Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: xS8p3iJ7WCOVJqopWr68B92t+rKl5ytpAvlkQ4NMInw=
Subject key identifier: 47:E0:3B:E0:C3:26:26:AF:B1:1D:A6:0E:5F:8F:4E:A4:66:6B:01:24
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 01984475F532FB2B22E00D93CDB192B9BED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1518
Signing time: Sat 26 Jul 2025 02:00:37 +0000
Manifest this update: Sat 26 Jul 2025 02:00:37 +0000
Manifest next update: Sun 27 Jul 2025 02:00:37 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: BvnMBHeLs5dHpSUXXxOb0FBjr+UBlpeQ7FxSXmtPEPw=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:f5:32:fb:2b:22:e0:0d:93:cd:b1:92:b9:be:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jul 26 02:00:37 2025 GMT
Not After : Jul 27 02:00:37 2025 GMT
Subject: CN=47e03be0c32626afb11da60e5f8f4ea4666b0124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:1f:ec:4d:89:90:90:0b:23:11:d7:e6:69:
b1:c9:37:c0:07:ac:62:38:3e:43:ef:ad:81:de:ee:
7e:13:2d:8c:fd:28:16:1d:83:b1:a0:7d:38:ab:b6:
5e:31:95:ef:f3:37:92:dd:2e:ab:c9:7e:9a:5c:94:
f5:c2:e3:5e:81:cf:ee:a4:4f:d9:0d:01:ab:f0:d6:
97:e5:a7:bc:7f:ff:15:d0:cf:5c:88:97:25:a9:b6:
f1:c7:b3:85:76:8b:7d:4b:7f:26:f7:da:26:81:24:
30:3c:0e:14:50:f7:2d:3d:44:cb:47:9e:1d:ae:e8:
c2:55:25:e6:70:0b:5c:4d:31:39:78:0a:05:fc:e1:
b1:78:21:f6:4e:68:0e:23:4d:b9:dd:1c:b5:3c:dd:
57:49:4e:41:9d:9a:53:ac:5d:31:69:a6:bb:27:21:
30:51:b3:d4:61:6f:9a:ec:e9:f4:e0:bc:35:fa:f6:
10:dc:3e:89:f6:ad:b5:d0:ee:9f:63:50:f5:43:93:
a6:1f:90:a9:e7:d7:1a:1a:5b:17:40:6f:09:0b:9c:
47:39:85:c1:0c:09:0a:99:b4:3e:30:1e:38:47:e3:
c1:b9:62:94:c5:9e:d1:b7:1e:ca:6f:7d:39:8a:94:
9b:eb:e0:2f:bf:a9:f0:31:1c:a3:e3:2b:b8:b2:2d:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:3B:E0:C3:26:26:AF:B1:1D:A6:0E:5F:8F:4E:A4:66:6B:01:24
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:53:3b:fc:05:55:d7:f9:11:e8:91:2a:8b:f7:6f:ec:90:8a:
88:f2:d7:4e:2d:f5:df:55:36:69:81:0c:59:46:ab:ff:cd:02:
52:f7:6d:c9:fd:0a:3b:77:4e:af:c0:6c:c3:f4:ca:95:dd:3e:
fb:05:95:ae:8b:e3:57:a7:fa:22:b7:1f:7b:60:50:10:23:54:
e8:ce:b5:c4:ef:6c:d0:1b:c8:ed:fd:51:a8:b4:55:c2:a0:9c:
4f:ad:91:a1:fd:ef:db:7d:c5:3b:01:aa:0b:60:85:22:1d:3f:
2b:15:50:1d:8c:83:dd:59:88:ac:de:e9:34:d7:7a:1e:ee:b2:
5c:ce:12:66:d5:d8:2d:b6:17:83:26:fd:1a:0a:21:29:77:1d:
c0:28:8d:64:87:d4:5b:a0:1e:89:0a:1a:61:8c:ef:f4:88:65:
a1:1f:13:8a:11:bb:f8:76:a6:f0:c1:1e:93:1d:3b:b6:97:49:
ec:8b:fa:73:c1:6a:6f:bf:66:a0:f5:cc:c4:48:12:4d:62:76:
ab:fb:e4:63:22:87:3c:ba:06:41:ac:aa:7d:16:39:15:b3:2d:
a1:02:f2:f0:0f:a8:25:ff:d7:a5:91:a8:2b:03:87:ee:b6:37:
c7:41:e6:d1:ae:19:ae:08:b5:52:93:a7:42:da:ba:e4:1e:a7:
3a:be:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:16:33 2025 by rpki-client