Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: PIR3uOUh/ibg7eQ45YLCGWOje+esY/CU3JEygc/VHjw=
Subject key identifier: D5:E9:D4:FC:91:95:9F:D3:25:F9:55:BC:F9:75:85:88:1E:68:2E:27
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 01987CE5533CAD427BA5589EB6F10D8C35E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 01:01:00 +0000
Manifest this update: Wed 06 Aug 2025 01:01:00 +0000
Manifest next update: Thu 07 Aug 2025 01:01:00 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: mnESKfgAvgYIA6CXYLRI0lj4niyRChfbDPUVvELPpao=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:53:3c:ad:42:7b:a5:58:9e:b6:f1:0d:8c:35:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Aug 6 01:01:00 2025 GMT
Not After : Aug 7 01:01:00 2025 GMT
Subject: CN=d5e9d4fc91959fd325f955bcf97585881e682e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:79:f1:cc:48:13:f1:d8:f0:44:2d:2e:f3:
b8:2f:e8:24:f9:21:3c:c9:03:58:0d:2e:3c:22:fc:
f7:29:13:59:2e:33:55:2d:5c:30:88:b0:8c:36:e1:
24:14:20:62:d9:8e:b9:20:13:31:79:d0:aa:82:a4:
47:d1:41:cf:b2:ea:44:c4:73:20:79:f0:3e:fa:66:
dd:bb:bb:ea:da:02:b8:e8:36:04:a1:60:4d:66:a8:
c4:25:8c:0d:18:ad:0d:1e:a5:16:35:6e:f3:40:ea:
d5:ea:11:b1:64:d9:dd:3d:7c:4c:d2:1e:59:e6:22:
a8:2c:74:a0:40:cf:8b:d8:de:a2:cd:9a:6a:31:01:
d5:11:b2:bd:c9:ab:54:2e:84:96:4b:f4:57:d5:4c:
ca:21:40:71:40:84:ec:01:01:37:3c:86:20:11:bf:
8d:01:ca:6c:62:2d:05:22:74:3a:0d:0f:bc:ca:84:
04:73:ba:f7:78:88:9d:9c:04:79:d0:ef:e4:f7:2d:
d4:86:2c:e0:92:83:40:fe:e3:39:af:f0:a1:d5:2e:
b1:ed:4a:48:3a:b3:3a:7d:8e:f8:aa:5a:65:44:7a:
82:c0:9c:39:61:84:c9:30:9b:88:b5:54:7a:d5:a0:
5e:8e:33:c9:23:9d:e5:0f:e5:a6:dc:f4:9d:2e:70:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:D4:FC:91:95:9F:D3:25:F9:55:BC:F9:75:85:88:1E:68:2E:27
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9d:a1:cf:e2:55:da:d2:21:8a:6f:20:0a:ac:d1:66:52:d9:
e3:97:27:98:6a:c9:08:ae:b1:93:89:97:dd:61:30:b4:d9:3d:
fa:5a:39:42:cd:3e:51:00:89:6c:0a:22:a2:65:b3:c1:f7:92:
a0:27:4b:86:2b:49:19:ee:1f:66:a0:30:81:aa:d1:a0:d3:2e:
83:a6:8a:90:94:5c:e8:86:02:07:b7:2b:e4:6d:80:3d:b9:ca:
e5:36:be:7c:2c:13:74:37:f3:d7:95:43:fa:a8:d7:ed:a4:c8:
28:b4:d4:fc:7a:90:41:d3:79:ff:fb:81:a6:4f:4b:05:b3:6a:
38:65:83:cb:5f:8e:6a:72:a2:4f:17:a7:f5:2e:ba:7c:5e:77:
d2:3b:ec:a5:14:88:87:73:4c:c1:ea:32:70:72:3c:8a:8f:bb:
92:18:5c:6e:9c:b9:f3:4d:90:5a:1e:29:93:03:e4:9c:0d:b8:
e9:37:95:65:fa:1e:4e:32:3b:46:a1:5b:fe:fc:1c:62:b8:92:
23:f4:9a:e3:36:2c:5f:56:f2:84:01:46:2c:32:13:cc:72:43:
b6:84:01:22:8f:1d:4b:10:39:55:ef:9b:6d:b8:94:d4:20:7b:
fd:08:29:09:0e:cb:2a:2c:9b:58:cb:b5:6f:99:6e:de:c8:e5:
5c:5d:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:38 2025 by rpki-client