Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: jpzVtOeoWIq2D+UFE0ibjks5XmNfYiQDNeMiVo+hRTY=
Subject key identifier: 9D:AD:4D:4D:3E:42:45:00:F1:09:47:31:44:A5:08:2F:BC:F2:01:48
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 0198530EBF57C2B3EA1C0F58002079E74BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 22:02:12 +0000
Manifest this update: Mon 28 Jul 2025 22:02:12 +0000
Manifest next update: Tue 29 Jul 2025 22:02:12 +0000
Files and hashes: 1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: 9ilnM8FlQXDI4VO/KVPrArioSoMYhl5M+aeRtMiK0Qs=)
2: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (hash: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:bf:57:c2:b3:ea:1c:0f:58:00:20:79:e7:4b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Jul 28 22:02:12 2025 GMT
Not After : Jul 29 22:02:12 2025 GMT
Subject: CN=9dad4d4d3e424500f109473144a5082fbcf20148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:f1:9e:cf:1f:84:8f:c9:34:5a:fa:cd:72:
2e:83:a1:75:e3:07:5d:e2:81:7b:4b:06:ae:17:74:
b3:99:98:8c:83:cf:f9:4d:06:d4:c7:52:30:2c:81:
d4:33:15:0c:e5:ff:72:02:57:89:eb:91:20:a0:c8:
5e:23:6b:45:2a:95:f3:d5:85:d0:bf:f3:83:06:f3:
a3:2a:dc:26:be:8f:8f:06:62:6b:93:2c:b5:8a:77:
a0:43:21:c1:12:0d:a3:67:ab:d0:14:fc:4f:d2:33:
53:9f:6d:13:76:99:8a:bb:ac:c9:77:8c:32:af:ac:
0c:da:c3:7b:eb:2c:ee:72:f4:e9:a4:50:25:d8:74:
10:6a:25:71:b4:d1:e9:6b:2a:d9:47:3d:6d:e9:0a:
73:2d:8c:f4:59:86:ea:1a:c9:65:a1:c0:0c:29:ea:
4e:60:db:c6:55:89:a6:b5:3f:7f:09:8b:94:f6:8c:
ec:8d:37:8c:6c:81:46:75:9d:a0:d9:34:be:f1:64:
3e:dc:a9:29:2d:83:21:c4:a0:3c:25:42:25:73:a7:
8e:55:fb:ca:2a:de:97:aa:ae:3a:2c:62:99:8b:3d:
58:a9:47:a9:a1:29:2b:56:25:f1:56:7a:4e:96:16:
60:30:33:ea:7a:61:56:26:f7:33:dc:c8:64:b8:08:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:4D:4D:3E:42:45:00:F1:09:47:31:44:A5:08:2F:BC:F2:01:48
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:32:68:7d:02:97:fc:7e:d4:3f:0a:00:04:b5:d9:11:b8:71:
a0:b1:92:0a:19:18:b8:3d:d4:86:9a:64:03:c9:6d:f2:8a:69:
50:b6:70:55:f2:42:be:a5:97:ba:cc:f3:2b:dc:3d:18:ed:df:
a2:15:72:01:84:e6:31:4c:42:d6:ba:56:07:b6:75:e1:90:80:
84:16:24:22:8f:de:37:4b:b6:4d:f8:36:be:ce:17:57:51:ca:
9a:d6:1c:d3:af:2e:23:29:e6:2e:58:0c:a5:3f:60:ce:f4:6f:
b0:9f:d2:68:db:ee:d9:2b:77:28:a9:fa:73:09:c8:d7:82:93:
11:c5:fa:be:dc:fc:7d:7d:e7:c5:5f:bb:fe:c2:7e:f4:8d:c9:
82:a1:13:c8:57:11:e7:c9:62:7d:55:f9:70:d7:da:e4:90:b0:
64:45:7f:dd:1c:ba:6b:85:fe:68:49:fa:11:eb:4b:b8:d3:8b:
53:fc:92:d5:8e:9e:66:91:83:65:83:fa:63:4e:a3:a1:69:05:
34:84:d0:2a:8c:1e:00:19:d1:86:01:00:57:31:f9:06:99:67:
cb:16:fe:58:f5:ad:ba:0c:ff:6d:45:24:84:c3:91:04:ae:55:
23:50:29:d7:8d:62:8c:d9:ad:05:9f:e5:cc:dd:df:98:89:bb:
9a:2a:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:20 2025 by rpki-client