Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File: HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier: sCwK68RFl4HlLrRdqid3zQxtwYIUb3rsbGrF3ADGaYA=
Subject key identifier: 40:86:F3:0A:81:C9:5C:16:02:8D:D1:9B:44:A8:4F:9D:14:1A:D4:21
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 01984A410DC19D93EF07A1C139728211BEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:34 +0000
Manifest this update: Sun 27 Jul 2025 05:00:34 +0000
Manifest next update: Mon 28 Jul 2025 05:00:34 +0000
Files and hashes: 1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: oE+67FjT+bB+85jZvgE2E1T6XXffg04cBW1wSP+fRvE=)
3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:0d:c1:9d:93:ef:07:a1:c1:39:72:82:11:be:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Jul 27 05:00:34 2025 GMT
Not After : Jul 28 05:00:34 2025 GMT
Subject: CN=4086f30a81c95c16028dd19b44a84f9d141ad421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:b7:08:a3:78:e3:1d:eb:16:7b:68:f1:39:
00:6c:ee:69:ef:d7:ca:0a:a5:13:3d:71:1c:ae:54:
fe:97:92:5d:20:9e:82:fe:b9:97:e1:ce:c1:26:a7:
08:c6:cd:de:97:ec:7f:c0:21:1f:96:a1:e3:be:36:
87:5f:5e:2a:79:27:f3:06:c9:5f:97:79:a9:73:82:
a3:3b:93:a3:9f:87:70:5e:87:15:bc:36:15:12:37:
f0:90:06:73:8b:80:ee:91:81:35:38:87:a8:7b:0d:
4b:29:6b:93:ad:18:2e:ef:72:48:f1:19:8b:b4:eb:
cd:b3:4f:8b:3e:4c:c0:60:52:13:57:38:fb:f4:bd:
8d:3f:64:fe:7c:b3:c1:c9:c0:94:84:fb:2f:30:1d:
e3:21:ab:e5:2b:4e:90:47:01:5e:1b:14:ee:3d:06:
db:de:79:ab:75:de:70:d2:09:88:e3:1f:bc:32:2c:
eb:2e:c9:d6:36:f7:3a:02:9b:c2:9a:78:7e:83:84:
4c:16:46:f2:97:8f:d5:14:90:f2:88:e8:d4:f4:19:
77:09:db:31:e3:e3:fa:93:6e:4c:d4:80:39:30:56:
24:b3:8a:f2:3e:39:f6:d9:c6:d3:0d:ad:4c:62:1a:
4e:5e:50:75:5f:b4:13:5f:15:92:aa:c1:0e:3e:46:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:F3:0A:81:C9:5C:16:02:8D:D1:9B:44:A8:4F:9D:14:1A:D4:21
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:dd:fd:9d:ab:db:30:00:85:34:ee:f2:a9:b6:25:3f:72:
77:4f:66:10:b9:1e:35:55:d5:5d:2f:31:55:92:07:d2:59:3d:
b6:d2:17:60:e2:18:ef:04:d2:7f:cd:67:48:8a:cb:e0:89:5c:
28:31:0e:59:7a:54:b1:87:93:14:d9:7c:b7:2e:aa:fd:1e:d9:
31:69:ae:f8:45:a8:53:6b:ca:c7:7d:46:5b:9f:c9:01:b9:1f:
12:b2:f5:5d:ce:cb:ec:7f:1e:f0:a0:a5:ae:26:bd:d0:63:8c:
24:38:88:22:c7:e0:71:59:a1:00:38:bd:8d:90:c8:5c:88:c5:
2d:2c:9a:9a:c3:2b:ea:fe:f9:61:10:8f:cc:24:9f:4b:ac:ee:
b7:e4:fe:62:3e:2e:17:bf:61:ac:75:68:54:27:46:a7:aa:74:
fe:8f:b1:54:9b:82:ce:53:68:7c:ca:95:99:aa:94:99:52:9a:
f6:8d:c5:2e:69:46:d1:db:a2:0e:aa:72:22:45:26:d7:04:0f:
7a:e8:41:f2:6f:05:ba:f6:8a:ac:f0:56:4b:6b:2f:ca:2d:f8:
77:b7:aa:c5:fd:71:6d:e7:68:5f:95:f5:00:07:82:f1:96:5d:
db:1b:5d:84:09:c5:f2:7a:72:c8:c8:84:37:a8:41:41:1d:00:
de:44:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:35 2025 by rpki-client