Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: 0Cu8uWHBF/xuk9g6mmzGlETexaXLbyYH6NBt9oBRbYc=
Subject key identifier: 83:7D:C6:E1:5B:7A:A0:1C:05:59:23:33:52:E1:F5:E7:5A:93:BD:4E
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 019864A5FF14FB894963A683A742276F2377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 09D7
Signing time: Fri 01 Aug 2025 08:00:56 +0000
Manifest this update: Fri 01 Aug 2025 08:00:56 +0000
Manifest next update: Sat 02 Aug 2025 08:00:56 +0000
Files and hashes: 1: Ej_nms6zQmPoJeaI79U3Nd1orY8.roa (hash: +LgVGC9y1iGCqg/hmpi1yux7QukhrPPP6tmv7bAqvWw=)
2: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: JW+h/W10JDr5ht66aCqdWe2mqPCQYelEL9r+p3UzAdI=)
3: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:a5:ff:14:fb:89:49:63:a6:83:a7:42:27:6f:23:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Aug 1 08:00:56 2025 GMT
Not After : Aug 2 08:00:56 2025 GMT
Subject: CN=837dc6e15b7aa01c0559233352e1f5e75a93bd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:7a:b0:f1:de:ff:4b:08:a9:33:ee:39:e2:
17:ac:9d:e3:0c:73:34:2b:5c:c6:47:57:57:99:7f:
50:88:a6:69:98:71:7b:95:57:83:a7:d7:fa:72:2b:
31:e8:19:19:b2:a6:f0:d3:7d:0e:b9:9d:86:dc:b0:
b6:9b:2c:eb:0a:07:77:27:c7:9d:9d:77:e4:2e:25:
65:18:05:eb:3a:3a:00:43:a2:e3:fe:bb:3c:72:98:
da:c2:3f:ef:32:dd:08:53:81:dc:73:2a:64:5f:de:
87:21:9e:dc:ce:bf:ee:57:8c:46:5f:c6:86:6b:21:
be:2b:0d:45:72:85:b9:76:68:3b:39:48:e7:45:db:
a1:ee:f9:ad:ab:1a:87:4f:55:07:bc:b7:d7:dc:f1:
9a:c2:19:8a:e8:a8:42:54:74:14:f2:96:ce:6e:fa:
70:17:b4:34:4c:31:df:b0:23:e1:2e:d6:5c:7f:fd:
8f:3e:3f:84:57:05:fa:4e:f4:dd:7d:5b:61:f2:16:
ea:d0:15:eb:c3:9e:a1:55:aa:57:5c:dc:f8:9e:fc:
74:23:6f:24:c8:e3:d8:b4:f1:d0:ae:d4:3c:19:13:
8d:6b:f2:89:f2:df:97:63:f1:8b:1f:0f:9e:f7:4c:
4d:fd:7a:15:70:ca:b0:c3:ef:2a:d0:4f:89:59:2c:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:C6:E1:5B:7A:A0:1C:05:59:23:33:52:E1:F5:E7:5A:93:BD:4E
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:45:8d:72:8c:d5:4d:e9:04:88:e3:88:a7:39:20:87:91:44:
3f:af:52:48:b2:5f:28:b6:d8:ea:86:ac:87:6d:8b:b8:ab:e6:
86:e1:e9:14:82:76:e0:9d:ae:dd:5c:e6:6d:50:dd:42:f8:69:
a7:80:c4:c1:a6:ab:08:e6:8f:76:03:f4:b9:12:9b:99:d4:be:
4e:10:ee:83:70:e9:e7:06:f7:6c:2c:f0:c0:cc:23:35:e8:99:
de:fd:a3:f3:04:51:91:0e:68:95:ab:66:d6:cd:af:40:ff:ed:
f0:b9:ca:2f:2e:2a:d1:02:6d:c2:fd:d8:b9:23:6c:db:9e:7e:
c9:8f:2f:1b:25:d7:b3:74:ef:4b:2d:fa:f9:8e:2a:37:52:88:
ab:74:75:13:64:a3:3c:7e:82:4d:21:d6:bf:5f:90:44:26:34:
e6:7a:e0:93:e7:d1:cf:0f:3d:3f:b7:04:09:0f:cb:a4:42:32:
94:38:bb:dd:0d:c2:bc:a9:f7:06:59:84:e7:70:a6:c7:8b:fd:
6c:bf:7c:45:da:3f:38:06:07:b7:23:27:49:30:ae:43:53:57:
51:86:c6:a0:0c:9d:f7:6b:41:c1:01:b9:68:fe:8e:5d:9b:04:
4d:ee:f9:2f:ba:14:36:1f:19:d5:df:c9:3f:a9:55:27:b2:d5:
37:98:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:52 2025 by rpki-client