Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: /i2yubp6HjUFWqITjLz9tfSGcjrgdsVyHJasdFmYjs0=
Subject key identifier: 01:92:BB:DE:50:E5:78:B1:D0:1D:0F:7B:7A:EC:EE:EB:18:0D:AA:D0
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 01984AE56C873155579102A2621B78D6CEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 08:00:06 +0000
Manifest this update: Sun 27 Jul 2025 08:00:06 +0000
Manifest next update: Mon 28 Jul 2025 08:00:06 +0000
Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=)
2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: VNa79z6lrcHI4HCAzPe4G5oM/KN+4SDCXPrZ4BxJPqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:6c:87:31:55:57:91:02:a2:62:1b:78:d6:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Jul 27 08:00:06 2025 GMT
Not After : Jul 28 08:00:06 2025 GMT
Subject: CN=0192bbde50e578b1d01d0f7b7aeceeeb180daad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:75:20:b7:ed:d8:19:50:03:96:8c:49:f3:
e6:bb:c4:ad:30:33:9f:83:22:15:92:87:58:13:d8:
45:dc:aa:92:07:79:f2:32:91:06:94:b5:7e:ec:5e:
ed:82:64:83:69:ac:2e:84:98:bb:70:df:90:8a:6f:
44:75:50:c0:6b:b7:78:35:2f:5b:18:61:d9:28:6f:
ae:a8:0e:db:a4:e3:e5:fe:54:10:fc:80:91:a3:4a:
fb:cd:46:14:1b:21:c6:ee:95:5b:7f:07:85:71:9f:
36:d4:34:90:51:fd:f4:41:28:87:89:14:57:d3:c9:
88:99:fd:04:81:b1:27:8c:68:07:e0:35:6d:30:a0:
f5:83:26:6d:74:5f:d5:82:d4:e6:63:d4:44:22:1c:
f4:96:b9:42:64:c0:d1:73:e9:b0:ac:d3:94:34:f5:
00:e5:78:07:be:98:9f:6c:c6:1e:e7:4e:30:de:0d:
07:5a:c4:4c:cc:8c:c6:a3:72:8d:79:60:38:ad:47:
03:6a:0c:f8:ca:13:cc:df:f0:69:34:00:81:b8:5b:
d5:a0:27:f4:65:5d:86:f0:87:a6:2f:43:38:f5:cf:
34:ce:ba:34:0b:27:d6:17:9e:e6:56:6e:fc:f6:92:
f3:e6:bf:6e:90:58:90:92:55:8c:87:6e:da:09:30:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:BB:DE:50:E5:78:B1:D0:1D:0F:7B:7A:EC:EE:EB:18:0D:AA:D0
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:37:44:2d:a0:ee:58:62:39:c5:8d:a7:f1:8d:31:c5:46:62:
b4:fc:5d:83:fd:44:38:9c:03:71:6e:69:cb:bf:fd:08:ae:c7:
cf:07:49:44:9c:b6:99:f6:be:f8:e3:b1:e2:5a:85:e7:d8:92:
65:bf:19:42:c4:bc:0e:a6:49:94:3b:ed:52:e6:02:67:43:6d:
65:65:f0:3d:a7:1a:0c:0b:d1:8b:83:73:31:89:97:85:3b:b7:
f2:1a:65:27:7b:4d:79:3b:c3:80:ff:d6:ae:63:1a:32:ee:78:
92:09:0f:3c:2d:da:22:bd:b4:d0:f1:ab:15:23:41:e8:55:36:
ab:3d:14:10:f9:d0:49:66:df:e3:00:41:fb:ff:2c:ca:40:0f:
5f:8e:d5:73:ec:2b:78:22:dc:09:e7:63:9f:83:b4:50:c6:e0:
0c:28:02:d0:0e:e8:6e:62:dd:24:31:86:30:8f:09:14:95:75:
87:a4:d2:80:3a:bf:b2:db:aa:c2:9c:4f:82:74:0d:0e:9d:41:
42:71:38:67:6e:b3:48:60:1c:50:3e:b9:60:f8:7d:c4:16:65:
bf:18:84:06:b2:8a:04:ba:02:1a:39:84:e5:3e:20:53:af:6b:
e7:bb:03:fc:6c:7d:03:be:e0:55:e9:94:f1:ec:2d:b1:42:4d:
45:c9:2d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:26 2025 by rpki-client