
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: 7G3Oyz7/TNodsIXQaC7WVQQNX4Y0ZNs3fC2NEmD34L4=
Subject key identifier: 78:A8:D4:50:BC:6E:7D:8C:C6:25:2F:D3:29:DF:80:A6:14:D6:71:37
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 0198733D1DFD92CB278A10D1FCFB8AF9158F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 1231
Signing time: Mon 04 Aug 2025 04:00:41 +0000
Manifest this update: Mon 04 Aug 2025 04:00:41 +0000
Manifest next update: Tue 05 Aug 2025 04:00:41 +0000
Files and hashes: 1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: JArJXejjEjXFTHqbMutd4ckfBiugvIxdFCN99g/4dcM=)
2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:1d:fd:92:cb:27:8a:10:d1:fc:fb:8a:f9:15:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Aug 4 04:00:41 2025 GMT
Not After : Aug 5 04:00:41 2025 GMT
Subject: CN=78a8d450bc6e7d8cc6252fd329df80a614d67137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:39:85:ad:79:fd:3e:6e:d8:a0:17:91:5a:
3f:9f:2e:e2:ca:ce:b6:12:f1:dc:9d:c3:6b:7c:78:
3b:3f:24:c4:5e:b1:85:d5:53:28:c7:ac:f1:70:15:
5f:07:f7:d0:ee:c9:91:10:ca:52:f7:76:53:eb:be:
be:87:59:9d:57:bf:7f:99:c0:c3:87:b9:67:5f:ef:
97:44:7a:c9:94:21:13:94:1d:4c:9d:7b:b4:65:4c:
4b:36:8f:32:4a:fa:e3:bf:74:0a:1f:26:1d:c3:66:
0c:38:2b:d5:f1:49:e9:eb:d3:fd:12:2e:e6:2c:91:
ea:b7:ef:20:8b:ff:c6:02:87:03:29:32:a4:e3:6f:
45:9d:46:12:3f:1a:74:2a:1b:de:96:b4:c3:d0:68:
f2:6d:d4:8c:78:0c:d3:9e:f9:d4:92:0d:64:e7:f4:
1e:75:ee:05:14:32:ca:ea:39:55:df:bc:d5:0a:4c:
19:f8:99:c7:1c:32:00:33:90:fa:fe:ca:4c:ce:1e:
86:d5:ba:ba:06:c1:45:89:94:a9:49:51:6d:26:92:
8c:24:39:df:1f:a7:3a:38:56:c3:13:29:ad:6f:ef:
79:d1:fa:45:ea:fd:b3:cb:54:df:92:7c:12:84:8b:
17:97:70:1b:da:42:0c:3f:fb:2c:3b:61:0d:9c:fa:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A8:D4:50:BC:6E:7D:8C:C6:25:2F:D3:29:DF:80:A6:14:D6:71:37
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9d:86:02:49:86:40:7b:08:a6:f4:6b:84:3f:40:26:8d:4c:
06:e9:34:b7:78:69:b8:3b:de:06:b5:1d:f6:f8:d0:7b:bb:91:
28:87:43:64:32:4c:e5:f6:c7:51:67:0c:92:29:dd:94:9a:d3:
29:33:49:0f:ff:b0:f1:5f:90:09:c4:81:25:8a:57:67:7b:62:
7a:5a:1a:1c:59:40:69:f4:32:69:e8:b8:77:f7:3d:b7:10:64:
cc:a9:6e:c9:12:87:44:d9:64:b9:16:8c:72:d2:ed:3a:70:29:
ca:11:5a:07:7e:74:1e:46:68:26:6d:95:db:f6:89:aa:99:fb:
30:25:31:ee:13:80:0a:78:52:d2:5f:a4:ae:ed:7e:47:e3:34:
6e:79:6b:49:f7:41:7f:7b:a8:b9:c8:f7:53:af:be:6f:5a:2c:
bd:31:5f:83:21:be:09:30:70:f2:05:3a:3f:54:52:12:bc:88:
be:a6:04:68:9b:8d:eb:eb:8e:e0:47:85:13:20:f2:9c:3d:33:
63:52:30:cd:73:6c:45:3e:c8:60:de:a4:cd:57:d6:71:ee:75:
f2:26:3a:82:f7:07:b8:b0:21:b3:84:c6:b0:6e:0d:7a:2e:8d:
0d:53:82:08:5c:48:13:d3:2e:78:8a:d8:93:ab:69:76:41:e9:
6b:62:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:30 2025 by rpki-client