Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: qzCX+bndEYvsCAHa5qoXGhWpsns+VI5hhWx/vV5w4KI=
Subject key identifier: 0A:D6:A7:58:CD:0B:40:4D:33:30:C9:3A:5F:1B:35:8F:38:DD:06:1E
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019849D3821EB3A63E75D1DA511AF2320351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0B38
Signing time: Sun 27 Jul 2025 03:00:54 +0000
Manifest this update: Sun 27 Jul 2025 03:00:54 +0000
Manifest next update: Mon 28 Jul 2025 03:00:54 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: +0n3VJ0disJj382Ew4n6GWb8fHQ7CzDFBT4FJxxDcUw=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:82:1e:b3:a6:3e:75:d1:da:51:1a:f2:32:03:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Jul 27 03:00:54 2025 GMT
Not After : Jul 28 03:00:54 2025 GMT
Subject: CN=0ad6a758cd0b404d3330c93a5f1b358f38dd061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:82:3d:78:55:71:f7:1c:cf:63:f1:c7:e2:
1f:b2:44:09:bd:96:f7:d7:5c:a5:86:d0:10:41:52:
56:84:fd:70:d1:65:4a:fc:90:67:46:d4:7e:72:44:
c6:d0:e6:6b:1b:50:8a:31:61:2c:b6:ed:6a:79:bd:
9c:2c:9e:d5:1d:f7:a3:6d:8a:cc:27:5a:44:be:93:
56:25:96:53:6d:6f:3f:bf:d4:86:62:b1:c2:af:89:
65:6d:57:23:d6:cc:8a:90:fa:a7:fa:04:63:e9:52:
1e:b4:19:10:bd:df:7b:1b:c9:4f:bc:89:a4:61:57:
ee:45:bf:9e:c8:5f:e0:82:66:ce:7d:3f:79:fa:1e:
dd:ef:86:f0:5a:0d:9e:74:48:4e:bd:e7:b8:db:86:
34:57:0a:02:d8:3c:68:dd:8a:64:5d:a9:c5:48:f0:
2e:24:16:03:1a:b5:35:da:74:e0:52:f1:2b:98:6e:
f9:fb:9e:72:09:7a:58:57:81:e0:49:3e:8c:e3:33:
fe:58:84:df:a7:24:49:55:80:20:05:1f:b4:53:93:
0f:dc:ff:1c:ca:66:4d:9c:1a:00:2c:4e:e5:15:5e:
98:1c:c4:18:53:1f:3e:20:59:cf:95:10:68:c8:82:
e1:c3:f5:f5:67:b8:c5:ef:42:4d:32:18:22:4c:b1:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D6:A7:58:CD:0B:40:4D:33:30:C9:3A:5F:1B:35:8F:38:DD:06:1E
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:3f:0a:0f:3c:79:40:de:db:41:12:e8:8e:43:e7:8e:f4:
5f:c0:6d:6d:5a:aa:66:3c:9e:73:17:a1:62:d0:1d:a3:90:3d:
dd:66:97:c9:9f:41:2b:47:91:4b:c2:5b:0a:de:bc:97:a7:2a:
93:ec:dc:83:a1:ce:ed:1b:29:80:c0:a3:66:84:4d:1d:63:fb:
97:26:b6:fd:cd:d9:ec:7e:6c:e7:13:f3:8e:6c:7e:10:90:36:
d8:25:a3:5e:15:7f:6e:b9:98:77:08:16:78:f9:73:81:a5:14:
8d:3a:7d:6a:b7:dd:63:c8:8e:98:07:f3:b2:3a:25:1c:dc:e7:
9f:58:48:ff:88:7d:1e:bc:90:7e:bc:ec:01:dd:5d:d0:9d:c5:
c1:eb:ed:8b:6f:77:f1:3a:74:09:9c:cd:fc:ef:08:d0:61:52:
64:50:e4:e6:37:4b:56:7c:36:a4:5a:4e:f8:e2:f8:3e:35:da:
07:cd:59:20:44:45:68:0c:83:c0:c0:01:a6:28:c8:02:dc:4d:
1e:8a:ce:69:e5:a6:36:c1:a4:6c:60:8b:ff:e9:a9:e9:81:e9:
72:66:ba:ba:0a:4d:f1:e8:d6:95:81:ac:ba:02:1c:22:b1:49:
90:3b:b9:d8:43:b2:ed:88:3d:08:a6:42:8f:43:44:8e:e3:53:
03:9f:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:32 2025 by rpki-client