Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: HTNAbiu6ZsK6mwd5YoPuL81nY3Sllud9E4kZV4Wq0tM=
Subject key identifier: 2E:37:A1:4C:F3:91:28:90:A7:B2:BD:96:81:44:9E:D5:1A:F1:5E:D4
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019887A02384554E3DDE14723A73D12DC367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0B58
Signing time: Fri 08 Aug 2025 03:01:15 +0000
Manifest this update: Fri 08 Aug 2025 03:01:15 +0000
Manifest next update: Sat 09 Aug 2025 03:01:15 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: LMm4NFYbV+x6spQ+YXij9avF7AajQ4fii+RpkKULuKw=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:23:84:55:4e:3d:de:14:72:3a:73:d1:2d:c3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Aug 8 03:01:15 2025 GMT
Not After : Aug 9 03:01:15 2025 GMT
Subject: CN=2e37a14cf3912890a7b2bd9681449ed51af15ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:af:eb:65:1c:c1:98:93:80:4f:00:71:ec:
57:dd:08:22:38:a0:f9:44:e2:2f:e5:43:60:12:b0:
dd:92:21:86:aa:9b:de:0d:ee:66:9f:a3:eb:6f:42:
a9:93:10:91:78:aa:bf:f3:2a:06:66:f1:43:77:9a:
61:be:c6:13:6d:92:30:de:95:8b:33:ad:4b:58:9b:
22:1e:9e:6e:e8:5e:62:a4:ab:8c:7e:75:26:bc:b3:
37:f6:36:8b:b6:f7:3d:9d:35:06:9d:7d:cb:a6:88:
d9:e1:b1:10:6c:bf:0f:c7:0a:9b:38:e1:50:f7:ee:
27:0d:00:9d:39:09:88:4e:3f:5b:9e:03:da:11:3b:
1b:d3:3b:d6:ce:df:b3:6c:66:74:1a:86:ec:45:c2:
ab:46:ea:7f:da:0f:ec:ce:0c:71:42:ba:55:0b:ac:
18:c8:bf:ca:de:d3:05:df:42:67:4c:cb:32:bb:be:
da:ec:c4:b3:30:4e:3e:b7:4f:34:ed:de:2e:40:a1:
af:f6:9c:f5:4e:f1:81:8c:3f:42:85:e2:20:5d:4f:
4b:84:57:29:5a:b3:12:b6:da:a5:cc:ef:5b:a0:48:
e7:76:e8:08:be:cd:ca:f8:ca:62:0a:c5:e3:60:0d:
4c:43:ee:bc:b6:c9:25:45:17:fb:91:3d:2b:39:99:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:37:A1:4C:F3:91:28:90:A7:B2:BD:96:81:44:9E:D5:1A:F1:5E:D4
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f9:dd:fc:dd:fa:70:2b:15:ef:4c:8a:57:6b:87:4e:3e:71:
a4:13:cf:01:55:a4:b7:b8:d4:5b:3a:87:07:62:e9:5e:0b:e9:
40:3d:ac:e8:c5:eb:99:1c:8b:71:fb:44:50:39:20:09:d1:27:
c2:37:a3:8b:db:68:72:b2:53:14:43:c5:ed:54:92:ab:94:26:
0f:ad:81:32:6e:43:ad:bf:f0:d4:98:89:b0:5e:0f:0f:2d:94:
c8:89:d6:22:14:f7:b2:a0:97:dc:a3:e4:7c:e5:06:1f:79:7f:
6e:ea:ad:50:c6:29:30:16:e8:90:8a:48:c9:e6:0d:7c:4a:9b:
c6:c3:19:d3:2c:bf:7c:24:d3:35:47:9b:b1:70:27:2b:cd:72:
fd:10:b6:13:de:36:8c:af:46:4a:ea:1d:2c:0e:da:a9:7f:16:
1e:c0:64:7a:5b:25:29:c6:1c:88:ed:16:0d:9b:eb:19:12:13:
22:0a:bb:7e:80:d0:b2:c1:85:36:21:52:d9:f4:6f:2b:c0:9f:
72:bd:2a:95:d3:04:40:01:5d:70:16:d4:38:ed:b2:63:cf:5d:
8e:f4:61:01:76:3a:10:90:77:41:6a:72:c9:1a:b6:23:1a:bf:
86:4d:c1:7e:f4:54:ec:bb:56:02:ab:98:0c:38:e5:61:53:86:
dc:0c:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:43 2025 by rpki-client