Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier: xSS8xRogGmLb9nDAIr7wBQZlwYf8bZRaIQJl8KBVEZ0=
Subject key identifier: 35:26:3E:D6:29:64:15:8E:DC:78:DF:1E:EB:54:6B:B9:E9:14:CE:64
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial: 01984776B6FBD78D5A00F5FFD6AD6AB40EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number: 01AB
Signing time: Sat 26 Jul 2025 16:00:19 +0000
Manifest this update: Sat 26 Jul 2025 16:00:19 +0000
Manifest next update: Sun 27 Jul 2025 16:00:19 +0000
Files and hashes: 1: R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa (hash: ir5koZmhGGNuMOajWDB8hvuKf0qBoIQa1qm6cPf+lx4=)
2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: k3X21S+U/YfxgYO+dYWrNZNlE588JD0BtNtwTX+45QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:b6:fb:d7:8d:5a:00:f5:ff:d6:ad:6a:b4:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Validity
Not Before: Jul 26 16:00:19 2025 GMT
Not After : Jul 27 16:00:19 2025 GMT
Subject: CN=35263ed62964158edc78df1eeb546bb9e914ce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:94:7a:62:57:81:7f:5c:88:54:18:3f:76:
59:fc:ce:ae:9a:09:c2:c5:63:a3:a0:fd:b8:8b:c6:
23:8f:48:f5:06:4b:4d:52:10:da:55:5e:24:c1:86:
3a:94:c6:97:9a:49:f6:0c:4a:31:c8:fc:b4:fc:62:
78:af:f7:e8:48:0e:75:5a:e5:4c:a1:47:ff:6c:63:
25:63:09:72:98:9c:43:4f:bd:c9:43:24:74:0f:ea:
c4:95:da:7e:89:bd:ab:35:36:fb:1a:90:f3:3e:7d:
cf:28:c2:e3:f8:be:b3:3d:e6:a1:84:21:38:e6:08:
04:90:17:e5:21:46:c0:80:42:3c:b9:7a:08:a8:be:
52:ee:82:f9:d1:68:cd:a1:37:4c:18:61:52:c8:b7:
07:17:77:f6:b6:ef:05:6d:e1:5b:ce:a9:c9:c2:71:
2f:2e:62:43:87:14:9c:ba:e7:0a:07:e7:65:f8:66:
9b:fb:7d:28:95:6e:25:c3:2a:c2:4a:73:fd:03:ed:
d6:ae:11:ca:87:b6:57:9b:96:fe:72:35:a4:14:53:
7f:9f:c6:e9:29:f0:f6:e6:4b:44:f3:94:88:ef:85:
d5:bb:ca:53:d5:2a:e3:54:ea:9f:b8:b0:f4:ba:71:
a1:26:a7:7c:5f:a6:2e:fd:cb:54:9a:82:0b:09:8a:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:3E:D6:29:64:15:8E:DC:78:DF:1E:EB:54:6B:B9:E9:14:CE:64
X509v3 Authority Key Identifier:
keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:df:3e:85:e1:a9:fc:18:ba:68:40:f9:57:a8:71:2c:94:
74:29:53:73:71:3c:b2:45:97:87:c5:47:be:12:1d:17:60:e5:
d4:cc:38:73:8e:e3:8c:af:a0:07:c0:28:b7:ce:b9:97:a5:4f:
84:d7:c1:4d:a1:00:c2:d4:42:06:f7:e8:0b:dc:9e:cd:76:d1:
a1:d2:a5:ac:f1:0c:61:dd:27:1e:5c:b8:29:d6:04:bd:78:1f:
07:06:75:17:64:e7:84:97:61:7a:40:ae:d9:f1:ce:75:75:e0:
dd:ee:86:96:8d:15:e9:33:d1:2d:64:3d:28:9a:e1:f4:35:8d:
55:a8:7d:45:0d:a2:c7:27:43:bc:f7:9d:ee:20:b4:e0:53:4f:
05:b4:c7:a9:36:ec:35:56:1b:b2:9e:20:77:47:6b:7a:78:77:
d8:23:f7:68:fe:fe:32:7b:0e:37:8b:eb:45:e8:d2:1b:15:57:
58:40:83:8f:3a:35:21:02:17:22:ea:50:fc:16:4b:79:e0:79:
f0:1d:76:e7:2d:29:2f:b7:df:cd:4c:9f:89:cf:ca:7f:34:bc:
e9:b6:a2:e5:8e:3f:1e:6f:fe:ec:00:f5:a1:5e:93:8d:eb:55:
67:0c:8f:64:6a:47:86:f1:06:d0:01:89:54:e4:ef:af:f3:0b:
66:6a:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:31:27 2025 by rpki-client