Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: y1T/FWxpOy/Wi6Cj5KHnkmy44P+77AP2jrB2I2r1HI4=
Subject key identifier: 69:89:51:C4:08:AD:8A:EE:27:E2:49:F5:4D:B3:36:51:10:7D:C9:CE
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 019882E74B6F213183486F9A1A8FFEF1C1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 05:00:52 +0000
Manifest this update: Thu 07 Aug 2025 05:00:52 +0000
Manifest next update: Fri 08 Aug 2025 05:00:52 +0000
Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=)
2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: GHyCQEJRldLUQOL0mtoC2B6xD7Di4x6KBJfnMTlv5uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:4b:6f:21:31:83:48:6f:9a:1a:8f:fe:f1:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Aug 7 05:00:52 2025 GMT
Not After : Aug 8 05:00:52 2025 GMT
Subject: CN=698951c408ad8aee27e249f54db33651107dc9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:f8:f7:28:a2:b2:43:eb:9b:52:fe:37:d1:
97:94:7b:92:9a:97:64:26:a2:e3:c5:ff:fa:9e:d3:
c7:da:bd:ff:bd:fb:a5:70:3a:c9:e9:25:11:44:c2:
65:51:bb:08:3c:ff:c8:d1:81:8f:e5:9b:4f:70:5d:
59:9b:ca:1a:5c:27:c4:96:de:f3:84:7c:bf:71:24:
07:33:19:3a:c5:e1:1e:76:c9:c0:ac:7b:cf:dc:71:
43:d9:87:6e:a1:55:22:0d:36:c6:21:f8:7e:c2:6b:
47:01:da:1e:24:c3:99:ba:30:98:e1:7c:db:86:e8:
ec:fa:ee:d3:59:3d:24:1f:d4:18:e2:22:1e:7f:d6:
84:32:00:3f:cc:12:08:a1:2d:c9:d3:0e:b2:37:9d:
9f:96:36:43:3b:cb:45:31:b9:4f:d9:54:33:9e:03:
a5:f0:f8:b9:0c:0c:9a:fc:7d:bc:25:6b:d4:f6:65:
50:52:98:b8:b5:b5:53:95:0c:bd:30:eb:d1:e3:94:
28:49:fc:94:3e:53:fe:4f:97:40:3f:2c:cf:5d:12:
d0:50:bf:f9:5c:60:ea:f7:1c:be:f9:60:b2:6d:d1:
53:90:2f:60:b8:16:a9:48:d4:92:30:ca:a9:1b:b5:
18:60:a4:9a:00:b1:e2:87:5c:dd:61:fc:5b:be:b3:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:51:C4:08:AD:8A:EE:27:E2:49:F5:4D:B3:36:51:10:7D:C9:CE
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:cd:75:04:4d:71:af:34:0b:eb:02:d5:93:d2:71:c2:ff:7c:
e5:9a:6d:94:4b:a0:18:ea:a6:51:af:7b:39:3c:3c:0d:76:c4:
f4:b0:02:b2:fb:54:ad:5b:55:5b:86:b8:4f:a0:38:cb:c8:76:
ac:2b:ef:5f:d4:a5:b1:60:87:cf:d8:51:2d:e2:41:0b:85:4b:
09:fd:a9:2c:6d:4c:37:46:21:98:39:4f:e2:d6:ab:28:9a:47:
47:bf:59:c6:0c:ba:ff:05:98:7e:b5:31:94:ff:2d:52:a6:5e:
8d:ea:bc:52:ae:33:7d:9f:b4:36:ee:6d:46:88:d9:c2:9f:89:
ab:50:01:00:0b:9b:ef:63:6c:29:3c:5a:5a:0d:93:2b:93:05:
be:2a:8f:7f:2e:1b:e9:57:e6:37:37:e5:1d:a6:09:95:34:76:
3f:d4:60:62:28:d1:34:f9:e2:e4:9b:5c:b9:f1:fe:6e:2c:03:
8e:6c:65:61:7e:86:d0:57:36:a8:26:4b:84:83:df:0d:28:c1:
99:0b:4c:55:ca:4a:68:ec:49:0d:30:5b:cc:9b:1a:77:7d:a0:
cc:52:d7:21:91:f6:5f:5d:9b:c3:cb:a9:b8:22:d8:3d:02:29:
bb:e5:be:15:a8:7a:4e:fb:ff:e0:a3:a4:a7:79:11:e3:f4:b2:
27:7f:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:24 2025 by rpki-client