Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: uZCOaV97tS1xmuQ5WBEKOemBue1MPX6hzEAV2O0qgi4=
Subject key identifier: 89:D8:1E:91:46:D0:36:EC:40:42:1F:F7:9F:29:D8:D7:4A:F7:A9:E0
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 01984A4157937E45918EA408F1BEE38977FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 15B1
Signing time: Sun 27 Jul 2025 05:00:52 +0000
Manifest this update: Sun 27 Jul 2025 05:00:52 +0000
Manifest next update: Mon 28 Jul 2025 05:00:52 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: jJyCz0ucyskmJJ28I/BKCQ1d3mnxthjYB4IcBdEq06o=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:57:93:7e:45:91:8e:a4:08:f1:be:e3:89:77:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Jul 27 05:00:52 2025 GMT
Not After : Jul 28 05:00:52 2025 GMT
Subject: CN=89d81e9146d036ec40421ff79f29d8d74af7a9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:4d:2f:46:7c:7b:1a:bf:fc:ba:ee:86:a9:
b8:47:b0:cc:60:43:3d:40:81:00:37:33:b3:fd:d4:
a0:9f:8b:8c:a8:b1:c1:d1:fd:76:70:a7:a4:1a:48:
fa:cb:d1:8d:9d:71:1d:7b:d0:a2:14:01:81:a8:9f:
42:ee:89:bb:75:f1:03:e1:74:eb:07:7e:c8:e2:47:
e6:7a:b3:0d:eb:ef:dc:72:65:01:be:ef:eb:7a:98:
04:c9:b4:cc:40:f2:9d:d4:bf:64:a3:67:ee:11:04:
62:50:e5:39:41:bf:3f:a8:f4:3f:b7:9e:85:7c:9e:
2b:34:5f:46:1e:74:84:ab:0d:8a:b5:83:99:ca:c6:
92:58:ba:6f:95:aa:0f:09:3f:9d:26:a5:30:3e:24:
4d:d8:8f:e8:36:29:e1:b0:b5:ba:3d:d6:a8:20:47:
6d:c2:7c:74:46:b5:b2:e0:0f:14:70:6b:55:7d:24:
4e:c9:1f:62:54:31:6b:22:4f:57:b8:eb:57:58:bf:
4a:4b:96:4d:c6:73:a9:27:5e:07:e1:88:4e:ef:31:
95:c6:74:6a:64:f0:07:93:f4:5e:78:40:29:04:45:
90:71:43:56:9e:1d:7d:f2:94:8b:28:79:98:ea:5b:
8f:c2:09:7b:b4:f3:10:50:80:df:a8:22:9e:03:60:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D8:1E:91:46:D0:36:EC:40:42:1F:F7:9F:29:D8:D7:4A:F7:A9:E0
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:00:b4:2a:ac:68:4f:c7:e5:c1:26:d4:97:91:bb:53:b5:37:
b7:1c:80:62:d2:7a:1b:b6:60:0d:7f:6e:ce:ae:28:1d:b5:50:
7f:29:d2:75:f8:5b:fc:18:7b:d5:66:de:04:29:44:ff:c5:88:
82:fb:33:91:95:30:54:2c:4b:c4:a0:d4:4d:59:32:d4:f6:0a:
b6:d9:37:6d:6c:a1:03:8d:34:f7:c3:1a:54:e4:8a:d4:95:23:
63:a4:87:12:c9:6e:c7:90:3c:89:46:af:a0:f9:7d:72:d8:58:
16:57:27:53:46:d6:fa:fd:e2:2c:b7:98:de:26:45:d3:18:a0:
ca:da:36:a5:1d:b6:61:88:3f:59:77:d1:6b:de:9a:f6:a0:bf:
c0:56:a5:12:f1:af:22:13:f0:6c:05:40:34:bc:bc:c0:18:c6:
35:68:2a:8b:8b:21:16:cc:9a:fc:43:1e:fb:29:d7:a6:cd:93:
91:a8:c7:37:c6:07:ed:8a:ff:b0:bf:bb:3c:1f:c3:10:a7:37:
35:2d:f6:4b:1a:74:85:b1:75:da:54:a9:d7:b1:08:f0:a2:a1:
a9:f8:20:20:8b:aa:ea:34:02:a5:2e:12:92:c5:64:ad:81:0f:
d1:40:5c:8a:0f:86:46:61:39:3c:89:fd:69:0f:c1:20:7e:9a:
82:de:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:52 2025 by rpki-client