Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: D4gWyobCSWTNo9r5xEtI45Hycwql6hZ0J07j7/yQ2EI=
Subject key identifier: AC:28:4F:B0:96:A3:0B:7F:D1:4E:C2:B8:DE:7D:CE:08:02:11:B1:9F
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 01984B54EC88FE14D048BF72298D81D9CCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0F0F
Signing time: Sun 27 Jul 2025 10:01:53 +0000
Manifest this update: Sun 27 Jul 2025 10:01:53 +0000
Manifest next update: Mon 28 Jul 2025 10:01:53 +0000
Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=)
2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: cnH4FfB6lPpOdC/9U+R1/OpB7XMKKuwAiocQ6qCXo0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ec:88:fe:14:d0:48:bf:72:29:8d:81:d9:cc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Jul 27 10:01:53 2025 GMT
Not After : Jul 28 10:01:53 2025 GMT
Subject: CN=ac284fb096a30b7fd14ec2b8de7dce080211b19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:7d:9d:c3:aa:6f:a6:7f:77:0d:75:4f:b4:
53:d5:b6:df:97:70:20:b1:75:ba:57:c6:cb:26:83:
c3:bc:f8:aa:ab:74:42:67:29:63:fb:06:ff:bd:22:
5b:92:df:7e:23:30:99:fc:09:21:6b:51:d4:e4:e9:
d9:f5:3f:e3:c3:c4:e7:0b:96:92:b1:46:13:2b:71:
83:56:c3:38:7c:bb:3d:2b:79:e8:47:af:7d:aa:a7:
66:3e:1a:c4:ce:3c:d0:f2:13:f0:1b:4e:b2:20:35:
3f:a7:3b:c1:3e:f0:b3:3e:ac:01:d5:70:e9:94:91:
5b:1f:86:87:d4:86:5d:e0:d8:4a:97:d5:7c:4a:49:
68:c3:27:33:9e:79:bd:80:e6:30:7f:dd:cb:ae:a6:
67:70:e3:41:6f:bb:bc:f7:f6:0c:aa:a1:eb:81:41:
dd:d5:98:e2:97:ed:d5:b7:3b:48:cc:45:54:48:47:
0a:53:26:21:45:b3:41:3e:9b:50:bd:45:ac:b6:ad:
eb:37:54:61:31:fb:1d:60:c6:19:15:90:04:67:b0:
7e:4f:00:36:82:5b:2d:04:18:19:c4:08:13:34:98:
8c:9e:65:7a:36:59:0a:5d:28:6c:23:35:7c:b8:9b:
40:41:c7:7c:db:48:76:a6:a7:4a:f0:9c:4d:14:72:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:28:4F:B0:96:A3:0B:7F:D1:4E:C2:B8:DE:7D:CE:08:02:11:B1:9F
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b4:80:45:23:88:66:e4:28:b1:c4:7c:a4:36:be:0f:c4:4d:
df:58:03:fb:3a:a2:88:d3:18:ef:e9:0a:8f:25:32:10:81:7f:
2d:a9:cb:dc:e1:df:3c:f7:44:31:47:34:39:e8:66:e6:1e:e5:
ea:80:6f:7c:7f:4c:88:b7:92:5e:8a:28:e7:41:0c:58:d8:18:
ab:b1:9c:b8:07:04:0c:01:b1:d2:94:66:8c:30:6f:ad:8a:9e:
19:74:51:6f:11:3a:1f:79:ed:de:49:90:da:0d:bc:15:eb:d1:
5a:5b:cf:62:88:42:b1:a1:89:c1:15:b5:ec:14:bf:46:a6:f1:
d0:25:00:e4:10:0f:43:ab:db:69:58:28:37:4b:f2:23:ca:42:
8a:77:6a:4a:13:46:33:cf:f5:9a:0b:9e:a0:0f:f0:6d:2c:b7:
31:06:23:54:52:d8:16:38:01:2d:8c:3f:a5:2c:9e:08:00:5f:
2a:c8:f9:65:66:9d:af:48:d8:2c:03:70:17:ca:3e:78:24:5d:
1c:4e:92:4e:e4:f2:bc:df:79:fb:eb:44:43:14:a0:93:72:b6:
aa:35:65:c6:28:fa:c6:32:48:a7:7c:59:4e:bc:1a:5b:f6:1a:
28:b3:d4:09:94:e3:48:68:8a:cb:bb:90:6b:9f:96:90:4d:2a:
0f:07:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:40:27 2025 by rpki-client