Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: 8/HnVE5cJZoCbCxnbCUCAVc/Wq0jVqMbIUI74BXwtcs=
Subject key identifier: 5E:98:A0:94:A2:A1:80:6A:9A:C5:BA:28:A7:C2:4B:22:7C:67:3C:34
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 01984A77F603EC6371DA46B974F6F2CE7A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 06:00:32 +0000
Manifest this update: Sun 27 Jul 2025 06:00:32 +0000
Manifest next update: Mon 28 Jul 2025 06:00:32 +0000
Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=)
2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: ki1LBKfy+eVFOOFRulyUEz6UwpXQTyvRe/E9F26KOr0=)
3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f6:03:ec:63:71:da:46:b9:74:f6:f2:ce:7a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jul 27 06:00:32 2025 GMT
Not After : Jul 28 06:00:32 2025 GMT
Subject: CN=5e98a094a2a1806a9ac5ba28a7c24b227c673c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:b0:ba:f6:97:bf:9e:73:b2:f4:ac:24:91:
95:b6:68:15:e5:b3:b5:9c:6c:87:66:7d:a9:26:4f:
ba:30:e3:33:6f:78:88:91:a9:f7:b5:33:39:75:1e:
08:6f:8f:24:5d:20:9c:cc:63:ff:43:44:e9:48:3e:
aa:9d:11:61:4d:a9:45:20:85:b8:13:a5:6a:3d:8a:
64:c2:04:49:0c:9e:5d:e0:fa:0a:44:74:91:5b:a7:
de:68:a6:ab:f7:31:f9:17:c8:f5:f1:a6:9a:53:24:
5a:11:4c:73:c5:07:e2:af:f2:74:1d:1b:78:18:ec:
9c:5f:78:a5:e0:2a:11:f8:0b:93:38:d2:39:a1:9e:
a8:cf:08:dd:a5:db:56:01:2d:cb:d0:3d:3a:a4:ca:
27:35:28:30:71:8d:0e:0a:1f:8a:63:60:95:77:3d:
10:85:8f:61:f2:54:db:b1:6c:65:44:2d:39:61:c6:
f2:28:d6:3e:c3:fb:ec:f9:f5:61:c8:f0:34:a1:a4:
63:c9:51:0c:e5:6c:f9:c3:69:56:87:39:58:09:74:
94:05:e5:30:13:ef:11:c9:a1:de:92:41:28:b8:89:
fd:3d:d7:09:d1:8c:33:e4:31:ea:cf:ea:81:a2:2a:
fe:05:25:3d:27:7c:dc:24:6a:4a:cc:56:55:87:a9:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:A0:94:A2:A1:80:6A:9A:C5:BA:28:A7:C2:4B:22:7C:67:3C:34
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:14:5b:fb:3a:66:94:3b:a7:ad:ba:c2:ca:0e:10:35:d4:40:
a0:63:c6:05:7c:02:e7:09:dc:62:73:a0:77:06:30:6d:49:8b:
7f:3d:26:ac:0e:6b:92:cd:af:91:d6:d4:92:cd:d8:33:1a:48:
38:53:a5:b2:de:b7:67:df:ed:5a:a5:37:19:b3:3b:ee:43:3a:
17:f2:95:b8:17:73:67:63:63:43:f7:33:7c:51:b4:0d:70:6f:
ec:e8:f6:15:da:1a:02:b8:8b:ad:57:f5:a0:b8:ec:f6:14:7a:
09:de:3e:e4:a3:58:69:51:f3:08:b9:84:b4:50:5c:99:75:32:
20:eb:cc:d2:d8:03:db:89:d8:83:24:37:56:29:a6:5b:20:e2:
ef:64:31:75:03:90:f8:25:26:56:40:91:17:dd:f1:64:6f:dc:
14:bb:39:c1:a6:70:87:75:5c:59:70:6f:1c:37:ad:56:a0:1a:
fd:0b:f8:35:60:45:4f:2a:be:a7:77:ee:7d:c5:9e:88:d5:19:
06:93:a2:f1:b8:29:c9:bd:f3:42:de:3d:7a:68:24:f8:7a:7d:
7b:95:2e:e1:8a:76:7b:5f:b2:a7:00:b9:0c:3f:d3:40:b1:a7:
ce:5f:8b:6c:83:99:31:e4:23:6f:59:08:36:32:a0:3c:44:39:
a2:98:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:02 2025 by rpki-client