40:24:99:ad:43:
c7:25:ad:9d:8c:39:73:66:df:8b:44:95:fb:6e:41:d3:b6:79:
82:3e:8a:18:91:bb:5d:07:4f:58:1d:bc:c3:ba:b1:38:61:d8:
bb:04:92:f2:8c:79:49:23:65:d5:a3:ef:92:b7:61:3d:e8:65:
9c:a5:a3:2b:f8:8a:bc:91:8b:38:bb:16:01:d0:92:67:9d:36:
86:53:87:65:ae:19:2b:00:89:09:66:9a:d8:c5:02:c4:c6:1e:
6b:f2:b7:7a:1d:ae:44:77:03:61:ca:5c:8d:4a:bc:5c:90:56:
6c:5b:05:81:27:ea:2b:f2:3c:ac:16:ee:6b:f9:09:e0:83:64:
97:a7:ce:29:db:8a:8d:5a:81:30:04:93:89:d1:81:b1:9f:ba:
ae:64:44:20:c4:40:32:ee:df:fd:4c:61:23:ad:4a:65:59:86:
cb:ad:b1:3d:08:97:55:64:e4:ba:6d:21:d4:cc:58:57:05:3a:
83:b9:0f:72:c8:70:c6:0b:8c:f3:4f:1b:2e:b9:98:04:19:0b:
db:d0:6d:02:7f:0f:6b:56:0b:c4:66:f8:85:9e:2c:8c:56:08:
cf:f4:49:9c:e5:f1:7d:5e:5b:c7:38:bf:b7:03:83:03:a1:a1:
6f:c8:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:50 2025 by rpki-client