Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: +OY92ocl5BajOyFPFzezFDaEGNIKJauWoh2T5yY2/hQ=
Subject key identifier: 13:44:4B:CF:E7:BE:24:97:6F:E5:A3:E2:40:C9:94:6F:FF:F4:59:D7
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 01984A77AC3D6D25DF1708F43032BE3076F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:13 +0000
Manifest this update: Sun 27 Jul 2025 06:00:13 +0000
Manifest next update: Mon 28 Jul 2025 06:00:13 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: VChuEGy+bmr1qFGgIZoMOGnzrSBgd4G8ocdeAXw20J8=)
2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ac:3d:6d:25:df:17:08:f4:30:32:be:30:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jul 27 06:00:13 2025 GMT
Not After : Jul 28 06:00:13 2025 GMT
Subject: CN=13444bcfe7be24976fe5a3e240c9946ffff459d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:47:a3:0b:9a:af:cd:80:3e:23:c7:98:b8:
e1:2d:f7:cc:5b:3d:39:be:06:58:7a:9f:cf:36:53:
87:49:a1:bf:3f:10:26:82:7d:72:e5:ee:94:59:c0:
63:6a:5e:85:3a:b7:e4:ac:61:9d:27:4f:02:a3:93:
81:ae:0d:a2:5e:9e:f0:dd:c3:49:57:91:56:ed:03:
5b:9b:79:c4:4d:d7:b8:8b:8c:a7:8b:59:39:7b:c3:
1e:5b:08:75:55:28:3a:ad:62:62:c9:ad:05:9d:e9:
4f:1c:ee:0b:55:c3:83:ce:8b:1f:51:02:b6:ae:8a:
89:d0:43:6c:d4:cd:10:b0:01:ea:36:e3:6e:3f:91:
a8:df:e5:14:2c:99:01:30:04:ca:de:d2:34:02:53:
c7:39:2d:a2:57:f3:2d:c8:af:52:8d:9a:aa:10:3a:
9a:ef:80:30:b1:5c:89:eb:a5:2d:0c:bf:82:90:e1:
49:10:45:41:3e:92:c9:ca:a4:8a:0e:4c:4c:f3:10:
d4:6f:34:d8:37:fa:f4:fb:1e:d8:f0:a3:81:00:5b:
e3:72:d8:af:4f:31:65:5f:1e:3d:56:4f:85:5d:76:
00:52:24:ed:f5:5c:5e:32:e1:9b:a1:dd:49:54:a2:
2d:56:89:70:32:5a:37:ad:4e:d1:8a:4d:c3:2c:7b:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:4B:CF:E7:BE:24:97:6F:E5:A3:E2:40:C9:94:6F:FF:F4:59:D7
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9d:9c:7c:66:02:eb:ec:50:1a:cd:14:7c:1c:71:da:ca:3e:
f2:e3:c2:b3:25:7b:5a:a2:39:88:1d:25:b5:bb:72:15:65:d7:
d8:9a:f0:ba:c0:30:c8:36:bd:a0:85:19:a4:ac:4f:58:63:2b:
76:87:7f:19:96:7f:5b:fc:a7:56:7c:55:90:bc:4e:db:f9:7d:
b1:c0:98:04:94:fa:d8:a6:f8:1f:1e:5b:b8:98:d9:67:38:dd:
44:5c:bc:fa:7b:af:cd:53:c9:bc:e4:fd:fa:02:37:fa:7a:e3:
2f:4d:76:c6:8c:32:57:f9:0e:04:94:88:a5:25:00:40:a9:1c:
64:04:63:e3:76:74:d9:5a:c6:eb:b1:00:cc:83:6d:d6:81:cf:
a5:77:52:3a:9a:f2:c2:ff:58:7b:16:e7:d3:39:77:4f:2c:b5:
c9:22:f2:0e:a2:aa:93:80:9a:c4:b2:3e:a3:09:01:ad:6a:f4:
4b:6e:04:65:67:36:d3:f4:47:3d:99:b3:8c:ee:89:29:0c:53:
cb:f9:f4:73:fe:f0:08:18:77:f6:f8:84:bd:b7:86:27:98:31:
eb:e6:a9:4c:1f:5c:9e:27:2e:6e:dd:45:96:63:bc:08:99:54:
ac:ed:1c:10:1f:36:80:7c:8c:30:fc:6e:5d:a9:33:e8:6f:75:
b4:4d:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:13:48 2025 by rpki-client