Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: Hyy+rYFTd0p8XHvOuTbm+1S8wqiHGYNjSvEH5CFz/bk=
Subject key identifier: 8C:20:03:5C:12:E2:11:5D:06:E4:F7:30:AE:24:D6:D6:7B:F7:F1:66
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 0199548B70031AA48378822637E8DE941572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 108B
Signing time: Tue 16 Sep 2025 22:00:48 +0000
Manifest this update: Tue 16 Sep 2025 22:00:48 +0000
Manifest next update: Wed 17 Sep 2025 22:00:48 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: cTsU+uhjPdxeXpuA3VcTpGxOj0XRueEvKsM4WZ6/mjY=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:8b:70:03:1a:a4:83:78:82:26:37:e8:de:94:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Sep 16 22:00:48 2025 GMT
Not After : Sep 17 22:00:48 2025 GMT
Subject: CN=8c20035c12e2115d06e4f730ae24d6d67bf7f166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:e1:ac:6c:99:72:b0:fe:99:8e:3b:16:26:
30:03:db:66:74:1b:a0:12:7d:43:95:17:9c:fa:8b:
67:78:08:57:50:66:f3:05:21:6f:6e:7f:2d:61:d6:
0a:8a:5a:46:40:22:0d:77:8b:52:c6:57:8c:95:ad:
4b:32:cc:aa:66:0f:67:f9:ea:84:2e:94:77:a1:fb:
ea:9a:a7:0b:1b:88:4e:b2:5b:2f:11:2f:27:84:77:
b6:26:fa:34:95:96:46:f0:4e:45:07:e7:a3:00:a4:
9e:10:f7:b1:f0:f9:5c:d3:cd:d8:39:a9:3c:87:37:
aa:97:50:c8:01:45:59:e8:3a:a3:89:c0:1e:31:55:
9d:5e:e3:c1:31:fc:ba:e1:ad:fe:10:d6:cb:7a:b3:
12:b8:54:a2:db:d1:b1:e0:5b:c3:22:a9:5f:bd:de:
d1:e8:45:a1:b1:dd:39:be:e8:8f:c7:3e:9c:43:2c:
ca:ad:eb:bc:c3:97:54:10:12:07:66:c6:79:43:40:
70:d8:7b:8d:ce:c0:44:6d:ae:50:d2:18:09:72:9b:
d2:bf:6c:d4:d8:fb:d5:1a:8c:58:3b:b4:92:0f:a1:
7e:20:11:34:67:c2:61:6b:6d:06:63:c6:97:99:55:
7a:c7:8b:af:db:56:df:53:ba:d9:fd:3a:2b:4b:43:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:03:5C:12:E2:11:5D:06:E4:F7:30:AE:24:D6:D6:7B:F7:F1:66
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:49:5c:64:d8:ef:3d:5a:65:b5:52:e0:5e:e6:de:7c:d9:43:
7c:f8:d4:95:fa:f6:89:c1:5e:c7:6e:59:2c:95:91:c0:e0:a6:
59:9e:9a:b4:45:bf:1b:27:52:16:a5:d0:97:a1:af:6f:42:7b:
e1:dd:84:60:35:a2:42:bc:d8:ac:4f:7b:93:79:07:eb:60:be:
86:15:a0:a8:82:4f:57:d0:64:3a:b4:1e:28:9a:31:11:b4:85:
b9:18:41:73:eb:f1:f5:c9:c2:48:d5:db:a4:ff:4b:44:78:99:
46:74:6b:83:75:b9:e9:1b:52:36:4d:cb:33:a0:b1:be:01:15:
25:48:86:bb:5a:fd:ad:82:8d:0b:8d:b8:90:6c:86:40:49:00:
d1:14:16:80:dd:2e:ae:05:fb:52:94:c0:01:97:68:71:32:80:
26:fa:ad:f5:47:47:d8:79:c0:44:fe:d3:ef:04:38:1f:07:c1:
3c:c6:fe:ce:03:b9:53:92:3b:e9:53:48:f6:72:68:e3:82:96:
f9:eb:a3:4b:5d:cd:4a:14:0b:3b:a7:8c:fb:81:a2:36:a1:9a:
8e:3f:7b:6f:0b:0b:2d:b7:4f:84:8c:ca:20:a5:e7:9c:14:ed:
84:05:61:e6:03:0f:85:2a:73:91:cd:a8:8b:76:cb:f5:a5:26:
bb:b9:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 07:54:46 2025 by rpki-client