Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: Y1caGOrEgXld+KmtrFV+MqbIcqeC5QqlXm3/mzSVIPI=
Subject key identifier: 11:B9:80:ED:30:3B:F0:62:63:39:09:AC:F4:03:B4:64:28:45:A9:3A
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 0198654ABA22E19476037389DD877196BEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 1611
Signing time: Fri 01 Aug 2025 11:00:52 +0000
Manifest this update: Fri 01 Aug 2025 11:00:52 +0000
Manifest next update: Sat 02 Aug 2025 11:00:52 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: iXM9oRY2P7hJFuBxNxhn5pczWXT8SOw6PMPoNK3VECc=)
2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:4a:ba:22:e1:94:76:03:73:89:dd:87:71:96:be:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Aug 1 11:00:52 2025 GMT
Not After : Aug 2 11:00:52 2025 GMT
Subject: CN=11b980ed303bf062633909acf403b4642845a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:18:ef:db:e3:5b:38:2d:be:2e:0c:a0:df:
e1:5e:d3:87:0f:b2:14:f9:41:c2:9e:5b:9d:5c:9c:
40:52:c3:17:4b:f9:16:c1:48:f4:d1:25:ed:65:c6:
38:9c:9f:7b:24:d7:d6:45:1b:25:42:0c:78:bb:ad:
5c:e1:e2:8c:e6:2e:92:3c:87:c7:66:9b:c4:d3:94:
42:4d:27:fd:20:56:32:cb:c4:e5:ae:de:00:c2:4c:
ed:e5:07:3e:6e:5a:44:87:01:1b:3e:f0:1a:35:a4:
55:29:3c:58:62:52:12:14:85:14:bf:5b:f3:25:98:
b2:b4:cf:0f:18:5f:e8:31:97:0e:c5:a7:c6:aa:a3:
7b:21:39:75:69:bb:bf:7f:f2:18:46:37:81:d9:c3:
25:42:6b:c9:0c:d4:90:69:dc:90:40:10:ac:bc:69:
c0:fc:08:bb:45:e7:97:2d:0e:37:88:d6:b2:45:6b:
16:76:1f:17:d1:c2:88:6b:d0:a3:5e:8b:3a:bf:78:
02:a5:8e:65:97:b0:6b:af:3a:5c:d9:52:34:a0:5a:
19:17:ec:8b:29:ed:9a:78:83:3c:aa:6e:ee:5d:00:
5d:e8:44:0e:cc:d9:17:ae:d0:95:46:3b:89:c0:f2:
18:5d:ce:89:99:d0:3c:43:ce:1c:8c:25:80:ba:2d:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:80:ED:30:3B:F0:62:63:39:09:AC:F4:03:B4:64:28:45:A9:3A
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:24:c8:9c:10:dc:15:04:7a:47:90:1c:69:49:de:eb:bd:c8:
76:b4:d4:15:09:32:c8:05:79:6f:6c:fe:ee:de:69:2b:1d:27:
ce:73:d0:15:cb:92:41:dd:55:f8:47:c6:b6:71:ab:1a:a4:a3:
43:06:ba:1e:84:1d:6c:d4:c0:57:cb:ac:5a:66:d8:8e:02:46:
e4:38:d1:9d:91:24:a2:5f:37:32:d1:6e:51:5f:6a:44:fe:d2:
6f:ac:a2:39:40:e3:f0:40:3f:b4:a0:97:37:cc:12:f8:5d:51:
cd:a5:60:55:d8:d5:50:2e:5f:b4:f1:79:5c:67:6a:96:87:e2:
46:ca:a1:8e:93:92:08:8c:f9:5b:b7:5f:8a:69:be:19:1b:09:
80:1b:b2:bc:b5:82:15:f3:36:19:02:b7:e6:23:51:ab:d8:46:
18:43:c6:0e:9a:54:8f:87:e6:c2:16:95:10:f5:15:40:a9:38:
4c:d2:7d:6d:d2:40:dc:de:fc:f3:44:dd:6e:2e:23:ef:f3:dd:
b7:88:f1:dd:b9:91:a9:e8:67:7c:24:12:0b:f9:e8:85:8d:20:
31:22:e9:ea:3b:4f:c4:ef:7a:41:62:ff:d1:46:47:5d:ef:02:
8f:76:aa:dc:54:33:80:09:7e:a6:96:60:b1:a8:58:30:fb:29:
e4:da:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:47 2025 by rpki-client