Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
File: H_HOmuJWMQK_jqcqieBhUu9wWLI.mft (raw, json)
Hash identifier: H4uHxRKt6PuBD+bgCcJr0eLnOECO1c8V7PNirz3KngQ=
Subject key identifier: BD:23:DD:B3:AA:11:4D:69:08:9B:C9:F5:F4:C3:EF:26:6F:51:CF:E4
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Certificate issuer: /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial: 01987307056A5ACCCC7EBCFE92B74BDF619E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
Manifest number: 0963
Signing time: Mon 04 Aug 2025 03:01:36 +0000
Manifest this update: Mon 04 Aug 2025 03:01:36 +0000
Manifest next update: Tue 05 Aug 2025 03:01:36 +0000
Files and hashes: 1: H_HOmuJWMQK_jqcqieBhUu9wWLI.crl (hash: LowftwD+L0KIJGgcRaGJH6ObqqWVvzDprmwQQy+6Xls=)
2: y725qdTMwrOghX8GfkxscKc-PM0.roa (hash: EDVLr0vu1gCBKbpCOMXFSj7zevxafD+c2G6jh65rh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:07:05:6a:5a:cc:cc:7e:bc:fe:92:b7:4b:df:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Validity
Not Before: Aug 4 03:01:36 2025 GMT
Not After : Aug 5 03:01:36 2025 GMT
Subject: CN=bd23ddb3aa114d69089bc9f5f4c3ef266f51cfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:79:d9:6f:5b:2b:c4:e1:93:44:5c:b5:e9:
3e:ea:14:1f:c7:b9:08:d0:a4:02:1c:7f:0a:41:1b:
ed:8b:69:fe:60:31:54:66:9c:61:87:d5:f2:87:55:
f2:eb:5f:93:0b:09:61:14:ed:7a:d5:9c:da:79:ec:
8f:db:7e:64:21:bd:0f:db:41:19:00:29:02:d5:e7:
42:4f:4d:02:8a:a2:25:2c:d8:ec:fa:99:b3:7d:35:
b1:65:62:75:66:fc:52:48:35:ca:0c:53:25:7a:22:
ee:d6:4e:73:f3:33:1c:a4:4c:c8:db:d2:85:2b:f5:
2c:93:3b:92:76:87:d2:f7:34:61:a2:0b:f8:c8:29:
ef:e0:a1:b9:ea:ea:24:39:32:57:20:54:4c:b3:06:
f3:20:ea:09:7a:8e:80:34:15:63:ed:cb:72:ca:88:
3b:7a:92:42:4a:04:d5:c2:04:71:9a:ef:a2:02:b1:
00:fd:65:4a:be:91:92:0e:38:fc:21:88:57:51:db:
50:7a:13:c0:35:8f:1f:e6:0d:45:3a:84:b2:aa:df:
dd:f5:69:65:68:b2:b9:44:13:35:ae:08:35:9d:77:
a9:40:01:96:04:c8:ff:3f:ac:8f:39:31:fc:c4:36:
18:80:b3:4a:6f:bd:df:07:c6:f4:59:b6:af:15:30:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:23:DD:B3:AA:11:4D:69:08:9B:C9:F5:F4:C3:EF:26:6F:51:CF:E4
X509v3 Authority Key Identifier:
keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ac:f4:1d:ad:1a:dd:ef:85:3b:ed:56:27:21:cd:fe:df:56:
68:5d:67:f0:d2:e3:4e:e2:6b:8d:a9:6d:02:e0:5f:ec:29:03:
99:2e:a8:97:35:f4:46:d0:fd:cd:6f:4c:06:c9:37:f0:2f:6d:
02:a8:24:b8:0f:7e:50:f1:00:27:2f:09:16:5f:0d:3c:93:a1:
39:14:a7:ac:d8:df:45:96:44:18:fb:02:35:aa:63:78:30:c8:
d5:92:d4:2f:29:d8:8e:e0:4c:95:43:9f:50:83:e6:97:dd:85:
f3:e2:b1:e6:28:69:e7:c8:03:81:95:4b:cc:28:04:d1:49:02:
d4:57:af:45:15:d7:db:a4:e5:54:f0:0b:05:bf:92:ea:8d:c5:
04:fd:eb:7e:c2:e0:e4:e5:1d:d7:8a:5d:c4:9a:d9:1d:a3:a6:
9c:ef:68:31:29:9e:9d:5d:54:09:ed:90:9c:a8:f4:eb:5d:25:
c0:a4:4e:08:b5:a5:b7:a3:f1:67:f8:e5:03:d1:05:0a:83:f6:
36:da:cf:02:9c:8d:ce:1e:f4:a9:ab:69:03:19:75:62:50:98:
fd:9e:ae:b6:37:d2:35:87:27:e2:9b:69:f4:59:43:94:f2:68:
e7:18:ae:46:db:4b:e5:7a:30:0e:ae:5a:0d:b1:c7:6f:cc:9d:
4e:1e:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:45 2025 by rpki-client