Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
File: hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft (raw, json)
Hash identifier: +Z6W4z0G+5nPaO6nJDuWCHQmRRjKU7hhjdPlnPXw0Rw=
Subject key identifier: 84:83:08:B5:75:D1:2F:19:AA:E1:12:21:D6:83:5F:53:C0:E5:B3:D4
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 0198A04E3A7831D888345D72DA62FAB6578A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
Manifest number: 041F
Signing time: Tue 12 Aug 2025 22:02:17 +0000
Manifest this update: Tue 12 Aug 2025 22:02:17 +0000
Manifest next update: Wed 13 Aug 2025 22:02:17 +0000
Files and hashes: 1: hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl (hash: xtHml9tG3NFVrmmGT9FH/2U8udJ0vqwGw5H78vsjRwo=)
2: p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa (hash: CHS1S8lMOJ2pkxab6trVxWbo2qQA5JXICjYrqXb1IdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:3a:78:31:d8:88:34:5d:72:da:62:fa:b6:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Aug 12 22:02:17 2025 GMT
Not After : Aug 13 22:02:17 2025 GMT
Subject: CN=848308b575d12f19aae11221d6835f53c0e5b3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:e3:6b:c5:34:13:e4:50:6f:eb:d3:4d:e4:
87:f2:b0:11:a9:8e:ec:90:48:31:91:f0:41:e7:7b:
22:04:93:88:04:87:f5:5c:5a:af:01:62:40:5f:af:
16:09:c0:a5:65:95:b8:5b:53:a6:e2:4e:64:89:52:
4d:14:b7:93:a0:ba:95:2f:b3:a2:ef:2f:9b:a4:a5:
19:e4:04:67:bc:ee:5f:db:ff:78:6b:f4:3e:e1:28:
00:c2:2f:0e:f7:25:02:3e:ed:28:c3:10:f4:68:9d:
68:89:df:d5:7d:3b:ca:26:71:c3:d8:55:b7:7a:6b:
af:2c:cc:92:ff:c2:c9:30:66:95:4b:32:73:1d:f8:
1b:dd:64:60:7e:c4:6e:1e:12:f1:70:7f:82:d7:8b:
44:5f:78:27:a1:91:49:b3:d5:12:ea:73:d6:4d:71:
af:37:ab:7b:8f:9a:57:d1:81:18:b7:ee:24:98:c1:
77:e8:66:94:6d:ac:6c:71:44:d6:2a:41:e6:5b:45:
06:6e:d5:93:67:49:0d:37:28:22:58:23:38:08:9f:
b0:6b:36:a4:cd:b3:a6:13:93:db:0a:c9:5d:77:d2:
86:e5:de:9b:7b:f2:47:6d:a8:2f:37:82:e1:91:b6:
5f:ac:86:55:41:23:dd:dc:7b:35:57:f5:53:d7:38:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:83:08:B5:75:D1:2F:19:AA:E1:12:21:D6:83:5F:53:C0:E5:B3:D4
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2d:3e:f4:51:9e:00:a1:9c:3e:b7:6b:31:b7:d2:27:0b:5a:
53:72:f2:ea:78:2f:0e:24:ec:da:ab:09:89:f4:ac:b4:92:fa:
9d:f2:4f:c2:66:7f:0a:99:38:cf:05:af:fe:ad:0c:2a:96:63:
5f:cd:c6:ee:c0:5d:36:ff:76:9f:62:fa:c6:a7:8d:56:7b:37:
bd:29:c7:9d:57:e3:4a:a3:12:55:6a:cb:79:db:80:d9:e8:67:
88:06:d9:0d:bd:a1:c7:82:5d:b3:8a:f1:bc:48:b9:fb:ac:9e:
6e:fc:15:cd:e4:96:e4:3c:39:fa:de:b2:d6:20:a4:7d:80:89:
0e:c4:23:19:9b:dd:10:de:42:5e:0d:49:19:f4:29:52:a5:0e:
cc:12:6e:68:3c:50:a5:aa:e1:78:30:ce:d0:82:28:81:33:55:
7e:cd:06:dc:10:f5:d4:02:30:2a:2b:5c:15:c5:62:89:83:7e:
e5:06:47:41:a9:89:66:77:4c:63:df:44:6a:c2:f0:55:35:18:
39:f8:bc:99:d6:8c:75:4b:ec:00:55:07:26:eb:dd:07:b6:9c:
fb:c8:8e:6c:3c:59:9d:73:69:88:8b:95:b0:48:b1:6b:a1:e3:
24:ae:b9:7b:cb:d6:3e:7f:ad:7c:a0:3a:15:fc:be:0a:b7:72:
ce:57:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:18 2025 by rpki-client