Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: YaG3heCBRSJBIB4sdpiIwklRwlRhAYw6DpqUZ9jiKCk=
Subject key identifier: 92:6A:9C:3B:93:CC:9C:67:1F:3D:C9:0C:A6:75:E4:63:D3:2D:32:95
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 0199288E640987184AEFB904E311DD3046BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 14DE
Signing time: Mon 08 Sep 2025 09:00:44 +0000
Manifest this update: Mon 08 Sep 2025 09:00:44 +0000
Manifest next update: Tue 09 Sep 2025 09:00:44 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: xa6rJziXU7jxIk4Uhh7Mz9PjFRRZfZ1IKlEAY/cQouA=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:64:09:87:18:4a:ef:b9:04:e3:11:dd:30:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Sep 8 09:00:44 2025 GMT
Not After : Sep 9 09:00:44 2025 GMT
Subject: CN=926a9c3b93cc9c671f3dc90ca675e463d32d3295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:80:ad:3f:07:49:4a:50:6f:ce:c2:dd:39:
1d:e0:13:9a:99:16:20:f4:65:7c:95:83:68:48:af:
de:96:08:31:6b:ee:60:b3:ad:ae:30:6d:c9:42:08:
30:4f:97:c6:33:2f:1b:7d:e3:2b:0e:4a:96:f8:d5:
c3:e5:ee:b3:d9:1a:2d:38:a1:91:91:32:1e:b6:4d:
1a:94:a5:c7:23:2f:24:73:7b:02:a6:f5:c7:71:93:
03:94:3c:a2:8e:62:39:e4:e1:f1:e9:8a:94:dc:e1:
15:e0:f5:17:c6:46:9f:7b:42:e0:2f:ef:ca:97:39:
b2:63:c0:94:92:22:7b:7a:f4:9b:b6:80:30:35:c4:
e6:e1:b7:de:13:69:22:7f:4f:77:67:14:64:06:18:
fd:94:98:66:e1:75:dd:e5:48:cf:28:52:a6:bb:79:
85:a2:db:fb:f2:67:cf:db:ca:18:48:ad:d6:24:8c:
28:86:18:58:aa:77:39:02:34:64:d1:b1:32:5a:9c:
00:13:20:8a:1b:64:b8:8a:9e:55:2c:6a:22:44:96:
61:9e:db:27:84:42:0d:53:2b:94:b0:eb:46:e5:bb:
f2:f0:3a:5e:2b:aa:23:a3:d2:81:00:f1:32:32:aa:
af:9c:63:ec:bb:34:74:f4:72:9a:56:d1:15:58:7e:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6A:9C:3B:93:CC:9C:67:1F:3D:C9:0C:A6:75:E4:63:D3:2D:32:95
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:fd:90:f7:71:53:b9:6c:65:93:1d:9a:58:3b:13:01:72:3d:
ed:1c:32:32:25:32:1f:f6:1d:99:97:6e:85:63:db:46:96:d2:
11:77:ed:a0:9a:96:76:72:59:b7:a1:5d:5d:0a:fd:8e:22:54:
2c:bf:2b:6a:e5:7c:46:f8:3b:ea:c7:45:e2:88:b0:ff:95:af:
45:1b:5e:28:a6:b4:79:70:1b:df:3d:26:2f:7d:95:9e:2c:37:
b5:c5:b0:87:c9:eb:7a:d7:b0:9b:c9:a8:c0:d5:91:b9:0b:36:
a6:c5:23:67:e0:bc:37:25:d3:11:35:b7:bb:82:62:85:6e:8c:
d8:d2:09:3f:38:65:9f:33:03:ff:e6:b5:bd:d7:64:8d:10:b6:
47:09:df:ce:1f:d3:a7:72:0b:97:03:84:24:72:eb:4b:29:33:
09:3e:a1:5d:e6:c6:e2:89:3a:5e:31:f9:cd:98:3f:40:3e:0f:
0d:a1:c7:48:32:77:a7:07:97:f2:0f:6a:d8:5d:3d:20:59:07:
38:f0:2e:d7:28:c1:3f:00:63:e4:8d:25:5b:5f:0b:e4:24:7f:
7c:50:6f:69:f6:f4:aa:51:84:ed:94:41:60:95:62:a3:f8:26:
e8:3b:69:19:25:51:87:a4:ca:f3:fd:19:60:ea:ca:72:c3:44:
82:c1:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:20:08 2025 by rpki-client