Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: mV9shLMBUFvbLrXU6Ve1pSw0FS2jrBkMPXGNoyzAZPw=
Subject key identifier: 94:E2:E9:91:5A:EF:64:02:D8:C7:7C:C7:9B:EF:42:FA:63:F1:3B:89
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 01987D1C90A38FBC2FDDD436E6B4CCD0C9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 02:01:20 +0000
Manifest this update: Wed 06 Aug 2025 02:01:20 +0000
Manifest next update: Thu 07 Aug 2025 02:01:20 +0000
Files and hashes: 1: 0EXTA2fh52m_pdzndlQONOR-ALo.roa (hash: 6rMWco6WBnZhVNOyIqX9uMPGJDuagIsvvOicEopd/aI=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: Dae+9soDtmMbPcySTS3BjAZT4EA7KN0pj1SWR7jDcQo=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:90:a3:8f:bc:2f:dd:d4:36:e6:b4:cc:d0:c9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Aug 6 02:01:20 2025 GMT
Not After : Aug 7 02:01:20 2025 GMT
Subject: CN=94e2e9915aef6402d8c77cc79bef42fa63f13b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:32:d2:c2:29:eb:32:c1:26:f8:39:b5:0e:
bc:44:a2:f8:ef:4d:79:12:f2:f0:69:8a:4b:90:97:
c1:7a:b9:08:bd:1b:03:1d:87:a0:06:61:51:56:fe:
00:4b:1e:1c:89:94:0b:de:13:de:eb:15:5a:ac:9e:
45:bf:6b:45:54:f9:bd:79:5b:63:2e:24:4b:bf:ce:
d8:1f:f4:c2:2e:65:f0:c9:c1:c6:b7:9e:1d:2f:bd:
b0:7a:70:95:1a:9d:89:f9:c5:8d:f6:be:d3:27:a4:
af:d5:7f:9b:5d:bf:f0:6f:98:f6:84:b5:ca:66:34:
2f:c1:87:08:8f:41:82:28:85:c6:06:69:6c:2f:3e:
81:2f:78:1c:15:14:d8:43:22:60:7d:de:dc:08:e4:
b7:3c:01:9b:c9:08:59:86:42:b7:8a:12:16:19:9c:
d2:fb:d7:30:0a:64:b6:d0:6e:6e:9c:c1:c9:5d:6c:
ee:f2:57:53:d6:ee:0b:57:e8:33:b8:92:14:4f:dc:
de:67:43:91:e9:ce:77:d5:cd:1f:12:86:18:70:42:
58:ec:e5:20:43:f8:98:3c:56:6e:3d:de:3e:25:47:
0a:33:75:d2:ba:38:dc:bf:5e:ee:3f:d1:5f:0a:6b:
27:5c:75:6b:0e:c4:72:ff:6d:48:65:9f:b9:2e:3f:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:E9:91:5A:EF:64:02:D8:C7:7C:C7:9B:EF:42:FA:63:F1:3B:89
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:43:ae:20:0f:cf:61:a8:2f:77:f4:25:0f:91:64:82:61:c5:
ba:c9:15:be:50:59:d7:8f:7f:24:35:69:87:c4:7f:bd:c7:b9:
47:06:b0:60:9e:ef:92:d5:d3:7a:b6:80:81:0d:fd:15:22:7c:
bc:fb:7a:96:ab:79:eb:cf:9e:02:49:ea:2f:75:fb:5e:22:95:
ee:31:2a:60:9b:51:a7:28:72:8d:db:97:a8:73:c9:de:28:2b:
53:89:0d:47:19:46:73:c8:e4:f0:6a:38:12:fa:14:30:0e:df:
f1:b5:9d:2c:96:4c:c6:ce:0a:f2:14:bb:a9:83:5a:55:a3:22:
6d:52:92:1e:87:04:fa:7b:b8:64:02:fa:3f:0a:6d:45:91:88:
5c:e5:59:bc:6b:fc:16:9e:a3:0b:d8:cb:7d:3d:74:5c:c8:67:
1d:bf:c8:01:cf:63:89:b8:4e:aa:e2:9a:99:57:fc:3a:13:fe:
d9:a0:18:d6:a3:a4:14:f1:f7:bf:e5:38:4c:86:ec:c6:63:32:
0f:f5:c2:ea:c3:b0:15:53:66:d6:8f:b4:5c:89:f6:f2:a1:62:
1c:cb:a1:84:be:9c:ee:ef:83:5e:c8:c6:fb:6d:0e:6a:96:f3:
08:71:eb:02:16:d6:f7:70:ab:43:15:77:f5:fb:0a:b8:6e:bf:
40:5b:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:10 2025 by rpki-client