Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: ySk4xOKDOWJ1BwtJCtsj2XJvbuw1ZFPjHjpv+FA7HfU=
Subject key identifier: 31:33:BA:53:94:D9:FF:9E:5F:4E:94:A6:FE:FE:0E:15:B0:58:0A:84
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 019846D26AF06DF21AF0BCEF0A5EB99F05A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 13:00:51 +0000
Manifest this update: Sat 26 Jul 2025 13:00:51 +0000
Manifest next update: Sun 27 Jul 2025 13:00:51 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: 81Qym1dYzPcqugUYH8iqO8s80AFz2fw8+4pSFTQ+o9g=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:6a:f0:6d:f2:1a:f0:bc:ef:0a:5e:b9:9f:05:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Jul 26 13:00:51 2025 GMT
Not After : Jul 27 13:00:51 2025 GMT
Subject: CN=3133ba5394d9ff9e5f4e94a6fefe0e15b0580a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:8b:50:04:8d:58:4a:77:03:b0:98:a2:ec:
d2:76:f6:96:fd:c4:b9:1d:d8:5a:ed:8b:9c:86:1a:
5a:73:51:17:81:9f:66:3a:4d:4f:8a:f4:25:bc:47:
35:47:fe:e0:2b:21:0b:d4:0f:54:fe:1b:ca:1b:94:
9f:07:c7:e0:97:ec:de:5f:cb:57:54:b9:54:46:44:
9f:6f:69:df:90:62:50:8e:ae:40:c5:ac:fd:95:59:
1c:45:9d:5d:6e:19:a4:a3:be:04:95:de:51:65:77:
35:c9:bf:93:a8:86:e8:ac:7a:54:ba:17:59:93:43:
16:06:92:41:61:39:85:b1:66:a9:c4:9a:85:02:14:
10:60:fc:d4:3b:d9:d0:9d:34:56:18:44:4c:85:55:
d6:c3:33:a6:da:c4:e9:66:ca:fc:6b:dd:5d:20:ce:
fb:00:4b:c0:2a:de:93:fb:6f:36:d8:87:69:7a:fa:
dd:d6:99:c7:bc:b8:31:ba:f4:00:95:d9:36:66:30:
10:b6:f1:b2:a9:2f:95:26:1b:90:47:02:71:fd:d8:
09:cb:0f:bc:ef:80:25:af:25:47:4b:b5:f1:bc:c5:
81:27:c8:a9:e9:aa:ce:95:18:54:b4:55:7a:e6:48:
c4:14:b5:e7:de:78:35:12:4a:59:f8:d1:2c:a2:a1:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:33:BA:53:94:D9:FF:9E:5F:4E:94:A6:FE:FE:0E:15:B0:58:0A:84
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:56:40:36:f8:ee:6f:76:42:1f:a0:f4:5d:c8:ea:d7:f9:
aa:ee:c5:94:8e:b1:e5:b5:20:32:6a:48:0e:60:3a:39:11:c8:
f5:00:90:86:f0:26:f9:b1:87:fc:26:97:cd:b7:76:71:7d:7c:
98:14:c3:2d:0c:38:fd:56:0f:77:05:ab:a8:4d:23:87:c4:d2:
50:d9:90:da:8a:4a:de:59:91:0d:74:6c:1f:fa:0f:74:8a:43:
61:60:d8:41:49:65:95:ec:b2:6d:07:d6:a0:04:15:70:35:91:
2a:00:4d:ed:6a:33:aa:75:1e:ea:f4:ff:46:77:74:9a:9b:9e:
68:49:ce:a5:23:54:7a:e2:3e:ab:62:01:1b:98:08:0a:68:fd:
d6:c0:f3:97:a8:0e:ac:d7:17:97:e7:bb:ad:16:7f:95:5d:3a:
73:1a:de:fc:84:1b:32:98:3d:60:86:f7:fe:ae:b6:1d:86:e1:
1f:d6:e5:c3:65:e1:03:0d:58:f7:ca:36:15:fd:a5:47:d1:36:
df:20:21:a3:1d:78:a8:57:e2:04:4f:7e:1b:1a:5a:a0:30:61:
31:fe:44:ce:ce:7d:be:72:52:df:d4:90:b3:5f:78:c9:57:83:
40:c6:20:73:57:d4:a3:00:35:74:4f:12:ee:62:dd:13:b3:73:
f1:1d:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:18 2025 by rpki-client