Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: K3yaWIOCVSu8hKO5URgz7euVhrtDBuc+fa+rhdsc8Xw=
Subject key identifier: D1:FF:D5:D4:45:13:8B:7C:C4:77:35:13:C8:7C:9B:A2:80:E0:1B:65
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 019849667BE37BC3DB4BD001A5C75E00AF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0C09
Signing time: Sun 27 Jul 2025 01:01:49 +0000
Manifest this update: Sun 27 Jul 2025 01:01:49 +0000
Manifest next update: Mon 28 Jul 2025 01:01:49 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: 32VgE+CCP1NVwMfroszwq2s81SSEefJs5Urk4VAIB80=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:7b:e3:7b:c3:db:4b:d0:01:a5:c7:5e:00:af:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Jul 27 01:01:49 2025 GMT
Not After : Jul 28 01:01:49 2025 GMT
Subject: CN=d1ffd5d445138b7cc4773513c87c9ba280e01b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:f1:54:6b:23:25:9f:4c:70:29:99:e6:e9:
b6:3a:b2:2c:00:a4:cb:76:1b:e8:3d:0f:4a:50:a6:
47:8b:9e:74:33:eb:bb:48:68:5f:3d:2b:78:c6:61:
6e:2e:0c:dc:2d:de:6b:38:95:18:e2:6b:e4:b6:4b:
c9:94:62:b0:b6:62:b3:5c:15:c4:c8:71:24:ef:ed:
1d:ee:fd:1d:e8:ff:9b:18:91:c7:02:83:f9:14:1d:
ab:0b:b8:ec:99:bf:35:c8:4d:09:d8:e3:24:68:3f:
93:f1:d1:00:89:18:f0:a1:81:ef:45:d3:8b:3f:78:
01:c1:80:ac:98:f8:b0:db:56:52:03:df:61:28:b3:
ad:5c:24:e8:1f:e0:bf:d9:9c:d9:d8:e8:4a:90:89:
29:87:cf:77:f9:57:81:66:ae:b7:0c:50:9f:1b:7b:
a8:db:32:00:ad:37:cb:e6:9d:61:0a:1c:af:93:46:
a0:7f:45:81:76:a1:f1:41:eb:63:17:85:67:8f:24:
db:b0:22:33:32:a2:25:89:51:34:8d:34:7c:18:25:
f5:04:22:d5:e3:21:c6:78:02:46:2b:e7:93:c0:2d:
43:df:63:d4:60:c9:4f:06:51:54:b5:07:79:00:13:
0e:d0:82:29:ad:b3:55:7d:f4:d8:cc:47:f8:20:69:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:D5:D4:45:13:8B:7C:C4:77:35:13:C8:7C:9B:A2:80:E0:1B:65
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0f:3d:a5:e5:ca:19:a5:f5:9d:a4:f7:d4:35:41:bd:b4:62:
b3:a9:7d:28:f1:62:d2:aa:eb:bc:36:70:44:d8:96:5c:3c:28:
67:b5:13:64:88:47:a5:df:98:2b:a1:9c:03:8a:b3:f2:8a:93:
51:2e:af:bd:c5:ac:c9:52:26:34:1f:72:87:5c:7c:bb:12:0e:
e0:8f:8c:fd:02:c0:19:ff:13:f3:32:1c:f3:56:d6:93:45:b7:
72:91:14:a2:ec:26:b8:11:cf:bf:cb:b6:c1:1d:ce:ac:fe:02:
b9:af:e8:f5:c5:3b:a3:29:38:db:c5:e7:70:15:e6:9c:06:6c:
72:bb:d5:78:c2:59:d5:b8:4d:6a:c5:d6:81:ea:9a:aa:e5:3e:
21:99:c8:72:c6:87:37:19:46:63:35:50:12:41:7a:8b:86:53:
b8:ff:74:2f:4a:3d:3f:56:ef:13:43:17:a1:1f:70:63:a5:f4:
99:bf:64:e5:a5:df:1e:74:85:08:2e:89:f4:57:88:6b:69:cd:
17:56:a7:c2:c2:5d:b4:ab:5e:63:93:22:50:ee:e0:b7:79:e6:
8c:31:79:73:7e:61:77:33:04:ec:8a:18:d6:95:cb:30:08:98:
2d:47:d1:a9:0d:b4:21:03:88:e9:cd:ae:8b:4e:93:15:a6:4b:
e4:35:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:10 2025 by rpki-client