Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
File: HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json)
Hash identifier: sPjieG55ob+HQmehMpTxywkmG88iu5mp46uxj3Osmvk=
Subject key identifier: 4C:CB:44:12:80:73:99:92:7A:50:82:D0:C2:B6:70:40:ED:24:76:0A
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial: 01987DF7C651FED2EA97B13DE52EFE71B2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
Manifest number: 1340
Signing time: Wed 06 Aug 2025 06:00:46 +0000
Manifest this update: Wed 06 Aug 2025 06:00:46 +0000
Manifest next update: Thu 07 Aug 2025 06:00:46 +0000
Files and hashes: 1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: ItC1sCCVi5UlpTSiYcfGe7y+kJVqh2H0myJuNqPHBRk=)
2: Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa (hash: FtyHvpwzr+fctqlndkuiTxqEdI3uy3i+5i35b5nlvso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:c6:51:fe:d2:ea:97:b1:3d:e5:2e:fe:71:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Validity
Not Before: Aug 6 06:00:46 2025 GMT
Not After : Aug 7 06:00:46 2025 GMT
Subject: CN=4ccb4412807399927a5082d0c2b67040ed24760a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:6f:8d:76:6d:37:92:be:cf:ec:d3:94:de:
10:82:74:5a:da:8e:2f:44:7f:59:cd:a1:13:22:ee:
10:ce:4a:b0:5b:98:bd:1a:49:e6:e4:23:e0:53:2e:
0b:76:c0:34:1d:7f:a1:56:eb:36:8f:6f:cb:44:65:
48:cb:b4:40:26:6a:2e:98:bf:fc:8a:8b:e1:26:62:
d8:08:7b:f2:11:8d:80:b0:3c:4e:3b:2c:63:6a:6d:
bf:b6:e6:79:e5:97:29:8e:f0:c5:3e:c4:14:3c:d9:
1a:eb:d6:8c:f6:d7:c1:30:71:4d:ed:58:2c:cb:97:
b1:0d:58:88:c9:0b:b2:5c:ab:fa:f3:07:67:d4:cd:
67:7b:e0:10:51:03:44:d8:f4:e1:3b:14:85:73:32:
bd:59:88:da:7e:c6:e0:be:d6:1d:05:94:93:0e:a6:
0f:17:70:0c:b0:8c:16:6a:fc:1d:8e:05:60:41:19:
32:26:b9:3d:a5:77:0e:61:27:45:fb:46:2b:28:8d:
ee:e0:51:47:fd:44:fb:e8:ba:4a:0f:56:cf:16:c8:
10:71:98:31:96:a1:d2:f6:2f:ad:81:9a:08:1d:15:
b4:e9:9b:70:73:78:d8:79:87:e8:a6:b8:11:46:e5:
38:08:39:83:1c:c8:fe:01:d6:cd:56:f1:6f:1c:c5:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:44:12:80:73:99:92:7A:50:82:D0:C2:B6:70:40:ED:24:76:0A
X509v3 Authority Key Identifier:
keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a7:4d:fd:42:cb:33:98:dc:5f:6e:91:ed:f0:d6:18:6a:6d:
11:ab:99:0c:1c:69:88:f8:db:da:3f:41:3d:ca:8a:da:7a:72:
fe:a6:1f:07:29:49:4b:1c:70:72:c1:9e:11:cb:39:cd:21:ed:
fa:08:79:e3:67:ba:0e:86:3d:3b:04:03:65:27:8d:b8:2f:be:
d5:88:40:c5:cd:80:98:c0:87:84:b9:e7:e6:12:b3:76:ea:38:
15:ea:fa:7c:b5:15:02:3c:9f:d6:a2:0e:fa:04:28:16:b4:13:
75:aa:00:e9:8c:ab:20:75:f2:a0:e9:29:06:7f:b0:b5:fb:e2:
7f:1e:37:10:6a:9f:64:36:74:c0:c7:0e:7d:36:02:cf:8e:b3:
97:a7:34:ba:a6:0f:3f:db:88:17:14:7b:01:d8:da:e6:2a:10:
f9:11:b7:05:f4:bf:de:af:82:a9:0d:6a:03:f2:cf:63:9e:52:
2b:f6:70:14:7a:30:bf:a9:35:43:01:81:43:0f:c8:12:96:27:
ed:f2:54:53:85:d1:f5:e8:57:e5:06:72:f2:68:8c:9b:1d:e7:
2a:78:05:ae:07:7b:5a:66:11:92:9b:eb:c9:30:8a:d5:02:3d:
a0:85:0b:71:51:b5:3c:1c:d9:96:62:4e:b4:7a:e9:69:9c:99:
14:b4:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:54 2025 by rpki-client