Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: HZDASGE82uLfH5aNuTjQpwlUMHsID9uekn3rwUK9cnk=
Subject key identifier: 33:37:AD:3D:CE:96:45:36:77:6B:24:9C:2C:E8:1B:FC:F3:73:2A:D6
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 0198529F5DFC736F85BECC65B4DCA7C18434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0AC9
Signing time: Mon 28 Jul 2025 20:00:32 +0000
Manifest this update: Mon 28 Jul 2025 20:00:32 +0000
Manifest next update: Tue 29 Jul 2025 20:00:32 +0000
Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: zgX/IBuUIQH/3OTC0RvemTvSzbMItAgteTrTpbPRizI=)
2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=)
3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:5d:fc:73:6f:85:be:cc:65:b4:dc:a7:c1:84:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Jul 28 20:00:32 2025 GMT
Not After : Jul 29 20:00:32 2025 GMT
Subject: CN=3337ad3dce964536776b249c2ce81bfcf3732ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:27:fa:61:56:2b:d5:af:29:25:82:34:72:
71:cb:f4:8c:57:91:30:70:51:b1:e3:03:e7:66:51:
0e:04:e4:47:53:18:93:09:7d:d6:a0:39:9d:af:21:
be:1e:60:cd:26:d7:df:15:08:a6:03:5c:04:5d:e7:
fc:74:d0:00:3f:63:3b:70:29:e2:e1:cd:0c:0d:bf:
28:bc:a3:ef:5b:da:2d:3e:73:c7:09:35:ba:69:ae:
f5:7a:5c:8e:03:7b:66:b5:58:02:87:33:9a:d4:d8:
7b:fd:2a:53:c5:aa:d2:22:1f:3e:4a:6f:a8:97:65:
87:b6:a3:72:83:ab:af:a2:32:cf:b3:1c:b7:de:f9:
fa:14:62:62:d3:8b:36:b5:9a:7b:d8:85:43:dc:78:
25:d7:c2:aa:46:2a:7f:30:9d:64:93:ac:4e:6a:de:
e9:2c:7b:08:18:b1:cd:fb:9b:37:9b:bb:23:2e:33:
10:a9:10:42:a6:70:fc:72:77:27:14:29:5f:73:53:
39:3f:52:42:d8:e5:12:27:54:d8:63:04:51:df:97:
70:19:2b:34:66:92:d8:c4:6d:18:b3:56:ad:b0:17:
a0:3c:98:49:8c:8a:0a:41:77:d4:8d:9e:c4:79:e4:
d5:81:c9:80:29:81:55:da:62:f2:90:6e:24:6d:56:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:AD:3D:CE:96:45:36:77:6B:24:9C:2C:E8:1B:FC:F3:73:2A:D6
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:05:6c:c4:30:d3:06:07:e0:eb:5e:c4:59:58:0c:c9:2e:
f2:b5:d6:86:47:5c:59:4e:70:7f:5d:a6:3d:9b:5a:64:d2:aa:
b6:33:93:74:86:2f:78:df:9b:14:49:a3:bf:67:98:c1:8a:36:
8a:02:94:03:2e:4a:f6:d1:74:5a:f5:e9:ca:de:6c:83:6f:c3:
4d:8c:7b:65:79:85:83:92:4a:5d:ef:ae:98:d7:c1:be:21:9f:
c3:8a:09:1a:5b:25:4a:fd:e3:b2:f5:b8:a3:a8:36:0a:57:cd:
e3:b1:95:01:a8:19:b6:28:f8:58:e7:26:1d:cb:5d:f1:4b:cb:
65:ed:64:20:4b:68:c9:83:ca:72:a5:bc:b1:b9:e7:f7:3a:ce:
ca:b3:65:e2:cb:b4:52:3c:f3:55:61:bc:fb:35:12:c2:a1:b9:
62:f6:09:0c:63:a7:f5:6c:e5:de:e2:25:06:65:cb:13:f6:eb:
22:70:c6:eb:fe:0b:da:0f:1f:dd:b0:c1:d8:62:57:47:47:2b:
af:a7:66:0a:45:41:b2:1c:39:50:28:9e:bf:9c:e2:17:da:1b:
10:d7:34:60:54:48:a3:f7:5b:af:61:ae:f6:8c:e0:b7:46:0c:
fd:27:7c:fd:a7:83:7b:b0:77:0a:8e:fc:7e:ba:a6:41:af:5f:
64:42:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:44 2025 by rpki-client