
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier: taSqa9kKQYpSGDSAPxUbDFFAFfXv8ptjeIa9vQOpLMs=
Subject key identifier: 9B:43:4D:AE:35:CF:B7:DE:00:59:FB:98:20:DA:46:D8:D9:0E:70:52
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 01987E2F2222B1AFBFD853D80AE318CD8277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number: 11EA
Signing time: Wed 06 Aug 2025 07:01:14 +0000
Manifest this update: Wed 06 Aug 2025 07:01:14 +0000
Manifest next update: Thu 07 Aug 2025 07:01:14 +0000
Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: x0XVYiKl5D8ieqsGR2KkIfJsS5LZqc3XugGG7FW4mOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:22:22:b1:af:bf:d8:53:d8:0a:e3:18:cd:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Aug 6 07:01:14 2025 GMT
Not After : Aug 7 07:01:14 2025 GMT
Subject: CN=9b434dae35cfb7de0059fb9820da46d8d90e7052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:8a:0c:be:db:b9:cb:1a:37:a5:84:de:bc:
46:aa:25:77:9c:4e:97:b8:e7:44:af:d8:1d:b3:ae:
59:a6:7d:ff:a0:7f:fc:3f:0b:fd:84:6a:35:57:be:
d8:0e:2e:17:4c:23:0c:60:6c:72:23:17:fc:f4:69:
f0:56:dd:a7:e4:d0:1e:ac:60:c7:52:eb:0c:12:63:
53:e2:f8:18:6e:0e:f0:aa:eb:be:48:5f:07:09:40:
68:da:48:eb:2c:75:12:55:cd:b2:d8:23:00:a2:51:
15:eb:10:db:de:28:af:bf:0e:14:d1:bf:7f:df:71:
41:08:cd:54:bc:c2:0e:a8:96:8c:72:5d:ac:e9:9d:
f2:4b:04:b9:8e:bf:63:77:4b:86:d5:3c:19:a2:12:
c8:48:42:32:00:ee:f4:4b:2c:53:5b:b4:87:ab:49:
37:6b:f7:fd:da:9a:0a:21:75:45:43:91:3c:64:b9:
e3:b5:fd:28:d4:8e:39:01:25:e5:ac:8e:8d:80:1b:
90:f3:0d:c4:d5:7d:82:d2:a7:cf:ce:fa:ef:06:28:
68:88:05:32:ec:f6:47:4b:a1:52:43:39:e8:a5:21:
c0:ec:e7:3a:8f:e6:38:19:b4:46:94:98:89:5b:62:
38:e8:df:22:d7:0c:b0:c2:49:4f:4d:48:32:e5:7a:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:4D:AE:35:CF:B7:DE:00:59:FB:98:20:DA:46:D8:D9:0E:70:52
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:39:ac:1d:e7:24:ec:52:4b:90:b8:5c:72:54:03:4f:fd:98:
d8:c6:5d:82:33:54:b1:78:36:7f:bd:b9:00:a3:ee:ba:0c:43:
6a:7e:c7:d2:e1:dd:cf:9d:5f:ad:35:1d:e2:b1:7a:32:03:58:
64:72:1c:ee:58:4d:5a:c2:92:32:da:5b:ee:22:68:9b:b3:03:
0f:de:c4:39:9f:b7:60:63:01:27:7a:11:c4:6c:49:ca:d6:63:
75:ab:52:4e:d8:c8:9b:bc:f7:57:d1:a1:ce:96:6b:e2:b7:6c:
70:aa:02:d8:dc:92:31:5f:06:30:9a:00:07:a2:ca:01:8c:4a:
0c:3d:38:a8:5a:24:5c:1d:f4:31:ef:b6:70:e8:b3:19:7c:f2:
cb:6f:ab:9f:44:59:94:6c:a2:54:c8:a7:0e:a5:8f:de:a6:1e:
66:15:47:a1:be:ff:dc:d3:d7:19:d4:6b:ab:18:ad:c1:09:75:
e4:1f:1b:d7:f7:10:e7:df:24:af:89:97:e6:af:ad:c2:bd:59:
9b:43:78:d3:7a:ce:bd:ad:08:39:49:f6:98:02:6c:68:0e:e6:
72:1c:e6:a3:0a:4a:50:38:62:cd:3e:d9:89:7f:07:c6:63:6c:
6b:41:3c:a1:f0:80:c3:95:49:84:df:d5:91:4f:a4:81:c3:11:
df:90:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:20 2025 by rpki-client