Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File: HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier: fp+6egA7buGT99Dn4i9pFg0pQjqTnpfmkPDGwjy53NU=
Subject key identifier: F1:D5:44:64:37:E8:BF:DB:B7:52:B1:03:F5:EB:81:1F:83:9F:9F:53
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 0198462D5C72110AC00632368785294B4B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 10:00:34 +0000
Manifest this update: Sat 26 Jul 2025 10:00:34 +0000
Manifest next update: Sun 27 Jul 2025 10:00:34 +0000
Files and hashes: 1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: lWz58AlKXGPsXtx54B+ha6YrR3xJH4uS1Q8JIVyWxcI=)
2: HNpMhKMf-UOKB_2xrTd5Ah5Jh4E.roa (hash: wTidaPS7G17Hoeusbm7EV9pgsdks7oYQI4PUUl46YEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:5c:72:11:0a:c0:06:32:36:87:85:29:4b:4b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: Jul 26 10:00:34 2025 GMT
Not After : Jul 27 10:00:34 2025 GMT
Subject: CN=f1d5446437e8bfdbb752b103f5eb811f839f9f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:74:f8:c4:31:ef:ed:f5:e2:45:62:43:18:
0a:9b:fe:b1:41:11:dd:93:7e:02:13:63:db:e8:fb:
6d:ce:a4:85:81:80:ac:70:32:73:d1:c4:9a:2a:70:
dd:c9:68:51:9e:22:47:94:ea:b2:08:71:32:13:e7:
2d:6e:51:d9:7b:55:3d:f3:44:03:09:7a:d3:0d:ed:
69:33:8c:b6:8f:4d:bf:9d:96:6f:2c:f4:c2:74:21:
e3:3f:bc:c8:49:6e:29:60:62:46:b6:fe:fe:48:d7:
48:c1:7a:da:1b:76:87:5f:71:78:99:d8:35:a6:cb:
3f:39:8f:bd:62:6b:1a:bb:66:5d:85:b2:97:bc:4c:
a7:68:47:ce:6b:2d:ea:9f:95:fd:dc:40:f6:b6:38:
a6:78:65:96:7c:6e:bb:83:9a:ad:2c:04:eb:f9:87:
87:ba:8a:b8:01:bb:70:15:5e:49:2c:17:c8:00:6a:
29:6c:d9:69:7f:6a:df:82:8f:9f:7c:61:7d:36:f4:
92:0f:0f:db:ec:af:86:e4:52:2f:fc:e5:43:bb:98:
cd:ac:8b:7c:e6:5c:36:d7:ad:23:ad:c0:73:b8:5a:
0c:7b:f7:10:97:69:e1:27:50:b1:40:ec:e0:00:c4:
3e:14:a3:a8:95:ab:7a:04:19:95:ee:72:a8:50:71:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:44:64:37:E8:BF:DB:B7:52:B1:03:F5:EB:81:1F:83:9F:9F:53
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:71:e7:85:48:e8:a9:5a:4e:de:46:79:ac:93:4f:93:07:e6:
97:1b:c1:ff:be:8b:8c:99:92:48:3a:41:1a:83:4d:e4:f8:06:
5a:9b:0c:24:60:7a:4a:07:ce:ce:0b:dd:24:b8:a1:c0:89:b5:
aa:57:8c:ca:e1:d4:4e:14:9a:c5:fa:1a:02:12:99:e3:c3:a4:
71:97:a3:a7:ff:02:f6:37:54:21:4e:e1:b2:92:fb:6c:d9:79:
4c:9a:ae:1f:44:a3:5a:bf:21:2b:39:61:71:ca:b0:83:eb:1f:
2e:a8:dc:14:64:60:b7:30:dc:94:19:b3:44:dd:3a:06:45:0f:
06:bf:b4:ed:3e:19:3e:15:34:53:0a:db:37:83:ea:07:ab:9d:
a1:cd:db:24:5a:ec:80:d1:5a:d9:fa:05:1a:76:20:b6:26:af:
ec:22:59:82:ee:b3:d5:2d:f5:31:01:22:00:b4:42:7c:ca:03:
4e:2f:5d:62:cc:6b:ce:03:af:80:55:eb:95:20:e5:0f:39:90:
95:87:fd:66:48:99:df:73:f0:c9:c0:a6:e9:ae:aa:45:70:68:
c8:fa:e3:15:d7:5e:f0:79:d5:67:ab:2a:63:10:b3:30:a5:44:
a6:62:11:38:27:4b:ea:8e:ce:05:cf:81:13:46:09:64:16:c4:
e8:2f:aa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:25:34 2025 by rpki-client