Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: zO6FEIzt8xzL5enWk/CeOX7zbD27JZid6HioCi7wJ1g=
Subject key identifier: AE:55:23:DE:E9:2E:6A:CA:ED:2F:31:64:32:C6:89:21:56:98:57:56
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 01993492B9C41361A09BA5B7EDDE9A3B5528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 050E
Signing time: Wed 10 Sep 2025 17:00:54 +0000
Manifest this update: Wed 10 Sep 2025 17:00:54 +0000
Manifest next update: Thu 11 Sep 2025 17:00:54 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: 9hMwqMurUQxun4KZ7Nk6+NB/pCv719VHrnvXEAKyLRo=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:b9:c4:13:61:a0:9b:a5:b7:ed:de:9a:3b:55:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Sep 10 17:00:54 2025 GMT
Not After : Sep 11 17:00:54 2025 GMT
Subject: CN=ae5523dee92e6acaed2f316432c6892156985756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:e3:e3:3b:e3:2d:57:58:a2:5a:eb:e9:9c:
ce:8f:43:86:42:f2:d0:0c:9e:4a:1c:5e:18:98:b3:
91:53:91:5d:56:80:bd:cc:c9:9d:19:55:ea:88:38:
63:ea:63:fe:13:2b:66:e6:c5:7a:c4:a0:6f:40:e5:
a7:f8:a2:b9:b1:eb:dd:0f:20:ef:a4:b1:c4:a1:cb:
cb:e3:4c:13:8b:a6:85:ed:48:ea:91:54:4a:8f:4f:
2f:62:4a:4c:65:a7:c8:5f:a4:77:63:29:4c:d6:f4:
67:c1:90:3f:dc:f8:b6:05:b2:39:e7:1f:a7:90:74:
bc:ac:15:ec:96:d6:db:e7:07:4e:e4:b6:95:ad:68:
3f:23:90:44:70:a7:fd:ef:07:11:d6:2c:99:32:cd:
3a:44:8d:d6:89:86:5b:f3:70:13:54:ee:66:1e:ec:
44:b4:de:5f:6a:bb:bb:9d:31:4b:73:ab:b4:a6:ed:
21:59:84:2d:6d:b2:54:b2:c2:d2:92:16:a3:3e:5b:
52:36:e7:62:bf:6d:af:7b:47:50:5e:99:4f:16:89:
95:e2:97:9b:51:fc:e4:f4:b8:a9:48:b7:7e:95:ad:
1f:e7:45:3b:d6:e0:60:1a:90:87:a1:4b:4c:6f:07:
a7:cd:72:8b:62:94:29:56:d2:15:87:5c:e8:4b:27:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:55:23:DE:E9:2E:6A:CA:ED:2F:31:64:32:C6:89:21:56:98:57:56
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:f4:c0:bd:29:94:41:81:b2:37:5b:36:2f:2c:13:d3:7f:3d:
26:b7:a6:00:58:30:a5:e3:f5:ff:8f:b5:9b:7d:14:9d:50:3b:
5c:44:40:ea:57:84:c4:df:57:cf:45:c4:e3:04:44:eb:70:79:
4a:2b:1a:ec:6c:50:8a:87:8f:ae:ba:e9:19:40:3a:f5:55:d0:
0b:76:19:da:ab:ec:01:a7:b2:3a:45:d5:81:71:e0:42:f0:22:
1b:80:07:f9:e7:03:65:3d:ca:25:8a:61:a8:4e:3a:1d:e6:68:
70:dd:7c:7f:b5:59:93:cd:c2:77:24:ca:e7:38:1d:c7:e0:b4:
2f:ce:ab:6a:01:49:4f:da:15:9c:70:63:ea:b4:10:db:e7:0b:
8e:dc:ec:19:82:dc:22:70:da:97:fb:c5:1e:cb:b2:2c:f3:f1:
f3:b0:e9:bc:4d:8a:fb:84:74:2f:26:99:9c:03:d7:8f:57:99:
87:5b:7e:20:61:84:e8:5f:90:45:a3:d3:12:57:dd:58:48:ac:
9f:a9:e9:1c:8f:19:e5:1d:d7:f3:90:6a:33:f0:c1:d6:c4:3c:
07:d5:98:5c:7f:96:52:97:94:e6:d9:e0:de:a4:c6:3e:7f:27:
b3:33:1a:82:fb:59:ed:b5:b3:73:7f:c8:0d:b7:54:ce:6a:f9:
ba:69:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:14:58 2025 by rpki-client