Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: 2FgKZV+9MNdpm90UriJsD+oUmFVRiNp1lRbxTHDIHjA=
Subject key identifier: E1:72:13:B5:46:DB:9E:08:5A:4C:87:54:C2:A1:86:6B:F5:24:2B:B1
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 0198A798DDC99DF60CEEA1198620A9D1133C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 12B7
Signing time: Thu 14 Aug 2025 08:01:09 +0000
Manifest this update: Thu 14 Aug 2025 08:01:09 +0000
Manifest next update: Fri 15 Aug 2025 08:01:09 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: qsujXYmwpIokl/Ol+tE6qb/NcimE3ZwOEWt7eqgilc0=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:98:dd:c9:9d:f6:0c:ee:a1:19:86:20:a9:d1:13:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Aug 14 08:01:09 2025 GMT
Not After : Aug 15 08:01:09 2025 GMT
Subject: CN=e17213b546db9e085a4c8754c2a1866bf5242bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:a8:17:67:00:85:f2:46:81:a6:ed:2d:6a:
88:2d:93:40:f7:e4:2f:a0:7b:7d:a9:5c:97:d1:06:
62:5a:91:f4:3e:9f:ec:77:ce:a0:de:52:35:14:34:
a4:95:1c:a5:ad:5c:ff:db:9b:28:38:2a:2f:4f:91:
a7:b0:c2:a0:03:75:81:54:12:c6:c3:a0:56:a1:a6:
a6:71:86:7d:cb:bc:a7:d1:c7:17:9e:0d:0b:29:69:
9c:4a:79:c3:6d:3e:2c:65:2c:53:d5:14:3f:0b:ea:
fe:f3:e0:02:4f:70:07:d0:3c:8c:18:2e:65:8a:7c:
e5:7b:98:a4:68:7f:08:73:21:a9:f4:46:36:ac:c7:
e0:d9:b9:8a:26:23:d0:50:45:70:41:94:31:a2:2d:
13:3b:7f:f5:5f:5a:2d:0c:b9:66:4c:7b:eb:11:82:
74:5e:6c:15:1c:a1:7f:09:04:80:94:57:99:64:70:
c3:6d:7c:f9:9c:10:21:1c:8c:92:4d:19:2a:80:48:
13:d6:3c:c3:82:80:a1:86:a8:e6:94:f9:ca:8a:a1:
e8:60:ba:f7:cf:43:d3:df:a5:70:49:cb:70:64:0f:
74:65:ef:a8:95:61:98:c5:7e:ae:41:9f:d6:07:e0:
eb:e2:4d:7c:37:39:f3:ab:76:6d:5b:aa:0f:d6:e5:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:13:B5:46:DB:9E:08:5A:4C:87:54:C2:A1:86:6B:F5:24:2B:B1
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a5:c4:cb:10:2c:fe:4d:28:01:8d:b2:78:6d:1d:56:32:ea:
15:03:c2:a7:d7:a7:4d:da:d8:98:f0:f7:ae:0d:99:b5:49:80:
98:b9:b6:f5:7f:ac:5e:8b:cc:63:94:ff:e9:f4:ff:d2:99:6c:
a1:ab:ad:61:d4:0f:ca:6c:c2:0f:6b:b1:df:d4:ee:be:0a:dd:
10:a3:6c:ea:d9:6f:08:bf:17:b9:f2:1d:85:49:3f:be:89:d6:
04:e7:e9:2b:40:89:83:83:66:f6:d0:50:7d:73:6c:48:89:43:
bc:8b:bf:9c:8c:ae:ef:89:69:7e:7d:96:27:bd:52:f0:a3:fe:
d7:0c:33:4e:4a:76:f8:34:50:06:3a:2d:57:51:fb:65:ef:f8:
67:c6:ea:f4:b7:64:ce:0b:df:08:2b:c1:b2:bb:e0:1e:e5:fb:
7c:99:e1:b5:08:f4:d5:05:7b:9b:22:f2:f8:3d:91:8a:30:50:
02:3a:9e:72:11:55:a5:2a:b3:35:1e:29:5f:80:8a:eb:33:58:
f7:6e:cc:14:42:fd:96:32:0c:7c:f3:7e:2d:d9:f6:17:fa:ea:
ea:4c:96:f3:48:4c:3f:1d:91:22:6d:5c:d6:a6:d8:58:fc:9d:
4e:b9:77:42:ad:af:16:19:63:64:5e:53:b7:d4:30:fc:97:3e:
d5:6f:b3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 08:58:07 2025 by rpki-client