Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: y6Iw3YSdFsni9fR/BZNJfFWRqZdutzYAJTor/96dkSQ=
Subject key identifier: 6B:78:9F:A7:E8:A1:D5:D4:49:FA:A1:D3:8A:13:A3:E3:D9:C4:33:56
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 01984C9D74E2A36AD0A7000646A451E9913B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 121D
Signing time: Sun 27 Jul 2025 16:00:43 +0000
Manifest this update: Sun 27 Jul 2025 16:00:43 +0000
Manifest next update: Mon 28 Jul 2025 16:00:43 +0000
Files and hashes: 1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: h8xtVtQHSOR3iB7wG/rqpb+aX8q3sKiOL04drBahoaA=)
2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:74:e2:a3:6a:d0:a7:00:06:46:a4:51:e9:91:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Jul 27 16:00:43 2025 GMT
Not After : Jul 28 16:00:43 2025 GMT
Subject: CN=6b789fa7e8a1d5d449faa1d38a13a3e3d9c43356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:18:46:85:b1:ad:48:27:ff:a5:73:bc:d6:
05:85:1a:d8:e0:e1:6d:8d:83:a8:7a:75:8e:26:f1:
98:fd:2e:11:c0:1b:31:2d:31:c5:fa:77:a5:e0:7d:
a6:31:c6:1f:cc:0c:a5:3b:44:eb:1f:2b:42:28:4f:
b0:9a:64:8e:f9:68:38:70:31:92:51:0c:62:d4:4f:
f3:dd:e6:b3:79:23:3f:47:b3:b0:9e:36:9c:50:9b:
c4:e0:9a:e2:37:77:d2:94:71:44:b7:2a:5c:b2:4b:
e0:27:aa:62:54:1b:79:09:e0:b6:d9:67:3f:e9:19:
86:5c:3d:10:c5:d3:fd:65:c9:35:e5:00:44:31:c5:
d8:8f:b1:d6:1f:62:1b:97:d6:6e:26:dd:16:ba:cc:
16:85:27:c8:b3:f8:4d:8c:04:4f:8a:1a:4d:0c:3a:
c0:fe:4f:09:23:ba:1d:c4:71:c8:79:5b:5f:20:dc:
94:30:18:ac:8f:eb:90:67:69:7c:6f:6f:be:e2:70:
eb:16:bc:c8:52:28:5a:53:0c:b4:26:b5:7c:2e:b0:
6c:a7:1d:71:92:00:f2:a9:86:81:62:79:fd:dc:74:
a9:bf:49:44:48:49:2c:2e:32:fb:aa:c4:c7:0c:8f:
48:af:6a:3b:84:64:46:48:b4:20:ee:37:f1:8b:68:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:78:9F:A7:E8:A1:D5:D4:49:FA:A1:D3:8A:13:A3:E3:D9:C4:33:56
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:04:70:99:c2:f2:66:b9:30:cd:7c:fa:36:c2:29:be:22:2b:
ba:3e:c4:b4:6d:94:8e:5c:e4:f0:b0:36:cf:1d:c4:d3:d4:2c:
78:26:bc:f5:83:11:79:53:45:4b:6d:f3:c7:cb:5b:98:8c:41:
28:98:5b:64:e9:15:3d:92:ca:ee:5e:30:09:31:a6:c1:74:ab:
78:33:20:33:0a:3c:d2:49:9b:93:32:8f:11:81:2f:45:bb:66:
a2:02:6e:46:78:75:95:3e:8c:cb:13:5a:99:cd:7f:fd:21:fa:
c4:79:b4:10:cf:b4:14:ea:79:da:05:89:00:50:a8:d7:10:b6:
a5:56:ba:df:9d:ac:4a:3b:12:f8:e5:06:09:38:8f:1d:71:64:
12:6c:28:7c:44:32:fb:0a:81:cb:75:2e:57:2d:83:2d:a8:88:
e8:0e:7b:48:93:06:dd:69:5d:4d:26:f8:0a:3f:a1:2b:5f:76:
21:28:cf:41:05:e1:40:ee:20:66:46:f0:55:91:90:3f:38:9b:
58:70:08:e8:f6:55:77:35:44:21:5a:4c:03:91:99:4f:83:f3:
6a:88:c9:9c:57:b7:97:76:16:9e:50:aa:8b:70:3f:cf:8a:13:
42:48:a3:82:8e:0d:63:05:4e:da:d4:b8:30:57:6e:e3:4e:b4:
db:1c:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:39:35 2025 by rpki-client