Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: /lhp0fg01D22Jn+2A6dV4ADuEawDvQ8ebfe0pzJ17tw=
Subject key identifier: 29:AA:BD:01:19:8F:3A:72:84:EC:B0:82:8D:8A:97:28:36:A7:F7:CF
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 01984EC2724C01787115C0CB0C2EBA8D451F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 1289
Signing time: Mon 28 Jul 2025 02:00:22 +0000
Manifest this update: Mon 28 Jul 2025 02:00:22 +0000
Manifest next update: Tue 29 Jul 2025 02:00:22 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: 7HKMyP05Oqe32xzI74Rrip37cawBIPqmxmS3blc+1D4=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:72:4c:01:78:71:15:c0:cb:0c:2e:ba:8d:45:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Jul 28 02:00:22 2025 GMT
Not After : Jul 29 02:00:22 2025 GMT
Subject: CN=29aabd01198f3a7284ecb0828d8a972836a7f7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:b4:a4:e6:1b:2c:6b:46:dc:6e:77:a1:de:
b5:58:37:1d:08:38:e2:a8:ff:55:0c:f1:81:36:c2:
ec:64:2a:75:66:a8:62:17:a7:e3:89:25:0b:fd:08:
1f:ad:09:51:78:aa:ba:ce:74:bf:1c:d3:33:71:7b:
0c:76:ea:bd:18:04:5d:42:1f:c5:00:33:76:40:de:
5b:20:fb:81:0b:74:f7:4c:85:34:0e:04:b7:9c:ba:
8d:ac:78:08:7c:4d:f6:8d:e0:05:bc:dc:8a:fe:42:
6b:39:87:d9:e5:17:75:ba:0a:6a:50:fd:27:95:c2:
6a:4a:61:15:ab:0b:e5:c7:66:b7:29:2a:9a:b7:a0:
78:60:5e:7d:21:db:88:ee:ea:26:9a:b0:34:05:3d:
f9:db:9a:0a:ef:fe:e4:3a:6e:45:cf:ba:8b:0b:15:
2e:9c:81:a3:f6:1a:01:d0:35:a9:de:c1:b1:e7:44:
5a:ec:d2:39:f9:88:0b:ad:41:eb:a1:44:25:13:23:
cb:5d:49:eb:39:ee:28:78:c8:28:60:a3:39:08:e3:
e2:9d:91:67:15:db:1c:ac:3d:20:4d:ee:2e:cf:60:
e2:96:72:6d:1d:92:c0:c2:2a:6d:e4:dd:61:2c:3b:
08:c5:59:dd:33:99:dd:62:23:00:23:08:36:a6:65:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:BD:01:19:8F:3A:72:84:EC:B0:82:8D:8A:97:28:36:A7:F7:CF
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1f:da:5c:ac:26:0b:67:d8:96:b9:ec:e7:87:6d:2d:e7:1d:
ab:1e:17:90:41:98:87:d8:72:75:57:6b:4a:b5:04:23:0a:e7:
76:e3:83:36:8d:d0:2d:07:02:16:78:af:8a:b1:47:a8:23:75:
9b:df:35:fd:8d:23:12:b5:7e:f7:bc:5a:2b:e0:40:35:a8:c8:
e7:8f:bd:60:ff:5a:63:c9:a2:8b:44:bb:19:69:38:d4:50:2f:
fc:c9:3c:73:6f:a1:23:a1:e0:6a:1e:9b:4d:54:30:7d:2b:c3:
98:ce:07:77:e4:da:c0:06:81:ea:52:8c:14:87:a0:4d:ae:b6:
90:a9:d4:73:66:a9:9e:da:05:59:24:5f:a0:37:39:ec:20:13:
a5:f0:97:16:92:b2:2b:53:78:a6:9c:44:9a:df:22:b2:79:0a:
fa:32:d7:81:16:1b:b3:50:8d:75:f0:43:96:1c:93:ac:13:1c:
d7:d6:89:ea:9f:59:2e:82:75:ed:c0:67:5f:f1:1b:3e:f6:75:
c3:d9:f4:0d:ba:19:cd:e2:63:8a:d6:2b:3a:db:d5:1c:17:12:
3a:15:ad:93:d1:bd:4b:f5:cb:3a:2b:a1:b7:dd:bc:13:e0:c6:
d1:ff:1b:62:ea:7a:c4:6f:86:97:4a:aa:46:00:a8:6f:26:57:
92:7f:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 09:34:27 2025 by rpki-client