Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
File: HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json)
Hash identifier: xvMpjsEKJthbdNbAJk7XfOrV40kLS7GPZbBeXipHuqM=
Subject key identifier: 2A:1A:56:10:18:1C:36:F8:7F:BE:BF:52:E1:DC:E3:4D:F0:C5:62:D2
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial: 019888B236D399E3BB01A4AED0748F2463C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
Manifest number: 1443
Signing time: Fri 08 Aug 2025 08:00:37 +0000
Manifest this update: Fri 08 Aug 2025 08:00:37 +0000
Manifest next update: Sat 09 Aug 2025 08:00:37 +0000
Files and hashes: 1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: Dghyvrnz3XwgxvzuF4pIyX/CKTJ6pFvMNqJF2PMhmMg=)
2: VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa (hash: mb8FZcI3peRcYmZtZcg+Q1vM47sFhZh3vrE8fwC75+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:36:d3:99:e3:bb:01:a4:ae:d0:74:8f:24:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
Validity
Not Before: Aug 8 08:00:37 2025 GMT
Not After : Aug 9 08:00:37 2025 GMT
Subject: CN=2a1a5610181c36f87fbebf52e1dce34df0c562d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:6e:9b:6b:de:b5:e1:45:5a:4a:a5:56:c5:
9c:2d:ff:a4:25:90:70:68:c8:de:d1:18:69:25:d4:
21:ab:04:85:89:d2:2f:be:4b:98:d5:b9:81:34:87:
2f:ed:70:ee:bc:be:2e:c7:b0:8d:35:ef:99:ef:b7:
b3:f1:4c:99:a7:d7:f0:2f:12:3a:b4:2a:5a:6d:ef:
7c:c2:2c:c9:30:d5:17:34:55:45:92:d4:7d:05:d2:
ac:e9:b2:f7:4e:f6:2f:ac:60:f0:ad:18:cb:56:2c:
22:4c:67:bd:1d:11:75:ad:5a:75:0e:7a:94:ad:e2:
80:cb:4f:96:c4:3e:ef:d7:d8:1c:67:39:d5:84:63:
be:31:72:fd:82:1e:02:9f:b6:19:d1:97:10:8a:f3:
0a:32:4e:86:e7:1a:e1:0f:ee:cd:ce:6a:eb:14:2f:
75:25:63:2f:f4:43:e2:23:81:01:d4:14:e4:94:88:
34:c0:0b:84:b6:23:f6:db:0f:a2:95:85:ce:3e:6a:
da:96:d9:ae:47:26:a1:52:07:67:c3:72:28:8b:0a:
0f:ad:df:3a:fe:45:8e:1a:6e:4c:0c:dd:24:93:3d:
70:f8:49:cc:57:42:aa:25:60:c6:27:b5:62:1c:0f:
84:7d:32:16:2c:f9:fa:91:6b:b1:34:c8:31:77:1a:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:56:10:18:1C:36:F8:7F:BE:BF:52:E1:DC:E3:4D:F0:C5:62:D2
X509v3 Authority Key Identifier:
keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f9:e0:3b:12:1b:26:c4:57:3d:fd:e4:81:62:ef:39:85:d6:
b0:8c:c7:68:1a:ba:1b:4b:cf:29:d6:61:32:bb:8c:93:b6:5d:
88:10:0b:72:ac:fa:ee:a8:d0:20:91:7c:a2:5c:dd:a1:e1:1d:
30:ec:2e:c0:f2:f6:5d:33:bd:dc:53:51:58:54:ab:96:aa:ad:
21:fb:3e:04:c3:b0:f0:3f:07:6f:0d:80:1a:74:d6:c0:e6:66:
70:de:66:1e:93:4b:7f:11:09:96:34:9b:b8:5d:85:be:fe:ff:
cc:50:fb:5d:6d:7c:90:fe:7a:3f:de:75:ba:fb:8b:3f:1c:01:
5d:82:22:73:42:dc:53:af:37:ee:4c:66:72:f6:9e:a2:02:b0:
ab:6a:c9:c8:b1:01:dd:7d:22:15:d3:bc:f0:12:97:58:33:d6:
60:4d:e1:ea:19:6e:0a:bd:10:9d:af:ce:cf:d6:07:0f:8d:0a:
9f:5c:4b:18:1d:df:41:7e:30:80:fc:2e:93:98:e0:39:49:4c:
44:33:72:7a:b1:e5:4d:ea:12:48:35:c4:71:91:63:77:aa:59:
66:54:88:80:c1:5c:a5:ff:30:55:e0:b0:54:c1:fa:4a:ca:62:
b7:18:9e:8f:b9:99:68:60:39:48:52:2f:95:0f:ee:68:51:20:
91:e4:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:15 2025 by rpki-client