Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: FDafFlXpppcDH/tQq1X2RLDL3lNuTIlQkqrzIOFJ9M0=
Subject key identifier: 5D:D9:F6:01:EC:55:80:42:00:77:DE:DA:56:F7:DF:4C:CC:F8:C5:B2
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 0198529F72065D2EED19CF39FB8944870B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 1597
Signing time: Mon 28 Jul 2025 20:00:37 +0000
Manifest this update: Mon 28 Jul 2025 20:00:37 +0000
Manifest next update: Tue 29 Jul 2025 20:00:37 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: rawkO57PFrccMqBxwkk4vjDpgnB9tGyyed5E+XTeML4=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:72:06:5d:2e:ed:19:cf:39:fb:89:44:87:0b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Jul 28 20:00:37 2025 GMT
Not After : Jul 29 20:00:37 2025 GMT
Subject: CN=5dd9f601ec5580420077deda56f7df4cccf8c5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:ad:d0:7f:e7:51:ab:af:61:69:99:87:89:
cf:16:1c:73:f6:63:f3:07:23:72:b8:d4:50:20:43:
ee:27:b7:34:61:b3:d4:4e:cd:81:96:02:c0:d8:fe:
75:18:70:10:72:b3:8f:16:cb:57:e6:91:ae:50:88:
47:8a:dd:09:87:09:35:d5:d8:1e:8d:47:d9:13:f8:
f2:e6:67:74:3d:bd:37:93:76:c3:91:55:f1:70:51:
1b:95:02:e1:b0:b1:16:c8:58:fe:61:5f:ce:6f:3b:
44:bf:5b:ed:22:2e:23:d7:12:f9:22:7b:74:49:cd:
10:30:3f:c6:15:4e:9a:39:9e:b1:76:33:6a:01:5d:
68:39:95:4f:1d:4c:20:5f:e5:01:c0:dd:b0:68:43:
99:37:11:1a:e3:b7:c6:90:ed:6c:64:18:12:08:f6:
37:d2:f3:a4:22:13:35:a4:2b:27:f4:60:ec:31:f6:
e1:59:8e:e5:c8:29:82:01:7e:f7:a6:cd:a8:03:65:
90:a2:5b:cf:65:bd:c6:a3:cb:39:77:21:0b:9d:8b:
14:64:e9:63:20:0b:33:8a:5f:05:76:76:ab:5d:c4:
e0:fd:51:76:63:67:12:5f:bb:22:b0:3c:3f:c4:a0:
6a:a4:15:24:9c:19:fa:8c:2c:a2:28:c2:dd:67:01:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:F6:01:EC:55:80:42:00:77:DE:DA:56:F7:DF:4C:CC:F8:C5:B2
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e2:03:91:80:5d:bd:50:2d:f4:ce:ac:21:f4:7f:1e:a2:52:
b4:a9:7f:11:0d:9b:bd:bc:58:ff:fe:f5:27:9f:b0:39:19:2a:
b0:7c:8d:9c:54:63:79:ec:43:b9:57:de:98:5c:66:6f:78:8c:
e9:8b:52:a4:91:50:2d:4a:c6:63:eb:93:6c:5f:45:8b:55:e5:
2d:30:7a:1c:b9:4f:9b:fa:d7:f1:7f:3b:a7:89:19:b7:9a:ba:
4e:f1:65:0a:30:08:86:3b:e6:e9:ae:9b:05:94:13:4e:27:11:
9b:91:bd:f6:3a:38:5e:74:52:ca:6b:0d:33:7a:52:46:0e:72:
f4:f0:71:4f:1f:49:ff:0e:8e:35:de:7a:81:79:f4:30:a8:a1:
52:45:2e:64:d7:e4:31:ed:b3:80:c6:3b:b6:b5:7d:f3:da:fc:
68:fe:f4:16:bb:5d:67:51:dd:cd:a5:96:c3:3c:1c:df:e9:30:
8d:18:1a:41:af:31:96:85:8e:e8:78:56:09:04:e4:7d:95:7a:
0a:d9:ca:4e:76:ae:46:0c:0c:4e:43:ea:93:d9:6a:59:40:52:
58:26:e2:cf:16:cd:da:bb:41:8b:93:b0:8f:9a:ce:7b:ea:52:
3a:ae:79:41:a2:ee:74:81:66:aa:64:39:7e:44:b5:30:55:31:
40:31:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:56 2025 by rpki-client