Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: h9udhQuYpW9pKGfN0RMHeXujLVGi760uvlMgun11VR8=
Subject key identifier: 7C:90:70:FB:26:24:9F:74:00:EC:BA:8B:C4:E6:38:BF:78:70:43:56
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019848F796B08F7A18F0B1AB0464312398B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 0494
Signing time: Sat 26 Jul 2025 23:00:42 +0000
Manifest this update: Sat 26 Jul 2025 23:00:42 +0000
Manifest next update: Sun 27 Jul 2025 23:00:42 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: jDCsi/26TfLnta9DlFrKwTtch/bXHVWQvAS1T3E3OnI=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:96:b0:8f:7a:18:f0:b1:ab:04:64:31:23:98:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Jul 26 23:00:42 2025 GMT
Not After : Jul 27 23:00:42 2025 GMT
Subject: CN=7c9070fb26249f7400ecba8bc4e638bf78704356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7f:00:eb:e5:91:7a:97:42:29:e9:37:c6:3f:
aa:ea:74:f7:32:4a:b7:8a:a1:68:10:b0:fa:1a:86:
e2:58:14:16:e7:70:79:b8:d2:f4:84:52:eb:1d:2f:
de:f1:90:a7:83:2a:28:a7:83:b9:e6:e5:62:92:fe:
12:bf:1c:37:63:2b:12:f3:0c:67:44:4e:af:5f:f4:
fc:ab:e0:75:6f:98:b4:6e:e1:1d:2c:b7:a7:06:b9:
e9:1e:2a:e1:53:62:0e:a5:bd:ca:ce:99:36:f2:c0:
4e:ed:08:35:a6:f7:4a:87:13:93:f2:37:c8:8f:fa:
99:21:d8:d1:1b:c1:b8:e5:16:7b:1a:e9:ba:9b:0d:
19:8c:83:a9:4a:5d:78:4b:59:1f:60:e4:6b:cf:ce:
a8:39:46:ca:4e:64:8c:7e:ec:17:6c:ea:dd:bd:5b:
58:17:d1:bf:fa:e1:01:d3:b2:b7:d9:bb:aa:44:27:
ec:a6:7c:2c:45:fd:09:9a:a0:6c:e5:f3:d0:72:a2:
b3:87:36:2a:69:9b:04:62:49:95:6d:7c:64:43:32:
c8:a8:d3:5e:d8:83:48:c9:90:09:9a:97:e1:cb:9a:
a3:46:c8:a5:de:0c:d1:9d:48:67:df:7c:9c:1d:cf:
1b:e3:f8:fb:44:16:e3:90:0f:40:71:99:7c:2b:20:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:90:70:FB:26:24:9F:74:00:EC:BA:8B:C4:E6:38:BF:78:70:43:56
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2a:30:02:39:b4:b3:53:d2:2b:1d:1b:ba:23:22:61:ec:0f:
ca:3e:6e:be:96:b0:5c:ac:09:02:3f:c4:ff:79:36:64:73:eb:
ce:ba:41:13:0a:a5:f3:d8:99:18:f0:2f:c0:5d:ac:52:0e:08:
d9:4b:a4:5d:31:1a:a4:73:58:6c:b9:b1:c6:15:11:03:1f:ae:
43:5b:9d:7f:d6:55:ba:d0:e8:47:c2:a8:23:01:52:1f:c9:e4:
3a:25:ad:da:85:06:7c:99:0f:78:91:68:8c:ab:e5:c2:55:19:
6e:88:54:7a:c1:00:b7:87:34:93:0b:d4:5a:21:1b:b2:0f:1d:
1c:26:52:93:03:97:b2:03:5a:96:76:3f:67:c8:b2:ba:f6:e2:
13:b5:99:fb:52:87:1d:3a:ae:46:71:3c:a7:d0:b1:e7:3a:32:
41:71:9b:80:78:6c:ff:2a:09:d2:1b:f1:45:9c:b5:e6:94:99:
f6:87:7c:11:cb:e2:86:90:aa:22:37:1e:d1:a0:61:ae:4f:30:
96:0d:d8:26:53:c1:2e:e4:02:08:24:c8:b4:70:ab:28:61:1b:
7b:72:4e:48:a5:f6:17:34:f2:d5:44:a1:33:b3:92:94:06:ce:
4e:e9:a3:93:1d:d1:92:11:76:da:f2:66:41:3f:63:04:70:3b:
a3:34:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:49:21 2025 by rpki-client