Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
File: H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json)
Hash identifier: ilFbg0a7jod4Ju9E0MoEbIgRkow0A4zZgIM1TNxF5dY=
Subject key identifier: 23:BA:80:DC:11:B7:7C:E4:90:08:F8:AF:C3:33:B8:44:70:57:B4:E2
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Certificate issuer: /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial: 01984AAE9B5551A60D0AC94B615FBC9529E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
Manifest number: 144C
Signing time: Sun 27 Jul 2025 07:00:13 +0000
Manifest this update: Sun 27 Jul 2025 07:00:13 +0000
Manifest next update: Mon 28 Jul 2025 07:00:13 +0000
Files and hashes: 1: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: wnlXTixq1gMt9J4JGiAZwEWHCpL8oFZ5nMrqwEP0Skg=)
2: z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa (hash: qAv01E+pevkkYz421oysRUur++ptzgLO7RhPrCkAgu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:9b:55:51:a6:0d:0a:c9:4b:61:5f:bc:95:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Validity
Not Before: Jul 27 07:00:13 2025 GMT
Not After : Jul 28 07:00:13 2025 GMT
Subject: CN=23ba80dc11b77ce49008f8afc333b8447057b4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:73:a4:3d:e8:1f:d8:f1:ad:17:ad:7f:4d:
7b:b7:3b:41:6c:c2:9d:50:22:62:56:55:21:b3:fc:
73:aa:72:f4:76:33:45:04:5e:56:dd:68:25:48:f7:
f5:70:87:f0:20:f8:21:da:71:61:98:9c:d4:92:52:
f4:af:b7:34:48:28:95:23:68:5d:2a:4e:6e:fe:ae:
13:40:bc:27:ba:f1:19:bc:93:40:28:3a:34:fa:7b:
73:dd:be:12:7c:2e:92:35:3d:73:32:58:46:14:53:
15:d7:50:f8:b6:3e:ea:e1:2c:10:77:84:bc:3f:b5:
dd:89:68:62:b1:d2:5f:01:b4:0f:40:2c:d7:c9:75:
82:9d:28:be:80:d1:23:c8:bb:38:58:1a:3e:18:85:
98:08:12:cf:8c:c1:59:58:8f:e1:7e:4c:cb:71:12:
68:5f:97:59:a0:12:71:ac:39:3c:6b:1b:02:80:6d:
01:e0:f5:6b:aa:a2:07:26:0c:67:9e:16:b9:75:ea:
33:63:2f:32:51:06:7c:49:4a:df:87:70:9e:a9:c3:
31:af:33:6a:ad:df:ce:bc:66:a9:de:23:d8:79:24:
c7:c8:a8:79:3f:c1:27:7b:cf:1e:17:5f:3a:fa:b2:
0f:a2:2b:e7:91:a4:b0:77:69:f3:b5:cc:62:05:74:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:80:DC:11:B7:7C:E4:90:08:F8:AF:C3:33:B8:44:70:57:B4:E2
X509v3 Authority Key Identifier:
keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:03:6e:45:4c:03:07:9b:01:c8:d6:73:a4:f9:67:b1:9f:e1:
53:91:5c:f7:5e:64:08:02:75:a2:3b:e2:c9:68:ca:8a:f7:9c:
6b:d6:4d:69:3d:b3:1d:d9:cb:22:87:13:82:0d:fc:5c:dc:0d:
b4:3b:14:7e:a6:e5:87:6f:c8:22:00:81:1c:08:33:0f:21:5a:
3d:dc:b3:e7:8e:a3:f5:a2:f4:be:b8:14:d2:6d:e0:30:9c:b1:
47:b6:d1:5c:a8:34:b2:6b:7e:fd:da:93:7f:91:17:e5:7e:28:
40:86:18:01:e6:54:bf:76:07:55:fb:c5:01:60:f7:4b:0a:6e:
25:70:68:17:cf:e6:3c:cc:80:43:eb:57:37:bf:9e:d3:3e:2a:
8d:e4:e2:f1:d3:42:f3:11:b4:32:64:44:56:1a:ee:eb:82:d8:
62:fc:56:56:bc:16:59:50:58:9b:96:cf:21:4a:78:06:a4:e1:
f9:c3:99:70:7e:09:6e:bf:f2:21:a3:e3:dc:f1:3e:2e:51:2d:
ec:f7:64:37:d2:ed:91:72:4a:87:86:e9:6e:d6:63:be:17:ef:
ea:d2:8a:45:13:b1:b2:79:c2:b9:5e:2f:fb:7e:ef:30:0f:07:
70:59:d3:46:89:61:74:fa:11:dd:fe:b5:61:1a:8a:d3:70:ec:
88:77:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:20 2025 by rpki-client