
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: gr0pyaaiI440dOEl8vRFpE/m09XNVpAWk0SNMGJwNp0=
Subject key identifier: 30:74:A1:95:A0:AC:18:3D:10:49:7D:3A:D9:DB:25:64:DF:B3:C2:AC
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019873E2AF4F84551B9E7025F1AAD37B0D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0F24
Signing time: Mon 04 Aug 2025 07:01:32 +0000
Manifest this update: Mon 04 Aug 2025 07:01:32 +0000
Manifest next update: Tue 05 Aug 2025 07:01:32 +0000
Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=)
2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: FBV6pDfZdsr/RuaAF/PdNoh6wTfS/J/CRWoiGH20oYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:af:4f:84:55:1b:9e:70:25:f1:aa:d3:7b:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Aug 4 07:01:32 2025 GMT
Not After : Aug 5 07:01:32 2025 GMT
Subject: CN=3074a195a0ac183d10497d3ad9db2564dfb3c2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:a6:2c:84:f6:25:59:63:08:df:16:40:76:
ea:b4:17:d3:22:31:7b:56:22:7f:d1:a6:ab:76:90:
c0:be:ef:f0:7f:95:d5:8d:b3:91:8a:bb:da:1e:a7:
f5:0f:d8:c9:f0:c2:5e:bc:31:90:af:56:14:22:81:
fd:7d:e1:63:d5:c5:0a:28:3d:b0:1c:71:3c:34:67:
ed:7e:42:26:ce:61:3b:c8:13:e0:fe:0b:c4:ea:ba:
a3:76:76:51:54:3f:a9:bd:79:d7:98:23:11:ff:2c:
89:3c:f8:d5:5d:ea:7f:05:61:73:07:b3:26:bd:9c:
17:33:5b:2c:83:dc:00:b3:d5:a2:8a:14:1c:5c:92:
9d:5e:5f:4d:95:de:3a:26:90:a8:2f:34:7b:40:35:
9b:96:a5:46:9f:ef:a2:9d:07:cb:39:90:84:a8:63:
c5:a3:98:17:70:9a:27:ba:a9:23:a0:d4:3d:04:cf:
ee:90:22:a8:0a:1a:0d:98:1d:5b:fd:9b:e8:cd:1a:
02:a0:a5:f9:72:44:94:3a:9a:05:21:15:7a:b0:95:
92:7f:97:70:8b:40:99:c0:91:ab:03:28:6a:8c:ad:
75:33:b3:4c:7c:ae:da:57:98:96:8f:9e:99:1b:c8:
10:16:63:62:a9:0a:38:c8:52:8c:9a:c7:d1:94:fd:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:A1:95:A0:AC:18:3D:10:49:7D:3A:D9:DB:25:64:DF:B3:C2:AC
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e5:a3:10:1b:0e:e6:76:ae:6b:42:64:db:83:71:e2:ba:5a:
bb:7e:43:2b:10:d8:85:b9:c8:23:65:a6:da:50:b8:a0:20:36:
59:b3:46:03:d6:9a:9b:f8:9c:4a:c0:ca:65:ef:52:b0:67:84:
a2:39:ab:f8:c5:7d:5f:33:3a:0a:ea:60:bd:f8:13:c7:3e:2d:
1c:6c:f4:5b:1e:94:f5:2f:53:bc:1d:f2:f1:96:bd:fd:35:c0:
c9:be:66:70:35:cc:51:00:97:c3:db:c5:07:92:fe:17:05:8d:
7e:91:76:03:c6:09:81:19:52:e5:e9:fb:19:3b:8c:7e:08:84:
90:dc:f4:0a:5d:af:0c:a3:2e:ff:cf:61:52:43:a7:34:0b:56:
89:13:a1:82:8d:62:92:5c:35:c6:45:3c:a7:f7:b4:48:8d:03:
41:1c:41:b7:2f:24:c7:01:27:18:4e:1e:d2:d7:45:d2:a7:8e:
be:63:b3:d1:c7:49:8a:f9:2e:be:93:56:58:4e:b1:f7:ee:08:
f0:19:63:06:f8:d7:59:7d:cc:00:13:3c:9e:ae:f7:c6:c0:8b:
4b:18:11:c5:eb:34:7e:cc:78:21:34:8c:c0:8d:fe:f5:89:36:
f8:b8:b7:d4:ba:44:d3:c2:22:f2:8f:1f:11:22:31:cd:b6:53:
b5:22:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:30 2025 by rpki-client