Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: xCrr9qm44LY3sMZskrjbKl74Zpfe04AIRhpLpYecbVU=
Subject key identifier: 07:FD:49:A3:6E:86:7D:28:52:80:57:70:20:79:35:25:CB:3F:C9:98
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 019922FA9EE012C44694C7E1DFBB30DA881D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 07:01:13 +0000
Manifest this update: Sun 07 Sep 2025 07:01:13 +0000
Manifest next update: Mon 08 Sep 2025 07:01:13 +0000
Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=)
2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: dYEW8fqmcNG/HanTM2yvZshhE6uS8SCjQzT5J7lOYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9e:e0:12:c4:46:94:c7:e1:df:bb:30:da:88:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: Sep 7 07:01:13 2025 GMT
Not After : Sep 8 07:01:13 2025 GMT
Subject: CN=07fd49a36e867d285280577020793525cb3fc998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f1:cc:a9:e9:00:88:e8:2e:5e:a6:59:ab:3d:
2b:22:d8:b4:77:52:62:ba:fc:18:6c:df:c7:33:90:
81:58:36:70:d7:c8:06:bf:48:66:5e:15:57:3b:57:
05:3f:d4:a8:52:d8:5b:85:d4:69:e2:d8:2a:8a:ca:
74:96:52:05:ab:60:78:f0:ff:d5:6b:41:a8:6c:98:
fd:2b:5f:ca:10:ac:f9:10:43:e8:ac:37:1b:c7:58:
bd:e1:f6:34:7a:d0:76:42:7f:35:bf:d4:bf:07:92:
38:7a:a3:86:5b:7e:d8:7b:6a:a7:49:6a:ec:7c:7b:
2c:93:10:7b:a3:54:60:13:a4:ec:df:e6:f7:75:91:
7d:ee:a5:64:1c:09:fb:d7:db:38:c6:dd:a0:75:25:
0e:ce:a1:f6:3d:3d:f1:4c:a1:70:69:73:31:74:c8:
71:98:dd:ec:8d:a4:7d:42:27:c7:2a:9e:89:6b:a6:
34:5d:0e:45:e6:0d:b9:97:a1:38:f4:e8:29:36:0c:
a8:40:2e:b9:43:84:4a:72:7c:d4:df:be:71:00:33:
97:1e:c5:61:03:3e:42:0b:e9:ac:09:5c:38:1c:f3:
2b:d9:10:42:df:c0:5a:b0:eb:7a:e9:5a:5a:73:b6:
41:3e:94:b0:5e:05:a4:07:2f:93:9b:98:8b:25:c1:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:49:A3:6E:86:7D:28:52:80:57:70:20:79:35:25:CB:3F:C9:98
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:62:7b:63:91:2c:5d:f5:9f:a4:2e:f7:6c:8f:19:c3:38:5c:
1a:86:cb:67:35:11:cc:4e:2d:28:b1:05:e5:fb:d9:42:6f:1b:
58:d0:94:b1:1d:b8:c0:01:2c:ae:5e:9b:18:6a:29:95:07:a0:
be:3a:e9:5e:4a:3e:88:3b:01:11:91:3a:bd:2d:c7:09:61:48:
fc:2c:30:46:f5:16:3b:0d:85:b0:f1:5c:84:a6:ce:ab:b4:1a:
a0:e4:bb:0a:da:1f:9a:e7:e4:34:50:ed:fd:b2:fd:ef:7a:8f:
19:c5:d5:ff:f1:be:4c:db:00:45:1b:81:9c:97:aa:08:4e:a5:
38:eb:69:c9:e1:20:a3:62:4c:b6:69:28:27:ff:0d:28:e0:45:
a4:c0:c7:c1:da:cf:43:4d:92:95:eb:22:8b:76:34:4a:c6:0b:
d5:ec:78:9c:83:d7:72:07:76:31:fe:47:d4:4a:a2:06:e2:d3:
77:19:25:d3:8c:90:2a:f3:c8:a6:7a:84:b3:ce:c8:c0:17:c1:
4d:f0:c7:06:5c:b2:9c:17:87:73:d3:e6:0b:ae:a6:fe:e1:b6:
d6:c5:4c:d7:b9:e1:ce:82:e3:c0:8c:50:e7:ad:9b:0e:85:73:
01:92:57:6e:34:c4:e2:c4:84:bf:42:c5:49:58:d8:91:f4:7e:
7d:f8:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:24 2025 by rpki-client