Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json)
Hash identifier: Ri+5s3R8uqXTm/qdXx1Dh7PeYjm++8xzNeXVIVpD38Y=
Subject key identifier: 03:F3:67:DB:B4:86:54:C6:D9:47:7B:3F:B4:DF:72:3E:AC:E4:B5:2F
Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Certificate serial: 01982859E18755A1B2C45819D93B0A2062F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
Manifest number: 22
Signing time: Sun 20 Jul 2025 15:00:35 +0000
Manifest this update: Sun 20 Jul 2025 15:00:35 +0000
Manifest next update: Mon 21 Jul 2025 15:00:35 +0000
Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: R/l4hxdB2zn/xGmxvtH5e6Fujo/Tpt83E7PqEuotDos=)
2: fj04IAgRtLyt8FxauXRHzCCY2dM.roa (hash: RQPUjLROTiuPGUSBn8RZIchppB8l2w9Yk7LM8XCFoI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:59:e1:87:55:a1:b2:c4:58:19:d9:3b:0a:20:62:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Validity
Not Before: Jul 20 15:00:35 2025 GMT
Not After : Jul 21 15:00:35 2025 GMT
Subject: CN=03f367dbb48654c6d9477b3fb4df723eace4b52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:fc:20:70:d3:c7:b5:8b:35:09:35:d2:7b:
f9:8a:d0:a9:ce:e9:39:16:ad:8e:4b:cd:72:a7:d8:
43:fc:3c:cf:62:74:3f:0a:1f:eb:94:2f:f4:df:d5:
46:5b:23:3b:a7:89:54:99:78:bb:f2:a9:d3:6f:39:
c4:0a:cb:08:ea:f9:14:d4:cb:51:5a:d5:88:df:df:
33:2f:d2:5c:1b:f2:68:0e:d9:19:48:48:b5:4f:d1:
ab:e0:6e:1a:e2:3e:df:58:58:1f:d3:d3:0e:da:1a:
14:de:a2:22:9c:41:7d:f8:b7:d9:20:20:5e:18:a7:
c7:4c:be:c1:3b:a9:02:7e:cb:d5:2b:9b:04:37:1d:
74:2a:0a:a5:31:3a:e0:5a:51:38:eb:01:fc:3d:5f:
10:6c:ef:7f:d7:36:81:0b:cb:42:58:49:ff:03:d6:
59:9b:3c:f7:3e:16:97:91:72:67:af:21:fb:16:7d:
c9:10:ef:59:ec:37:72:c4:a5:04:89:8e:23:2e:90:
09:52:59:44:0e:b9:d6:7d:b0:c7:01:59:7d:32:2e:
6c:6b:b9:f8:f2:59:1c:34:58:d3:ad:0e:94:2b:3f:
4b:02:b3:9c:0e:d5:86:44:aa:7c:46:0c:c8:4b:35:
67:06:84:32:ad:1f:e5:8c:81:87:62:9d:2b:cc:f9:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:67:DB:B4:86:54:C6:D9:47:7B:3F:B4:DF:72:3E:AC:E4:B5:2F
X509v3 Authority Key Identifier:
keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c6:35:2d:16:fb:95:b9:1d:c8:fb:51:a2:cb:61:43:a2:9e:
71:52:0e:4f:2a:c8:99:1d:2a:9f:3f:97:02:ea:d9:37:f3:46:
af:6b:61:8c:2b:8f:66:3d:2f:44:e1:3e:5e:61:66:e7:4d:8b:
31:9b:2b:04:02:4f:22:13:fe:0e:ff:ce:c4:d0:a7:2a:40:d6:
dc:1f:9b:dc:cb:63:f5:83:e9:cc:53:c1:18:59:48:ab:53:7d:
27:ec:14:34:28:2b:fa:a1:33:af:42:53:1f:3a:25:56:e7:97:
c8:38:7b:e4:f8:e2:58:3b:13:5d:a9:74:69:a0:9e:fc:cf:07:
bd:7b:66:c7:d5:69:15:42:4b:d7:a0:00:85:5b:39:88:8e:cf:
97:07:02:0d:a9:d4:59:4f:b2:01:5e:f3:7c:86:f2:cf:12:65:
5c:09:b9:b8:ec:ab:bf:33:c2:51:65:06:ae:f1:d4:b3:ff:df:
3b:25:0c:9e:cb:13:15:24:77:71:27:b2:2c:b9:cc:f1:13:0e:
5c:bc:ab:48:0d:3a:ea:74:b5:f0:95:4f:69:49:5b:55:b6:56:
54:e8:c0:13:77:6f:ff:38:ca:8c:68:a1:b6:a4:f2:88:f6:9f:
60:40:e7:83:e4:91:a1:c9:9d:6d:5c:2a:65:f8:d2:18:64:eb:
7a:a0:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:30 2025 by rpki-client