
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier: xNse2M8dKz+3BflXonsiPVPEph3Q1zMyik/CvIJTQh4=
Subject key identifier: 9B:27:6E:3E:D3:A8:99:7D:10:19:DE:5F:CE:52:72:B2:6A:09:2C:BF
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial: 019836834FCAA3166120359C0F574D874F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number: 0D2D
Signing time: Wed 23 Jul 2025 09:00:31 +0000
Manifest this update: Wed 23 Jul 2025 09:00:31 +0000
Manifest next update: Thu 24 Jul 2025 09:00:31 +0000
Files and hashes: 1: GYIm3RDoW42qeN5ZkiYHMu0tDbk.roa (hash: XTL3oyukju4z29vBf0q/HsP5UmJFSc4ge9VlgNDZpjY=)
2: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: V5DRe4rAmpgfzadTBXbKIlCZvXCdLl0ICgTDafthWu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:83:4f:ca:a3:16:61:20:35:9c:0f:57:4d:87:4f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Validity
Not Before: Jul 23 09:00:31 2025 GMT
Not After : Jul 24 09:00:31 2025 GMT
Subject: CN=9b276e3ed3a8997d1019de5fce5272b26a092cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:f1:5e:c2:33:4c:9c:02:1e:de:43:12:97:
e5:46:50:e8:d3:3f:b2:5c:aa:3b:99:74:b2:23:36:
e8:9c:27:ff:71:95:97:a1:37:b9:02:6b:5b:e5:43:
ec:ad:9b:f5:da:c5:c4:01:ae:67:74:c8:c3:3b:a1:
76:9f:f7:66:c8:a7:21:03:62:b8:57:06:43:ed:25:
e6:d2:3d:0e:00:75:80:95:a9:2c:b4:6b:bb:aa:4d:
25:4e:08:99:a1:52:d1:14:17:d9:84:43:0b:be:04:
e5:c2:34:bd:d3:32:c8:fb:17:c9:89:c2:8e:05:75:
13:d3:78:fb:dc:6b:8f:72:30:6e:3a:c5:1a:ac:fa:
28:e9:9c:8d:50:f9:ff:a3:08:85:0a:95:f9:2a:95:
4b:0d:e5:95:fe:c4:39:01:7d:d6:52:e3:0f:a1:bd:
2b:6b:26:c2:22:25:6c:a7:cf:7a:06:f0:8a:a6:d2:
e1:69:0e:4e:8d:db:6e:c2:7b:cc:9e:31:73:fb:8a:
d6:9c:a7:67:61:55:1f:1c:30:ab:79:a7:de:7a:67:
d2:ba:e4:c1:5f:93:c1:68:22:d1:6b:d5:1c:f6:df:
9d:9f:6d:94:55:4c:cd:60:00:dc:7a:7e:f5:ef:04:
88:ad:a2:af:ca:71:00:7d:65:a5:60:64:2d:61:c5:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:6E:3E:D3:A8:99:7D:10:19:DE:5F:CE:52:72:B2:6A:09:2C:BF
X509v3 Authority Key Identifier:
keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a0:55:6a:b0:16:b2:3c:92:cf:26:df:1d:ba:bc:db:2a:9c:
f7:eb:54:d5:f7:23:c9:00:fc:0e:68:00:74:2d:89:87:b9:0d:
5d:67:23:40:d9:7a:c1:61:80:2a:cc:68:3b:49:fd:b5:81:16:
34:7e:04:af:d7:c2:4a:88:ff:68:6a:88:cd:a7:97:65:97:ce:
10:a6:ef:42:7e:62:25:d1:62:e6:a2:1d:0c:12:0f:71:ec:3b:
90:c3:8d:85:03:d3:1a:ae:62:33:c4:fb:26:46:05:a4:a4:0c:
a5:12:a0:9e:ff:0c:ba:c2:24:ef:90:1d:85:38:c9:67:fa:07:
06:1b:01:a4:a5:e8:d5:5d:67:66:d4:c7:f1:f2:e2:b0:98:c6:
fd:cf:80:50:1f:ed:ce:c2:51:e9:d6:41:ac:70:a0:df:42:34:
c3:10:a6:6e:22:fc:8a:13:1c:74:4b:55:3e:d0:98:37:8e:ac:
f9:9c:af:ec:9b:9a:d1:72:29:95:40:6f:d9:a8:20:c6:ba:87:
ad:e0:9d:44:fc:ab:d8:2f:77:1e:de:bb:62:43:e5:91:8c:d2:
7d:6f:c4:d1:7b:3f:5b:e5:04:6c:a3:f4:0c:7f:e1:f6:b7:81:
dd:62:d8:86:ef:93:7b:a4:1b:26:5f:67:cb:3b:4f:5e:11:4f:
65:04:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:48:19 2025 by rpki-client