Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: r4XegEnvQKlexeZMkDqA+iz0cD0xY3cdzipqDT4xczc=
Subject key identifier: E0:95:07:10:88:EB:F1:F4:F5:5B:66:03:FF:C4:35:43:36:4A:23:6D
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 01984AAECC535C28FF10F3C54C69E804C80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1592
Signing time: Sun 27 Jul 2025 07:00:26 +0000
Manifest this update: Sun 27 Jul 2025 07:00:26 +0000
Manifest next update: Mon 28 Jul 2025 07:00:26 +0000
Files and hashes: 1: 5MK1ewnt7LozxEmddZiWa3omfKc.roa (hash: 7+tCKj1f1iwSFAN/o1/yY8fVwb73KSasEYzwGjDKXO0=)
2: DeHazeP3A9wAumTO_Rmx5RqWaqs.roa (hash: 0hOPuiiQ+UKk5lNFYgiHmEshvjQhpp/6FLqfnT4DM3I=)
3: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: Z7gSf2OqEokWe0gmrZKbJdgN29/hByIaD1V0xu3ZQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:cc:53:5c:28:ff:10:f3:c5:4c:69:e8:04:c8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jul 27 07:00:26 2025 GMT
Not After : Jul 28 07:00:26 2025 GMT
Subject: CN=e095071088ebf1f4f55b6603ffc43543364a236d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:b1:0f:81:ee:9c:b4:1c:b4:cf:e9:2a:5f:
85:35:b1:0f:ff:2c:f8:7e:d8:ef:a9:68:f8:05:c5:
79:f5:9b:15:e2:2e:30:96:03:ee:04:39:43:fe:36:
68:ce:94:8a:cd:28:30:35:bc:d6:06:0e:ac:14:b2:
fb:9b:42:94:8a:e4:f8:db:a2:0c:08:72:b2:34:0c:
bf:e0:7d:b1:65:fb:7b:ca:7d:3f:03:18:3f:d4:38:
5d:02:e9:e9:dc:a2:77:0a:2b:97:8b:6e:dd:d2:4a:
81:2b:64:37:6c:19:29:47:1a:c8:31:ec:f5:35:ed:
3e:f6:02:1a:9d:db:be:18:c4:78:fd:aa:86:84:8a:
0e:9e:b2:3e:51:59:e3:49:40:88:b9:2e:3f:8e:d2:
14:af:52:7e:23:61:5d:4b:74:25:dd:2c:88:c4:53:
db:7f:a6:b3:f3:60:1f:71:df:f3:e1:89:38:77:67:
28:e5:d0:33:c3:be:df:1d:42:e7:78:81:a6:91:5b:
cd:c1:a8:bb:38:6d:1c:b0:7f:f0:60:14:16:72:ce:
d3:e9:36:26:d2:af:2c:58:09:da:20:c3:e1:3c:3e:
82:0f:bf:3e:d3:01:01:75:ab:0f:f6:6f:d8:8d:2f:
46:8b:47:fd:df:b9:47:8b:84:d7:de:aa:34:b8:b5:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:07:10:88:EB:F1:F4:F5:5B:66:03:FF:C4:35:43:36:4A:23:6D
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:39:d2:30:9d:ee:f8:57:69:9f:f7:8c:f3:65:60:38:40:4b:
43:f2:84:9e:88:a1:ca:af:c2:a5:1d:ba:78:e8:e5:d2:b8:ec:
78:b6:dc:3b:bd:5c:e2:f0:c9:a0:98:12:ea:c5:99:af:cd:29:
68:74:2f:3d:de:05:73:5c:d8:7d:d3:c8:8d:f5:ae:0f:71:90:
29:e9:0f:d0:f9:99:41:a0:48:a0:2f:4a:df:c8:b9:3c:c0:ba:
56:61:1f:cc:b9:35:c1:cb:48:a8:48:62:00:60:29:b5:46:9b:
98:fb:d0:02:55:38:b5:48:f7:c5:86:69:5e:e3:50:fe:24:9a:
cf:c8:4d:63:c2:55:8f:31:cb:39:ae:c1:01:63:04:9b:36:7a:
e0:fc:79:d4:ab:73:69:6e:58:65:2b:a9:c7:64:a2:48:f5:c9:
68:66:80:09:24:9c:77:18:17:a1:a9:28:22:d0:bb:cf:a4:c7:
5b:b2:b0:8d:61:9f:2f:61:8d:84:d5:c6:ad:dd:e2:c9:e5:7a:
14:6e:a1:c3:22:59:52:83:c3:6f:1d:8b:8e:14:66:c7:9f:10:
2a:20:24:5d:79:f6:9d:98:e2:63:d3:aa:87:0e:4d:9b:ae:f4:
37:46:7b:b7:25:7b:67:94:65:11:ac:87:78:0e:23:04:36:d2:
56:5a:cc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:18:16 2025 by rpki-client