Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: ZUV97cHrtbA+GOIfm3Oqf4KHFpgRfckHWdljSVW/WqA=
Subject key identifier: 8B:0F:72:5E:57:35:5D:F9:96:26:93:57:DA:B1:96:89:92:50:16:81
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 01984A40DD316D48EE4330073D4461074D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 1250
Signing time: Sun 27 Jul 2025 05:00:21 +0000
Manifest this update: Sun 27 Jul 2025 05:00:21 +0000
Manifest next update: Mon 28 Jul 2025 05:00:21 +0000
Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: 1diRH906gOyYcTBB5VEy5Ey8c48v8VY3aPKUjGzDi9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:dd:31:6d:48:ee:43:30:07:3d:44:61:07:4d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Jul 27 05:00:21 2025 GMT
Not After : Jul 28 05:00:21 2025 GMT
Subject: CN=8b0f725e57355df996269357dab1968992501681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:e5:4c:94:9a:f2:f7:43:13:2f:c4:ea:75:
39:dd:28:8e:62:b6:97:7b:8a:74:24:b5:87:8c:28:
a7:cb:15:21:85:f4:49:16:23:5c:1e:83:0e:fb:42:
3d:c0:32:06:7c:a7:1c:f7:d6:b8:38:e2:4f:57:c3:
de:35:1c:d9:10:bd:5c:d9:f3:d1:be:91:dd:4d:10:
e9:af:d9:d1:a2:80:dd:a0:22:6f:5b:14:f3:42:8e:
35:5a:dd:f7:b9:ea:51:cc:8b:77:89:1d:01:bf:fb:
4f:76:3c:ca:76:bb:75:4f:36:2f:1e:8a:a7:3d:d3:
5c:ee:49:c6:86:2c:e4:d0:9a:d1:2c:c9:0c:e0:d6:
2a:01:bf:4b:2a:51:56:ff:16:dd:8e:4e:3b:20:54:
d6:6b:19:24:ec:70:86:6c:2f:bb:53:ce:da:02:7d:
8b:dc:83:ac:d8:a3:0e:7a:a9:2c:c9:6f:b8:a1:f2:
37:fe:33:82:1b:a5:4b:6b:38:0f:02:4a:90:2e:35:
a6:10:86:c3:14:2d:f2:9a:dc:bf:c5:c0:bc:92:ba:
40:64:f6:f3:30:0e:ee:cd:30:bb:c9:d7:81:d1:ed:
3c:02:90:ab:d8:f7:88:15:60:be:2f:1b:e1:57:6c:
3e:6e:60:ca:38:22:71:a3:90:25:55:89:08:33:ac:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:72:5E:57:35:5D:F9:96:26:93:57:DA:B1:96:89:92:50:16:81
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:17:c1:64:69:c1:2a:d4:37:5f:7b:d3:ba:be:04:69:d0:
11:49:18:4f:31:8b:22:d5:57:9f:aa:12:f1:d5:87:61:21:69:
c0:e2:74:19:03:a6:96:25:a0:31:30:a2:12:66:df:d0:23:d3:
33:94:f8:c5:47:88:4d:f5:28:c7:7d:a0:f9:24:65:d1:d0:8a:
3e:0c:cd:24:00:2b:b3:b0:e7:12:72:88:ae:b8:60:08:64:df:
f1:71:02:1f:2f:df:1f:2c:fe:2c:fd:cf:77:b2:0d:3f:e3:50:
44:e0:f3:74:e4:17:44:c1:a1:d2:63:65:f6:35:f8:3b:c8:8f:
be:4f:c8:be:76:c6:3a:16:72:f5:d9:c9:f0:74:cf:9e:4b:aa:
ef:07:ca:07:0f:76:60:2e:89:94:e7:9a:57:c7:aa:a2:2f:5d:
ab:92:84:e8:08:b4:23:10:1c:7a:ba:9a:c1:ca:66:27:a9:e4:
69:fc:04:6f:27:ab:03:b4:26:d8:f7:16:39:c9:53:b3:50:ed:
57:e1:7a:78:4b:68:44:88:46:ba:6b:29:06:16:82:28:cd:29:
65:cc:90:23:d3:b5:19:26:eb:3e:b8:fb:e7:b8:ac:51:29:df:
f0:a8:f4:bc:ef:26:cf:68:fd:f3:52:a7:7c:7f:6d:d7:ab:9f:
d1:62:37:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:38 2025 by rpki-client