Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: lq0IuQ0yJC4NzDwgloNB/QVFWIHw+DCv36FJ+/+x9j4=
Subject key identifier: 88:97:C0:AC:8D:AB:0A:1D:EF:63:23:E8:CC:55:97:CD:37:97:09:3D
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 019846D1C95754C6BF6AD15AAF42858D53A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: 0155
Signing time: Sat 26 Jul 2025 13:00:10 +0000
Manifest this update: Sat 26 Jul 2025 13:00:10 +0000
Manifest next update: Sun 27 Jul 2025 13:00:10 +0000
Files and hashes: 1: 7sLKGVGT_a4aX4JcAS8Cl-dwrZk.roa (hash: IALVV6z17EuCMGIEd1EYplZQwtixCOladk+EbbZKzBM=)
2: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: P+Nei6OFiUfsXcLx1uopUzMoxZ7wMAn5SX2rXqiod2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:c9:57:54:c6:bf:6a:d1:5a:af:42:85:8d:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: Jul 26 13:00:10 2025 GMT
Not After : Jul 27 13:00:10 2025 GMT
Subject: CN=8897c0ac8dab0a1def6323e8cc5597cd3797093d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:d5:da:12:13:f4:d7:31:08:0c:e6:ae:4d:
8d:37:b8:63:50:f9:fa:14:99:ef:6b:09:6b:e2:1f:
20:32:ad:a4:02:42:6a:c0:53:66:29:fe:54:02:19:
16:e9:2c:73:ff:6f:f8:f0:44:90:9d:c3:0a:42:dd:
e7:f1:c8:72:6d:b4:d8:93:03:18:99:2a:aa:19:26:
50:cb:ec:c6:6b:19:08:fd:5e:03:bd:0b:5f:d4:d1:
4b:90:3f:46:6a:92:0e:0d:cc:54:38:83:4d:ce:7b:
13:fb:55:e2:f7:99:e1:d7:0f:08:5d:10:b7:85:3a:
62:70:f5:57:9f:f0:f9:e5:55:38:f9:6c:65:5e:2d:
59:eb:43:df:90:61:75:fc:50:4a:2e:d4:1a:cf:c7:
4a:bc:db:89:cf:ec:af:d2:81:ce:8b:a0:ea:44:e3:
d2:9d:7e:82:9b:25:7f:99:8e:f4:ee:49:29:22:34:
28:a0:1b:4b:1c:dc:45:66:3a:d9:f9:1a:1d:e6:c4:
e2:6b:1f:aa:0c:aa:86:b7:d9:41:6f:6e:a5:c3:8a:
3c:fa:d3:67:20:62:e0:61:50:a9:75:33:73:63:16:
95:07:a0:ba:34:10:d3:d5:9e:92:fd:d3:8f:ff:7a:
cd:a5:21:22:4a:ec:42:c1:86:20:5a:32:8d:72:88:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:C0:AC:8D:AB:0A:1D:EF:63:23:E8:CC:55:97:CD:37:97:09:3D
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b4:ad:67:b6:c4:6c:f7:8d:d6:78:19:84:51:34:28:76:2b:
aa:2a:4c:ac:be:33:19:78:bf:4d:26:5d:8e:12:6c:73:08:48:
68:b5:dc:a8:9a:37:30:b2:fc:4c:bb:23:40:52:96:fb:b5:53:
88:06:c5:38:61:4b:2f:de:7e:0e:b1:54:b3:37:c9:e9:58:31:
43:bd:53:98:15:65:54:92:f6:2e:ea:fa:b8:85:35:82:d0:c7:
50:69:0f:9d:c9:7d:24:d3:8a:c4:c9:30:3c:8e:13:c2:65:1c:
26:fe:f5:2b:1c:66:76:f8:2c:c8:d2:bd:91:56:a9:20:b1:58:
69:f2:02:67:e4:98:75:ee:2a:aa:de:4a:35:cc:4e:f4:f9:fd:
0a:93:8d:34:cc:23:de:2b:39:db:60:aa:29:ac:23:8f:d5:ac:
65:d4:7e:7c:cf:48:49:a9:e2:14:c2:a0:08:eb:b2:8b:80:24:
33:3c:75:bd:61:3c:29:ee:35:af:c1:83:d4:2a:dd:c0:22:c1:
fb:12:cf:ad:d9:6d:53:a2:f0:b7:4b:b0:dc:71:05:27:9a:b1:
44:79:9e:67:d1:e5:4f:fe:0d:53:c2:b3:e5:54:27:b9:a9:ca:
a5:25:15:48:d2:fb:b1:0c:10:37:59:56:bb:3d:1f:1d:57:e8:
a1:7a:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:48:54 2025 by rpki-client