Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: pbnsivtzqOn/o0IJ4T/O7o6V7OF3iURlAHw+j6QlW0o=
Subject key identifier: B7:96:7E:2A:DB:B1:64:4D:80:F4:91:17:79:80:00:BB:93:B1:12:91
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019897134BA9CBB022D19F42B44974EFAD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 05E9
Signing time: Mon 11 Aug 2025 03:01:20 +0000
Manifest this update: Mon 11 Aug 2025 03:01:20 +0000
Manifest next update: Tue 12 Aug 2025 03:01:20 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: GX/zLWyboUGOinbWK8l4t888RV3fuFuNrUB2bKnVTXc=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:4b:a9:cb:b0:22:d1:9f:42:b4:49:74:ef:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Aug 11 03:01:20 2025 GMT
Not After : Aug 12 03:01:20 2025 GMT
Subject: CN=b7967e2adbb1644d80f49117798000bb93b11291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:76:20:90:3e:96:10:84:e3:3a:f6:9c:e0:
7d:d3:79:85:0e:9e:0c:00:91:32:3c:13:f9:9d:e8:
e4:8b:fb:a0:93:59:45:0d:c8:12:64:46:16:0e:62:
40:eb:d0:cd:74:eb:1f:a1:ae:31:56:a2:15:fd:18:
0f:e9:7c:a9:36:dd:20:4a:9d:e7:e8:27:3c:a2:bb:
35:cc:08:ba:6b:31:98:ec:28:83:bb:e8:ea:67:0d:
02:d0:ac:79:f4:90:53:06:9e:49:ce:de:7a:b2:a4:
6c:2c:51:2b:8d:8b:ab:7f:bc:50:af:c9:27:7a:bb:
c9:b8:2c:1e:8f:9f:90:39:83:1c:83:d6:b7:da:c5:
95:fd:e4:f3:07:74:7c:c8:d3:53:12:f6:33:05:5d:
b7:16:18:15:11:a0:8c:d1:54:f6:c2:2e:a7:d6:75:
b3:84:78:09:84:5b:58:41:39:e7:7a:74:2f:1b:3d:
8c:ea:9b:c5:47:af:62:56:31:8d:f8:00:f1:ae:de:
96:66:c2:d1:ca:a3:a1:fc:82:6a:df:6f:f9:4c:e9:
a6:8e:05:ba:5a:9d:a4:f1:e2:39:a0:ea:d1:57:8c:
04:11:94:30:ed:9c:46:1e:07:a4:12:41:65:fe:aa:
ff:43:4e:74:b2:ff:1b:35:1b:5e:5a:99:cf:e3:23:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:7E:2A:DB:B1:64:4D:80:F4:91:17:79:80:00:BB:93:B1:12:91
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:20:7b:d1:19:90:5a:82:54:36:36:30:56:07:c6:c5:7b:7f:
6e:c5:b1:4b:f6:f9:df:93:96:e4:bf:0c:14:08:23:65:76:dc:
60:63:15:62:7c:72:9d:8a:63:55:94:ab:37:66:30:fb:b1:a9:
96:6b:f2:e0:5f:ce:18:69:d3:bf:79:e6:48:68:63:60:62:c9:
d5:77:55:3c:8c:5b:a5:96:2f:af:65:12:d6:de:ae:fc:aa:95:
29:12:91:eb:69:20:df:22:48:af:10:f4:0a:6f:0f:de:62:56:
06:5c:ef:99:d5:1d:d3:49:c2:44:96:c6:9e:6c:7e:28:d0:f1:
ec:eb:f7:f2:6e:e7:53:d3:ca:74:ee:38:34:3e:a9:35:e4:9a:
c3:23:56:bf:e0:2e:47:20:07:8c:d3:ce:3f:fd:18:a0:f8:66:
78:6f:92:d8:f1:71:97:19:00:51:22:1c:24:aa:04:77:a6:4d:
e2:cb:a8:07:a4:26:54:56:0c:1d:db:a6:fa:ca:9c:dd:cf:3e:
68:73:60:35:73:a7:51:7c:34:e7:e2:c9:0c:98:39:80:a4:f8:
78:fb:86:9d:cf:7a:c5:3a:db:a5:b5:8b:33:61:3e:c4:9d:36:
e8:86:4b:98:78:05:7c:4c:21:91:31:d3:75:a9:e3:6b:5c:a1:
85:6d:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:31 2025 by rpki-client