Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: aC3QhNuJd/KnPE1g9GtSBKrUMszSFu+MQ8rsKDOxlO8=
Subject key identifier: 1D:A9:59:0E:45:0F:E0:CD:7A:D1:D1:7F:0A:4F:89:95:11:FC:A6:ED
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 01984966F4C3CE5B2B1BB008399FC50CA279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:02:20 +0000
Manifest this update: Sun 27 Jul 2025 01:02:20 +0000
Manifest next update: Mon 28 Jul 2025 01:02:20 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: rSsuOIb6EFfJ82epYBo2wrt9UTbRl4lbfpv6JVpLjQE=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:f4:c3:ce:5b:2b:1b:b0:08:39:9f:c5:0c:a2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Jul 27 01:02:20 2025 GMT
Not After : Jul 28 01:02:20 2025 GMT
Subject: CN=1da9590e450fe0cd7ad1d17f0a4f899511fca6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:f6:a3:d4:79:ec:b4:78:c9:35:bd:7c:c5:
4a:e8:4d:1e:dd:13:d7:2c:c3:3d:8e:c7:88:d7:f1:
c3:05:81:ce:3d:d9:11:45:5a:fa:f7:f9:d2:20:f3:
14:b4:bf:55:2d:91:b4:0d:83:f2:5a:81:bc:07:98:
4b:64:bb:f9:5c:41:40:e7:15:2f:c8:42:9a:30:ec:
af:b9:d7:3b:42:34:6a:b3:39:b7:8e:2c:ab:86:46:
b4:8e:85:70:3c:83:65:2d:2d:18:b7:d9:c5:3a:97:
08:bc:e4:41:72:60:9e:bf:73:bc:38:96:65:00:4a:
85:20:80:d7:41:30:fc:f6:71:0b:9b:39:fd:f8:fd:
c5:d8:28:be:82:45:e7:40:dc:43:9b:bf:08:40:9e:
ac:6b:7e:67:5d:13:f2:e3:c4:6f:80:b3:d4:bc:cd:
c0:ed:b1:d4:84:0e:53:2e:e7:a4:e1:9d:6d:2d:2c:
9d:49:7e:62:f3:90:f6:3b:09:f7:9e:18:4c:c8:d3:
2e:0f:fb:61:aa:d6:dc:5e:5f:5d:94:40:1e:f9:8a:
5e:bc:e2:ce:e9:33:2b:e9:34:2e:f3:c6:20:ae:ad:
2d:b4:93:ef:5c:ed:03:71:a0:1e:22:7d:22:d7:f2:
64:96:01:1c:9a:23:ab:0f:75:eb:92:0d:63:1f:ff:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:59:0E:45:0F:E0:CD:7A:D1:D1:7F:0A:4F:89:95:11:FC:A6:ED
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b2:c0:6b:b5:c6:6c:a3:b9:40:ec:48:b3:ca:c8:cb:bb:2e:
3f:22:62:c3:a0:a6:5f:08:6a:d9:c2:c1:5c:17:e0:83:78:39:
5b:0a:c3:65:2c:1c:dc:54:de:4f:d4:bb:0f:6c:8e:f4:2c:48:
88:4e:10:e8:24:a3:ed:a9:f4:dc:e4:02:e3:a3:81:61:66:56:
5e:b0:aa:fe:ee:bc:e4:ce:4a:b2:ef:8d:e6:d6:75:65:19:5e:
43:f7:b6:30:6c:06:03:3a:b9:0e:3b:21:e0:70:2a:42:c4:8d:
3c:de:3a:6c:a9:93:07:fe:28:c3:72:1b:42:23:4f:3e:f3:64:
39:7a:58:94:4b:99:6d:de:cf:be:e2:c7:c0:89:5f:74:5c:06:
b3:04:07:6c:81:7e:4e:f4:c2:92:27:4a:77:bd:02:1e:7c:39:
5a:28:ed:88:87:bd:27:62:d1:6b:9b:64:6c:ed:95:b6:e7:e9:
d4:fd:76:4e:3b:3a:3c:0e:29:ca:14:b3:a6:10:8e:86:07:e6:
90:58:79:25:4e:e1:22:87:ca:66:95:f5:1a:d0:bc:35:7f:d1:
ae:03:95:28:58:c8:6b:a3:e6:d9:e1:15:a9:ff:9d:21:53:fd:
f2:93:48:eb:67:7d:b9:8e:c3:a0:15:19:39:73:96:90:50:04:
b8:0f:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:00 2025 by rpki-client