Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
File: HTHgIH7TynaEoD6I-aHeKSLdRd4.mft (raw, json)
Hash identifier: hmhg9aA3QRMOag10cgP2GHugdHUqwP4AzazKoQ7NrX8=
Subject key identifier: DC:26:57:59:AC:85:89:45:CC:31:80:93:E4:AF:7B:8B:0A:72:0E:5C
Authority key identifier: 1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
Certificate issuer: /CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Certificate serial: 01983DCF603F064BFE2E38C035EFC8E446B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
Manifest number: 01A3
Signing time: Thu 24 Jul 2025 19:00:57 +0000
Manifest this update: Thu 24 Jul 2025 19:00:57 +0000
Manifest next update: Fri 25 Jul 2025 19:00:57 +0000
Files and hashes: 1: HTHgIH7TynaEoD6I-aHeKSLdRd4.crl (hash: 7pG+5v/scAw1h7M9wob8ERSkzwc6Xnedvj8vUTYbkss=)
2: ZwHdEqulD1m_3ODalRm8KKpV4D8.roa (hash: AgKObURVZ2No/6B5xbYFDC7jFhFUnrv7+FottsPk3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:60:3f:06:4b:fe:2e:38:c0:35:ef:c8:e4:46:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Validity
Not Before: Jul 24 19:00:57 2025 GMT
Not After : Jul 25 19:00:57 2025 GMT
Subject: CN=dc265759ac858945cc318093e4af7b8b0a720e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:b0:33:b9:57:66:57:f9:a1:08:62:1a:42:
4f:09:c2:83:63:fe:fc:69:28:12:08:8b:52:18:74:
cc:f1:65:39:d8:e7:0a:27:d7:c3:74:21:89:c9:05:
f8:2d:3c:58:58:5c:14:83:f5:95:08:92:55:89:e6:
04:bb:98:89:45:09:56:e0:2b:2a:68:85:63:dd:f8:
b9:81:0e:44:9e:f5:25:9e:e8:87:4d:d7:5b:57:b0:
5b:72:9c:ce:ff:eb:a3:62:5f:e7:74:50:e2:56:f8:
23:a6:9f:0e:d3:6c:30:d2:f8:67:b8:a1:42:a4:1f:
01:cd:ff:52:af:6f:20:24:d1:6e:3b:77:01:16:71:
3c:75:6e:00:d2:d7:31:ab:6e:9e:0d:84:1b:62:0a:
cb:59:9c:e4:0c:b0:eb:f9:79:eb:2a:63:4c:5e:66:
d5:93:8d:cf:eb:92:a0:57:7d:dd:51:91:a8:f8:2b:
83:48:41:8f:ec:cf:3c:f4:4b:da:42:c6:77:ea:bb:
db:97:51:8b:f6:1d:b0:61:33:f6:6f:be:30:8a:5b:
09:c1:95:b0:22:ff:70:39:19:ff:27:a7:a9:ba:76:
f9:ce:af:76:0b:08:16:6f:68:b5:56:58:b3:28:0d:
56:7c:46:7e:0a:8d:c4:d1:ed:54:e1:31:b1:d4:05:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:57:59:AC:85:89:45:CC:31:80:93:E4:AF:7B:8B:0A:72:0E:5C
X509v3 Authority Key Identifier:
keyid:1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:93:3d:9f:13:1f:78:b3:fa:5a:f1:c0:99:3d:7c:d2:91:
54:e8:5a:5b:f3:55:7d:90:d9:37:4d:75:76:80:0c:09:97:df:
e3:df:4b:82:73:c7:66:f4:f3:9a:79:e6:36:1a:e2:36:c7:24:
ab:0f:3e:77:37:5b:dc:38:88:45:17:68:b6:45:10:5f:78:15:
a1:57:7c:0f:2a:32:ff:a9:ca:58:a4:36:8a:a0:34:37:fa:d5:
1a:70:98:ac:03:37:31:6f:c8:75:30:fb:c3:40:bf:89:b2:b4:
4a:a1:47:13:5b:3f:8b:3a:31:da:08:37:d7:a7:9f:9d:0a:6e:
9a:68:d5:4f:9b:cd:44:75:f0:8c:5a:1e:ce:ff:b6:b4:80:28:
3c:5d:8b:53:74:f9:cb:7e:2f:03:22:16:2a:50:0c:56:9a:8f:
85:7e:f3:b5:5e:36:cc:7d:c2:f4:f8:4f:52:f0:9d:bb:4a:fc:
f6:c6:27:09:0b:dc:cb:d8:6b:0e:b5:f6:f2:d1:9a:93:c3:40:
c2:9e:56:d7:db:7a:94:80:9f:bc:6f:ea:85:b3:03:86:03:d2:
77:3a:e0:87:1f:7a:93:54:e3:55:8d:9c:78:65:96:84:85:3b:
8d:09:96:f1:a9:f4:25:2a:98:f4:56:db:0a:af:19:40:6e:42:
9b:e5:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:07:14 2025 by rpki-client