Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: vcRCtbuDkHMAJt8bacXpqU31vz9rZRnEmh5BPimJnXI=
Subject key identifier: D3:DE:AC:5F:50:B9:BB:D7:D0:D5:1F:8F:14:C3:D8:1C:FE:3C:5A:05
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 019875D1B47C21958034F2B0D3ACE3E631E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 16:02:14 +0000
Manifest this update: Mon 04 Aug 2025 16:02:14 +0000
Manifest next update: Tue 05 Aug 2025 16:02:14 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: XJ3co9+k4xfoPw5PKgN6ppYqlszNlNUZqVWMa1FLKk4=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:b4:7c:21:95:80:34:f2:b0:d3:ac:e3:e6:31:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Aug 4 16:02:14 2025 GMT
Not After : Aug 5 16:02:14 2025 GMT
Subject: CN=d3deac5f50b9bbd7d0d51f8f14c3d81cfe3c5a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:04:7c:c9:85:97:e6:4e:31:1d:f9:ed:06:
69:4c:60:b5:83:82:91:2e:a5:3a:e7:36:52:34:bb:
30:61:20:07:10:cc:bb:17:86:df:ea:d2:12:18:19:
ee:d0:61:ea:99:d8:09:bd:96:19:95:2a:fd:c0:2a:
d1:45:aa:f4:5f:af:61:cb:81:49:28:c1:f6:05:cc:
96:91:33:2f:4d:47:f9:54:63:e5:52:5d:3c:78:2f:
72:dc:24:ef:7a:c9:7f:b7:57:d1:97:d7:fc:f8:20:
f5:fe:34:e7:7d:9d:b0:20:b0:a8:83:6e:90:74:fb:
83:d7:9d:5f:6a:fc:fa:12:57:5e:50:95:ad:58:c0:
e4:a7:d0:b3:5c:d7:41:e8:ba:bb:9b:d3:9a:26:b7:
e1:d0:a3:30:d3:dc:4c:7a:14:3b:e5:3b:af:f2:ff:
f0:a8:0c:52:99:fe:ef:de:76:69:73:d3:5b:fa:6b:
72:e0:0d:15:ac:60:6f:24:62:ee:ed:a2:a4:bb:e6:
28:ec:aa:65:ac:3c:0e:b1:0e:6f:d4:47:52:a9:52:
e6:8b:54:43:83:18:94:10:a9:ff:e0:7e:65:91:06:
37:29:b2:6f:b7:db:03:2f:29:38:05:14:8c:de:1e:
37:90:71:a0:5e:97:ae:16:b2:f8:e5:e6:6b:13:27:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DE:AC:5F:50:B9:BB:D7:D0:D5:1F:8F:14:C3:D8:1C:FE:3C:5A:05
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9b:08:db:a8:4f:60:5e:fe:a0:f1:4c:1d:93:87:25:08:22:
d8:49:4b:e7:34:63:fb:29:3c:75:c6:d3:7f:b4:64:79:fd:84:
bd:30:59:ab:9b:55:01:22:22:31:5c:bc:ad:e5:dc:9b:85:ba:
db:78:9e:09:c5:8a:a2:6b:18:b8:e4:aa:b9:b0:d5:c7:35:43:
8d:84:09:44:d6:ac:9c:b9:83:7e:57:19:e0:0a:ef:ba:b3:43:
2e:33:5e:32:46:d0:f0:3b:6f:7b:cf:50:f1:a9:14:ef:f1:51:
c7:95:3b:ca:6f:87:2d:9a:fa:45:cd:14:27:56:4f:2a:9a:62:
c5:cf:db:21:0e:c0:a9:16:e1:b7:73:3f:46:7a:0a:40:04:14:
6b:25:f5:f7:b0:67:03:f4:ae:27:58:5f:cc:af:92:17:9d:a5:
8f:25:9b:3d:ca:2a:ac:f9:8e:1e:69:6e:5d:33:75:b3:ed:94:
52:d4:f7:ff:5b:73:c2:ce:84:9d:a2:b6:ed:24:73:2f:d2:42:
e4:09:c5:05:a4:2f:db:95:b9:7f:89:3f:51:33:69:62:7e:3c:
0b:9f:a4:36:80:f5:53:84:08:54:61:21:b8:0f:e8:f2:1f:81:
f0:cc:cc:9a:b4:39:ae:f6:ce:20:c8:d9:25:b9:43:d3:dc:c8:
b3:e3:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:07 2025 by rpki-client