Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: j7PWZwhHwbVmGLb/yxaiFKfZc0KtCjAAYJJuz1N/IYU=
Subject key identifier: FC:CF:D2:BE:FF:4D:B3:7B:3F:EF:5C:D2:38:96:63:25:57:A4:24:61
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0198466470AEECFAA3EAC6962FD6BE204373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 041F
Signing time: Sat 26 Jul 2025 11:00:44 +0000
Manifest this update: Sat 26 Jul 2025 11:00:44 +0000
Manifest next update: Sun 27 Jul 2025 11:00:44 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: vZM6JaWnLqpWI0zrneaOVmXqhcICoGeUlOX0R9GeHio=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:70:ae:ec:fa:a3:ea:c6:96:2f:d6:be:20:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Jul 26 11:00:44 2025 GMT
Not After : Jul 27 11:00:44 2025 GMT
Subject: CN=fccfd2beff4db37b3fef5cd23896632557a42461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:fa:df:70:92:eb:22:62:9e:8d:c0:85:bc:
68:54:5f:55:fa:14:3f:0e:fb:63:7c:09:ae:32:08:
fa:dd:ca:fc:8a:68:5e:22:a8:ca:ff:e3:d7:38:55:
c2:1c:ec:a2:8f:89:aa:6c:19:5b:07:f4:4b:ad:8f:
5d:de:ed:88:47:4a:bb:1d:0c:e1:84:30:dd:23:f0:
6d:c2:9d:ff:de:4f:b1:5d:3f:12:33:4c:6d:5c:73:
6c:fb:88:c4:a8:98:42:f5:38:f6:3e:d2:ab:87:ac:
7d:b0:a8:9e:f6:e8:47:7f:04:dd:a3:24:96:c1:c7:
6b:9a:6a:f7:a8:87:8a:b2:43:26:3a:21:85:a1:f1:
42:b3:3e:2b:2e:e4:d3:5a:02:90:2b:a1:00:a2:b4:
c9:e6:75:60:a6:f2:5b:79:9c:31:52:d9:92:40:95:
ed:57:fa:86:f1:ce:0b:f4:9e:67:fa:cd:80:ca:6a:
1e:38:a0:5a:f4:db:15:48:44:4c:b0:97:9e:f7:5a:
f1:d4:12:e5:ee:50:6d:36:f8:a8:91:4a:a8:76:3f:
4b:da:09:7b:8c:3f:5d:e8:fe:99:26:d3:66:34:c0:
e8:3e:47:a3:ee:96:2c:54:c5:a1:a9:8c:96:91:33:
d8:39:e3:a7:a8:e4:a2:63:d5:0d:85:01:5a:81:f9:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:D2:BE:FF:4D:B3:7B:3F:EF:5C:D2:38:96:63:25:57:A4:24:61
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:1f:23:e9:a1:03:66:66:9d:df:df:ff:c2:f4:c7:51:61:
14:4a:43:7e:b2:41:00:a2:61:0c:d5:dc:d5:e3:e6:c7:a9:50:
f1:74:cb:d3:2e:25:9f:ea:d9:8a:4e:48:c9:3d:03:3e:88:98:
d2:a0:36:be:90:17:a4:1d:65:dd:90:e5:4c:35:87:a0:cd:f1:
e1:52:a9:70:db:9a:bf:11:00:2b:3a:bf:4c:9e:4e:45:c0:8e:
9e:bc:64:ee:4f:38:24:a9:7a:a0:a5:ff:62:87:e8:d8:d8:e4:
61:8f:97:07:d0:59:61:8a:b1:bf:8d:d8:2f:27:e8:d2:16:0a:
21:b3:f9:6e:21:30:44:77:52:eb:45:71:ba:33:13:9a:a2:46:
f3:84:c3:f2:19:88:2a:02:82:55:c3:d3:ec:36:9e:8e:f8:a1:
40:8e:36:4c:4e:c6:72:9e:70:a9:f2:73:80:7d:06:1f:cb:65:
e3:b7:4f:92:1e:cd:6c:4d:86:ef:4d:e2:7c:ce:02:34:48:0d:
0b:44:aa:8c:1a:fb:68:53:80:b3:6b:ba:1a:f9:e9:56:7e:f4:
23:a6:27:7b:28:42:ee:15:07:a1:cb:98:f0:c7:e1:a8:6a:cd:
45:c7:27:2e:0d:b3:be:06:18:fd:00:95:2b:a7:4c:4e:20:4c:
4e:b9:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:43:44 2025 by rpki-client