Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: 5DM+qIyHC2oTdgOAx6xnwAl2Ecci0uuQM3a8XxHWlKM=
Subject key identifier: FE:71:2D:8E:1E:E3:15:1B:DD:46:6C:5F:CE:6F:82:01:55:EE:2E:C7
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 0198CAC8E34F70B6A46E326BDA7434E85103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 1195
Signing time: Thu 21 Aug 2025 04:00:19 +0000
Manifest this update: Thu 21 Aug 2025 04:00:19 +0000
Manifest next update: Fri 22 Aug 2025 04:00:19 +0000
Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: lQftAdKcQvvCpnR0x3Cg7fKw53rj9E2/orZGAa1sM7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:c8:e3:4f:70:b6:a4:6e:32:6b:da:74:34:e8:51:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Aug 21 04:00:19 2025 GMT
Not After : Aug 22 04:00:19 2025 GMT
Subject: CN=fe712d8e1ee3151bdd466c5fce6f820155ee2ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:7b:15:8f:a0:28:ec:45:e2:10:08:f2:6e:
07:ec:f7:4c:d6:f2:a4:4c:b6:f4:13:57:c8:ae:16:
79:b8:3e:53:a6:1b:d3:b0:5c:b8:fd:87:70:bf:3a:
24:60:a2:a6:94:4e:32:13:46:c2:e3:0c:26:db:d7:
04:6c:52:a6:80:e0:89:02:46:ed:a7:38:6f:22:4e:
61:5d:86:de:05:90:fc:87:c8:0f:5e:fe:0e:be:fe:
2d:64:19:6a:ef:1c:e2:c3:b5:8d:a2:ef:81:34:ad:
d0:27:14:21:96:94:76:69:fe:c5:0f:c6:ed:2b:82:
dd:26:5d:0f:81:f9:c1:81:1f:d1:a5:21:47:f6:f2:
e8:c1:5a:6a:cc:bb:ea:84:9d:3c:f0:e5:ef:5c:cd:
a5:c2:43:25:4e:02:f7:19:29:ea:01:cc:47:9f:92:
f6:68:dd:2e:23:0d:d8:57:ef:21:43:29:30:e8:d5:
ed:f4:5b:5c:d8:6b:1e:2a:47:fc:13:91:50:07:ac:
4b:d8:dd:77:33:38:81:7f:24:81:e9:fd:67:e8:ca:
58:c7:1b:6a:30:d6:11:fc:17:41:6d:08:9f:dd:78:
93:0f:43:e4:e9:da:6c:f2:bf:6e:84:37:3e:1c:98:
2c:7b:77:6d:63:d6:e1:a2:a7:92:48:71:eb:fb:94:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:71:2D:8E:1E:E3:15:1B:DD:46:6C:5F:CE:6F:82:01:55:EE:2E:C7
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:52:3b:99:24:ef:ef:3a:9a:20:a5:76:12:df:2e:90:9e:59:
2a:20:bb:5d:fc:5e:68:ba:6e:65:10:03:70:e7:f5:b1:aa:75:
34:29:7a:f9:8d:0e:9f:7e:3b:27:74:ac:be:eb:2c:30:55:ad:
af:87:54:7f:31:24:56:c2:94:ae:ed:1f:bb:a9:fe:21:0c:2d:
79:83:1f:88:ce:81:b4:de:18:06:a4:c8:98:10:c1:a0:89:ac:
a8:d9:0b:ef:cf:76:04:d3:fe:22:a9:4a:50:73:fd:4e:91:bc:
7b:36:80:d3:4c:bd:a9:27:95:de:b1:72:d5:94:9d:3d:ff:46:
d3:0f:81:25:88:69:d1:74:3b:67:99:ee:7b:d0:50:e5:96:f0:
66:9c:e1:b1:fa:ca:b8:ee:a7:bf:51:ae:9b:6c:0e:aa:4f:c8:
40:02:e9:9b:61:3f:3f:66:fe:dc:7d:60:09:d2:d6:92:df:b4:
82:ba:f4:b9:ac:e9:4d:c2:0c:3a:da:1d:50:2c:39:3f:79:14:
80:bf:7c:57:7a:03:6b:d7:5d:e2:3a:b3:11:e3:fe:cd:4c:ec:
85:87:a4:a1:61:43:5e:32:db:07:8a:44:13:c6:86:4f:77:de:
a3:5c:5a:15:23:71:dc:7d:48:47:3c:18:bd:f4:a8:b4:87:7d:
bd:96:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:50:08 2025 by rpki-client