Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
File: hugNGBwlPRTaHgupwdVmb1Ym1YE.mft (raw, json)
Hash identifier: nmL41fpIym0dzhZIos+uuB9HdnSc2NAK2s9SS3SKPSY=
Subject key identifier: 93:AF:31:B2:11:CA:D1:DE:E5:D8:BC:9B:7A:8A:9C:C9:43:25:F8:B0
Authority key identifier: 86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
Certificate issuer: /CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Certificate serial: 01988DA214A5F90D287A7C1691508C5FD087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
Manifest number: 49
Signing time: Sat 09 Aug 2025 07:01:06 +0000
Manifest this update: Sat 09 Aug 2025 07:01:06 +0000
Manifest next update: Sun 10 Aug 2025 07:01:06 +0000
Files and hashes: 1: GduTVoXL90rcY5IbBMohmd6Di4U.roa (hash: FpxhDiPtRQpdrB9mwbp5ACWnV465MFksntDsy9t3DCM=)
2: hugNGBwlPRTaHgupwdVmb1Ym1YE.crl (hash: Nr+nMOaMckfFViHOOPJFP4tLoy/D+2pe7tWOEijb4c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:14:a5:f9:0d:28:7a:7c:16:91:50:8c:5f:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Validity
Not Before: Aug 9 07:01:06 2025 GMT
Not After : Aug 10 07:01:06 2025 GMT
Subject: CN=93af31b211cad1dee5d8bc9b7a8a9cc94325f8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:c3:60:1a:25:bd:17:47:38:b3:09:42:40:
12:56:72:52:84:76:7e:44:eb:04:7d:3f:3f:ca:e2:
10:20:0c:43:70:5e:49:d6:b7:94:6b:51:7b:b0:f0:
d4:ee:3f:28:a1:ad:5b:0d:4b:3c:ad:22:10:74:34:
cc:b0:26:43:65:9e:50:25:0e:38:35:03:0d:a3:65:
09:04:af:e7:96:f9:27:18:9f:02:f7:37:55:99:2a:
66:93:87:6f:6c:e3:a9:e1:07:66:56:ad:72:c9:20:
21:9a:d5:30:9f:bf:e3:a2:05:f5:c0:20:e5:b7:78:
81:b5:4a:71:85:95:36:87:0a:a4:63:79:ca:3a:f0:
d3:40:6b:42:b7:db:c6:97:c2:4b:f3:89:15:2a:df:
15:38:3d:02:e2:cd:c0:d3:c6:f2:6c:3f:46:d1:00:
86:3c:8c:cc:ee:1d:fc:73:ca:59:38:77:e3:c7:46:
3a:33:3e:60:61:f1:77:3f:b7:a3:3c:69:d5:4c:af:
33:ac:0d:22:6d:59:9f:11:fd:96:dc:f2:55:70:0f:
68:59:96:20:a0:5b:b3:8d:cd:02:89:80:5e:6c:ca:
0f:19:18:15:52:61:b6:3b:35:3f:4d:bd:dc:99:c0:
5f:39:f1:77:55:82:2e:9b:09:0e:71:51:99:ca:37:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:31:B2:11:CA:D1:DE:E5:D8:BC:9B:7A:8A:9C:C9:43:25:F8:B0
X509v3 Authority Key Identifier:
keyid:86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:46:a1:31:de:cd:95:2f:83:39:b0:6b:c4:4a:b4:b7:fa:06:
00:e2:0f:06:7a:11:1e:e5:0d:71:2c:ab:c7:f6:90:16:05:23:
2c:e9:04:8e:b9:e1:75:3b:6e:01:51:d0:4a:4a:eb:18:9d:0d:
91:00:c9:3f:28:ad:33:b4:93:1e:f7:30:93:93:bb:2c:d5:a0:
b3:c9:9a:24:08:09:f8:67:ca:11:00:06:0d:88:41:c2:31:01:
1b:6f:bc:28:16:73:e7:c1:76:81:5a:9f:61:95:e7:ed:e3:c0:
f5:72:c2:14:86:90:65:bc:0a:83:09:64:42:5e:d1:c9:7c:e1:
5d:67:81:1e:0e:c0:ae:3f:9d:cf:68:48:4d:fe:c3:e2:9c:7c:
00:b3:2a:df:9c:3a:85:5f:1d:ca:bb:6a:4e:2f:e2:cc:0e:54:
86:36:55:3d:7e:18:44:3a:5c:78:0e:c6:45:dc:1e:bd:d0:0a:
e6:36:d4:75:06:12:4f:ed:30:52:91:b6:00:1e:e2:f2:d9:7f:
6f:07:b0:bc:33:d9:80:70:b7:b0:b3:89:6c:49:ac:21:04:5b:
f0:36:b7:c3:3f:13:8f:06:f7:5d:c6:8b:bc:69:c8:2a:48:c8:
91:f7:2c:e4:78:eb:f2:07:67:86:46:b7:e0:04:af:cd:9a:43:
09:7c:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:10 2025 by rpki-client