Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: 8Rxcr9DeDPQ7RzeP/c9yhG5YlE7FKgww8kNhStYxQ5c=
Subject key identifier: 4D:2D:7E:DA:41:14:56:70:B7:E3:C1:48:D1:87:24:89:2C:37:07:43
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 019848F786A55EC3071B5682D1181ACA5565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 0DB7
Signing time: Sat 26 Jul 2025 23:00:38 +0000
Manifest this update: Sat 26 Jul 2025 23:00:38 +0000
Manifest next update: Sun 27 Jul 2025 23:00:38 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: qP2dJQH12nGh6yudMwTQ5QCbjU/eH+f09OPsn57orCM=)
2: Z9H2rikLSuyuU-ikn9teDCmjdUc.roa (hash: cRtnYLPeRJbchnmn6bYlPaowZvCX5uRJgotf5z/cank=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:86:a5:5e:c3:07:1b:56:82:d1:18:1a:ca:55:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Jul 26 23:00:38 2025 GMT
Not After : Jul 27 23:00:38 2025 GMT
Subject: CN=4d2d7eda41145670b7e3c148d18724892c370743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a2:e6:42:25:b3:c6:e9:7b:58:6b:ac:f7:5e:
e6:28:8d:56:29:2e:18:d0:5a:f4:58:26:89:1a:30:
d7:96:c1:18:28:01:5d:98:a6:1f:a7:b2:be:bb:e7:
76:27:81:19:6a:92:f3:7c:16:e0:9c:23:42:69:14:
4c:c7:09:e2:64:ea:ca:8f:7b:6e:e8:97:d4:c2:e0:
27:2f:4b:8f:ce:46:25:67:b2:8e:d0:39:cd:fa:14:
76:03:ab:c3:39:42:cf:14:95:18:90:2d:3a:69:91:
58:db:4f:78:50:dc:37:3e:03:d5:8a:b8:63:91:21:
0c:99:94:5e:b9:ef:cc:56:e7:90:48:fe:77:67:bc:
b4:4b:dc:d3:58:ce:c5:01:f5:e3:87:06:fc:71:cc:
d5:b0:3e:88:9e:8b:62:ce:1d:57:ab:30:45:17:20:
c9:32:b3:ab:0f:4d:59:88:58:10:1b:16:6e:1f:c2:
74:34:be:e5:0f:02:f7:d7:d8:a7:d7:65:65:c4:47:
1d:99:c4:37:39:ea:89:a9:82:e4:f8:58:31:f5:56:
2f:15:ac:7b:b2:9b:85:85:ec:b6:8d:95:71:95:98:
1b:64:4c:aa:57:1b:fe:4b:b2:f8:19:5f:6f:68:61:
72:fe:81:67:23:8f:40:d8:53:1e:c7:04:7d:44:2c:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:7E:DA:41:14:56:70:B7:E3:C1:48:D1:87:24:89:2C:37:07:43
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:95:1f:02:6c:93:6a:e6:48:95:e4:e9:f7:6a:21:43:60:2b:
b8:d4:9d:c1:e7:4c:31:30:45:2e:aa:2d:4f:2e:cd:08:36:af:
d3:55:9d:92:25:5b:70:0c:b7:49:63:85:ba:2e:de:7b:ea:1a:
b4:83:e9:10:8c:89:92:51:a1:19:2a:cf:a2:16:d2:57:13:c1:
55:4b:8b:05:2c:50:bc:b4:4b:1f:65:aa:a1:ff:9f:ff:6d:40:
ed:96:de:df:f5:12:55:45:ad:8f:58:07:42:ac:85:7d:dd:47:
c7:1c:a0:7d:d6:b1:2a:4c:70:eb:e8:d4:86:c5:08:e9:90:be:
13:53:6f:85:0e:1a:cc:9c:b3:24:a1:89:4b:0f:a7:cf:27:29:
d9:0e:90:22:76:0e:3a:47:37:f0:02:5d:42:98:17:8d:38:47:
2b:54:c3:24:33:08:35:de:c8:44:93:5e:a5:22:6c:30:65:7e:
c9:cb:5c:50:8a:97:57:17:8f:9a:2a:c0:c0:55:1e:98:d9:66:
77:3e:e6:20:fa:f9:fc:9b:ca:10:c7:16:6d:5a:0f:34:58:bf:
4e:0e:13:f1:c4:4c:73:f4:e2:7b:eb:7e:4d:e8:98:63:b2:06:
04:66:e0:67:a6:26:8a:ef:68:19:fe:41:23:f6:4d:4e:25:8c:
5f:ae:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:55 2025 by rpki-client