Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: QwArdT5jbYwd169e8rfDacG/VwYO+43R1ekJ1YukrQY=
Subject key identifier: 53:FF:E9:A9:31:B1:CE:F5:E4:DD:C0:CE:1A:2C:00:F5:8F:62:96:5C
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019923D5EC65510F5CE32E6C0A9D23C51389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 11:00:46 +0000
Manifest this update: Sun 07 Sep 2025 11:00:46 +0000
Manifest next update: Mon 08 Sep 2025 11:00:46 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: z+35wnu45Q4oAi/2iiNURxABBm6IJjqF+eoUHhqG3po=)
2: gq0u0nuGqZ56yv0huU0NYxq2Tuw.roa (hash: BWs37rngd3jbS0e8ne6CGjqZDK9zmWcTutRQQlknGKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ec:65:51:0f:5c:e3:2e:6c:0a:9d:23:c5:13:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Sep 7 11:00:46 2025 GMT
Not After : Sep 8 11:00:46 2025 GMT
Subject: CN=53ffe9a931b1cef5e4ddc0ce1a2c00f58f62965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:d5:b5:47:5f:82:4a:b4:69:70:22:f2:ce:
c1:29:53:2d:46:eb:9f:fe:79:05:98:f4:ea:ca:c8:
81:dc:ec:a9:c2:bf:74:15:44:9a:d1:a8:6b:27:e5:
10:0e:8a:79:3e:50:4d:7e:bc:5f:d3:0b:2f:99:47:
1a:08:e5:00:26:4e:ac:e5:85:a6:69:57:79:fe:2f:
1a:e3:8e:96:4c:8e:81:60:bb:d0:46:e2:b3:67:6c:
17:d9:fe:1f:39:cf:1a:3e:08:d5:e5:2b:e3:82:ca:
7a:ad:28:a4:cb:99:28:b4:5e:f3:17:88:89:33:2b:
2a:d3:c9:1b:a6:b2:e7:31:9f:ac:cc:57:53:b1:3f:
c2:fa:2d:28:23:ab:a0:64:5b:e3:12:79:54:8a:71:
fc:3a:e1:d8:8e:76:e6:33:5b:31:30:fc:5d:e6:75:
8e:0d:02:c2:32:b7:e9:8c:b5:09:81:79:62:54:69:
91:2c:1c:47:f1:24:38:71:1a:57:09:bf:ac:2d:84:
f7:6b:1b:2c:b6:2d:54:78:b8:92:cb:2e:93:73:f6:
22:78:51:05:cb:0e:9b:cd:3b:2a:38:58:84:f1:f8:
ea:b0:4b:fa:52:54:12:18:c4:e6:18:53:86:aa:bc:
d2:17:8b:8a:98:4b:d6:fc:cc:42:77:cc:bb:fd:00:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:E9:A9:31:B1:CE:F5:E4:DD:C0:CE:1A:2C:00:F5:8F:62:96:5C
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:83:65:2e:b8:c3:9e:12:0e:6f:41:e5:7e:09:be:3b:27:bc:
42:83:a1:8f:e3:03:a1:31:74:22:92:14:18:1b:89:de:ef:14:
ed:f6:18:4b:98:91:3a:a4:1d:9e:6c:14:d0:08:13:6f:15:0a:
9f:19:94:ba:dd:72:e3:03:68:61:18:a3:65:9f:7d:e4:5e:08:
0a:8d:ab:f6:01:48:36:4f:66:91:49:50:4a:68:81:7b:96:4e:
15:87:dd:de:63:af:75:15:a0:43:04:05:ad:3a:ac:63:48:84:
7e:20:0d:13:a3:ab:6f:ce:34:e4:30:62:9b:97:44:6e:24:f7:
38:51:70:be:67:94:28:bd:01:66:3c:cd:17:30:94:9d:d0:8c:
89:de:7f:aa:bf:10:1d:30:3a:af:12:52:a5:bd:cc:ea:c3:58:
3a:68:18:7a:11:ef:7d:79:6c:39:91:90:ea:c9:dc:92:2f:6c:
a0:fc:87:02:ec:e0:a3:54:e1:3f:28:03:87:5e:86:1d:6d:05:
be:bd:1f:d0:5b:c8:7d:46:d4:bb:61:6b:64:f6:1d:c8:87:5c:
c3:32:76:79:dc:c4:f3:f0:e3:1a:c5:76:e6:70:38:28:c1:1a:
37:85:2b:e7:94:ce:7d:3c:a4:c2:a9:a3:ff:f6:19:c3:5f:f8:
48:65:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:10:28 2025 by rpki-client