Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
File: hlEiwOVi5AeXaCPZThnip5T4y2I.mft (raw, json)
Hash identifier: kVM6AA8CR0wd1e1piRB1Ovxt0GfV9qCF9cIqGVUfXU0=
Subject key identifier: 22:C8:13:8E:C8:4B:E6:54:6B:F8:C7:9B:FC:B1:7C:3F:F1:3A:27:86
Authority key identifier: 86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
Certificate issuer: /CN=865122c0e562e407976823d94e19e2a794f8cb62
Certificate serial: 019848F74D06C8F2842917CF2DD47AA35682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
Manifest number: 1590
Signing time: Sat 26 Jul 2025 23:00:23 +0000
Manifest this update: Sat 26 Jul 2025 23:00:23 +0000
Manifest next update: Sun 27 Jul 2025 23:00:23 +0000
Files and hashes: 1: hlEiwOVi5AeXaCPZThnip5T4y2I.crl (hash: ohzZfCNKlftcULgq7kZWg8fKm60vH9sUN4iND47lm2U=)
2: w-uN_1VCR8_SOj5bY-QHNqktijQ.roa (hash: 0MkMfXtYvuQQQ2rI12rE9KqS+DI9qKcacxegwXpKbvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:4d:06:c8:f2:84:29:17:cf:2d:d4:7a:a3:56:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865122c0e562e407976823d94e19e2a794f8cb62
Validity
Not Before: Jul 26 23:00:23 2025 GMT
Not After : Jul 27 23:00:23 2025 GMT
Subject: CN=22c8138ec84be6546bf8c79bfcb17c3ff13a2786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:a9:f2:ff:f5:bf:d6:51:48:fc:d8:a6:d9:
fa:96:bb:0a:2f:66:90:22:ba:61:7a:91:30:66:27:
a7:15:49:21:d5:fc:29:2a:5b:41:ba:8f:d5:fe:bc:
a0:b7:1a:59:ab:31:1d:7c:42:ab:61:cd:0c:07:f3:
35:9e:68:c9:49:93:ee:cd:59:8d:01:88:ac:03:5d:
5e:dc:9c:fc:33:91:43:61:b4:0b:16:5e:0d:86:11:
52:0f:93:fe:bd:5a:5f:15:99:17:9f:85:da:ec:22:
f4:1b:ac:89:02:b5:f6:72:fe:f1:6d:af:8d:8f:c4:
2e:6d:1a:24:22:80:8d:2d:aa:76:3a:cd:09:b9:00:
cd:eb:de:bb:22:9d:8b:4d:93:d7:6c:06:a7:dd:be:
a9:e0:a8:bf:e7:6d:01:30:bd:07:ee:6f:f8:21:1a:
db:71:c2:1f:0a:43:da:88:bd:96:48:38:05:5b:77:
e2:c8:b7:22:2d:ee:80:08:11:34:f4:0e:98:e2:80:
ab:c8:86:4a:28:ba:f2:d3:00:b5:e8:3b:42:c7:38:
fb:ae:44:b2:1a:cd:66:c5:f5:15:65:b7:fc:95:e3:
90:a6:4d:20:42:09:7f:28:ed:e0:95:2f:c6:0f:21:
45:43:b2:47:8b:98:11:27:ea:02:bc:a8:21:e6:d5:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:13:8E:C8:4B:E6:54:6B:F8:C7:9B:FC:B1:7C:3F:F1:3A:27:86
X509v3 Authority Key Identifier:
keyid:86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:54:17:57:77:b1:53:57:38:36:64:0b:1a:0e:b9:89:b9:
8b:90:d2:38:57:bf:71:1c:f3:2d:c2:cf:4d:58:3d:87:4a:41:
70:88:ff:cd:ce:3f:76:85:f1:ab:ba:85:06:bd:e1:a8:51:c5:
68:c1:b9:7a:bf:73:4f:0b:99:e0:a6:1f:df:7b:7e:03:f8:29:
24:53:2f:1a:99:96:94:71:61:56:b0:6b:cc:96:60:11:0b:5e:
2e:a5:15:50:2b:ee:89:46:c9:31:91:5d:34:4b:a1:b2:5b:da:
20:04:3e:84:c6:f2:0a:82:3b:3a:07:56:5d:b2:98:97:30:9c:
2f:4c:10:03:5d:e6:a5:02:09:49:79:ab:1c:3a:4d:5c:5f:c3:
8e:11:20:aa:f3:76:06:07:58:44:04:5f:f8:22:a0:a8:0d:f4:
7c:87:3b:cc:9c:b8:05:70:77:7b:f6:d0:ef:d9:2a:f5:e4:a1:
43:81:e5:1b:b5:f7:96:7f:b8:c2:e1:ac:bd:a2:2b:36:b8:fb:
91:b9:0e:14:44:3b:6a:e8:f7:72:e7:cb:a1:51:b8:c9:df:ca:
50:4c:49:a7:51:a0:80:be:77:55:9f:c2:52:7e:d2:c8:ef:1b:
e2:52:31:f2:41:8a:d4:52:e2:f7:f8:f6:61:d2:3a:f4:38:69:
8c:a7:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:38 2025 by rpki-client