Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File: HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier: VD/ogYB+G6zCslymSLWXnTJ/HrowP5IZ2/uUiYUo3M0=
Subject key identifier: 71:FB:F6:58:A4:F2:80:C3:DA:9B:27:FF:02:35:9A:8A:73:66:E7:C8
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial: 01987450A10E6FBA502E6443618B7A7127C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:37 +0000
Manifest this update: Mon 04 Aug 2025 09:01:37 +0000
Manifest next update: Tue 05 Aug 2025 09:01:37 +0000
Files and hashes: 1: 1Az4dE0ZX7KAKDKykX60lhzHZkE.roa (hash: 8wvcW71BfAfRwFPQ94lUDGje+TfkTvnyVdfl40+6qJo=)
2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: nXfgvIV6HgbIR/uadZQ27MOKKOw9823zRAPqZMWPMpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a1:0e:6f:ba:50:2e:64:43:61:8b:7a:71:27:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Validity
Not Before: Aug 4 09:01:37 2025 GMT
Not After : Aug 5 09:01:37 2025 GMT
Subject: CN=71fbf658a4f280c3da9b27ff02359a8a7366e7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:56:98:6f:c4:44:df:38:6c:51:4f:84:c1:
7d:bd:cb:ce:7b:f5:b2:78:f9:12:3c:35:9f:e2:a3:
b9:91:8d:61:e2:e2:9e:24:61:84:ba:57:5b:0a:39:
df:3b:13:bf:32:db:b7:3a:42:77:eb:21:43:8e:0a:
81:9d:2e:73:4b:3e:27:ce:bb:c0:15:60:11:2e:a7:
d0:e7:f4:20:89:c5:99:44:f9:29:0c:a5:4f:94:b6:
a6:a0:44:1a:40:2f:1e:28:fa:9b:dc:4f:a1:32:e5:
f7:39:f6:1b:63:e9:1a:07:c2:31:49:39:be:fb:f2:
c1:c0:71:0f:41:2c:1c:ae:1b:60:85:64:04:ef:25:
b7:e0:54:21:aa:f0:7f:80:37:17:26:9f:a4:73:0d:
fb:11:fd:b4:f2:bf:86:dc:e4:03:5e:04:55:53:f2:
9f:58:05:3c:be:92:0f:eb:94:5a:c6:fe:55:78:78:
17:04:fa:d5:f5:d9:29:73:d4:a9:f5:d3:cf:af:6e:
29:81:41:a9:b4:fb:9c:4c:dd:6b:38:01:7d:54:16:
bb:94:8d:d2:3a:04:72:cc:3c:f0:e9:a7:e7:6e:97:
7c:3b:8c:0d:7f:b8:11:07:03:3b:2b:f3:0f:40:65:
ce:bf:bc:27:31:e1:e1:81:1b:d6:89:86:5f:27:b0:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:F6:58:A4:F2:80:C3:DA:9B:27:FF:02:35:9A:8A:73:66:E7:C8
X509v3 Authority Key Identifier:
keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d5:3c:f5:df:35:60:b2:5e:64:79:58:16:e1:aa:35:c5:63:
0f:aa:b4:11:59:3f:df:93:4c:6b:10:85:9e:70:5d:e9:ef:12:
23:7c:43:2c:02:15:18:b1:fc:5b:42:08:53:91:d7:d6:ac:5f:
35:c5:29:45:ea:23:cf:b2:9b:69:f5:a5:e9:f1:7c:f9:d8:07:
64:42:44:15:51:0b:be:71:bb:ce:7a:02:06:ac:15:66:66:5b:
89:09:6b:71:b8:ce:1f:e8:31:04:60:70:40:c1:2f:d0:6d:9c:
bc:84:54:d3:39:1b:30:6c:3b:a1:be:65:92:1b:f7:8f:f8:ac:
71:74:f3:ba:9b:9c:5e:72:11:ea:0c:1b:d3:8e:12:cf:66:ed:
d4:50:b5:24:26:eb:b1:05:21:0a:49:38:7b:cb:c6:74:af:02:
18:13:5a:63:21:90:52:be:76:ee:1e:4b:88:0e:bf:d2:63:94:
63:9e:6a:94:8e:d0:e7:4b:c2:64:24:78:11:91:09:e6:0c:69:
81:d3:71:17:3b:d3:16:fd:c9:07:fd:1d:db:ec:be:2f:3f:62:
4e:d5:b6:36:fb:8a:b2:6d:08:68:95:44:a7:61:05:aa:7b:3c:
f3:45:03:2c:0c:65:d7:b1:43:df:46:9e:34:75:cf:11:7e:01:
a7:c4:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:06 2025 by rpki-client