Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: ABvzzGbZ3S6C9JVRT7kj55ioOiOE8muLUFLj3akZSHM=
Subject key identifier: 33:D7:03:41:82:F7:29:3F:0E:82:97:3A:D8:56:9E:4D:76:3F:DA:10
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 01983916770CE7BF22313A481B1E3E7C8C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 1462
Signing time: Wed 23 Jul 2025 21:00:30 +0000
Manifest this update: Wed 23 Jul 2025 21:00:30 +0000
Manifest next update: Thu 24 Jul 2025 21:00:30 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: fkQDEqso/jGlV/+uoleFZFjih/UoedY8GYCbFEyPY0w=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:16:77:0c:e7:bf:22:31:3a:48:1b:1e:3e:7c:8c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Jul 23 21:00:30 2025 GMT
Not After : Jul 24 21:00:30 2025 GMT
Subject: CN=33d7034182f7293f0e82973ad8569e4d763fda10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:cf:51:93:c1:36:88:b7:76:76:3c:10:ba:
46:a0:78:f0:f4:08:9d:71:df:4a:79:e0:34:58:6d:
e7:bc:fe:71:68:94:95:51:8d:7c:f0:82:2b:89:7f:
a5:b5:36:c9:80:f0:ca:23:1d:88:82:c7:c3:65:8f:
d1:93:00:34:2d:24:be:fe:1e:1a:02:3d:98:6f:5e:
20:6c:a3:a3:7d:29:c1:3b:11:78:5c:47:9b:bf:e2:
6a:6d:3d:69:7b:ea:c6:29:98:8e:a0:0b:28:7b:24:
b1:d2:27:6e:b3:58:59:6e:70:02:86:89:57:a3:5f:
7c:0c:99:df:21:11:b1:e6:d3:d1:e8:49:63:c1:50:
18:49:66:cc:b6:7a:66:78:f4:4e:5d:08:27:01:23:
8c:6c:b0:ad:b7:fb:9b:67:86:c2:62:14:29:60:74:
40:a8:a0:2c:9d:f2:56:c0:84:27:15:f6:e4:f8:b2:
3a:e9:b2:f2:30:ba:a4:6e:89:02:94:80:c3:6d:71:
42:f8:1e:6f:62:08:c0:d2:31:68:0b:29:ae:52:48:
48:63:39:3f:37:41:95:7f:80:bb:61:05:66:03:37:
7b:bb:14:70:2e:57:aa:ba:36:d9:a2:ac:1f:1d:6d:
3c:41:ae:21:42:54:3a:bb:c6:bf:39:d0:f0:35:d6:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:03:41:82:F7:29:3F:0E:82:97:3A:D8:56:9E:4D:76:3F:DA:10
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:fc:b9:da:67:98:9d:36:e2:04:9b:b6:6b:cc:1b:a6:f6:
09:0f:04:22:5a:c8:30:3f:7f:40:3b:96:02:e1:6d:94:93:b3:
ed:3b:76:a5:f9:fb:36:42:2c:9f:ba:b5:8f:7a:e5:a6:90:df:
92:cc:83:24:47:12:28:70:2b:a2:6d:eb:16:7f:63:fa:69:90:
4f:b2:3a:33:e5:91:e2:5e:9e:bd:cd:95:ea:9f:13:27:f3:f0:
a9:d4:67:c9:6c:9b:dc:c2:c0:2c:6a:99:2d:36:db:1b:01:88:
e4:19:79:63:0b:1d:27:39:66:d5:b9:60:89:e3:ea:b8:42:80:
da:3d:93:68:87:6f:cc:d4:b2:b9:4b:66:46:77:af:a3:05:b3:
13:cc:0c:88:37:31:89:2f:01:ce:42:48:61:97:b2:76:37:90:
f0:87:03:1a:e5:b8:8e:5c:9d:43:1e:fa:1a:49:cd:d5:79:1c:
b5:68:b2:92:0a:d6:40:e5:30:c5:3e:8f:2b:3a:48:36:10:a7:
41:23:1a:4a:47:18:01:ec:df:55:88:d2:dd:0a:36:0b:c6:65:
18:b4:78:b2:31:99:69:6c:1d:44:df:c8:93:3f:95:cd:b0:31:
3a:6b:7f:37:19:8f:3f:0c:7a:e6:de:01:f7:0b:19:39:f0:d1:
75:55:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:20 2025 by rpki-client