Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: a6f6hAupEtnpWTEonbqbjVDNX2VTXXw26qOrVrEIhcI=
Subject key identifier: 07:97:9F:4F:26:54:87:62:3F:C8:33:DE:2C:4F:C2:38:89:55:3F:E9
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 019935DC4D0564BE54403DD4F943FA031BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 049B
Signing time: Wed 10 Sep 2025 23:00:54 +0000
Manifest this update: Wed 10 Sep 2025 23:00:54 +0000
Manifest next update: Thu 11 Sep 2025 23:00:54 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: YAX5m8Ed80qfYd3y6Rxf2ZdIqaHBBRO7Z8zTHlrYRgc=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:4d:05:64:be:54:40:3d:d4:f9:43:fa:03:1b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Sep 10 23:00:54 2025 GMT
Not After : Sep 11 23:00:54 2025 GMT
Subject: CN=07979f4f265487623fc833de2c4fc23889553fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:64:fc:71:a7:74:25:4f:a1:e2:3c:09:11:
5b:9c:36:7b:38:fb:cd:5e:f8:5f:dc:01:80:30:ce:
c8:14:bf:23:a5:70:a5:e7:b7:e9:e4:3c:28:9d:7c:
dc:a6:3f:b8:e4:f9:6c:61:c9:90:cc:4f:87:87:78:
6a:31:88:28:4d:2b:f7:55:ca:89:b5:b4:44:7c:72:
0d:5d:85:e6:96:6d:8d:24:0c:04:02:b2:6e:40:b8:
bf:c2:17:d1:7a:ab:5e:63:fb:b3:70:9e:5f:90:43:
bb:17:25:cd:83:83:79:13:e6:46:0c:19:50:b0:52:
9b:01:33:c5:c2:59:9a:3e:e9:4e:43:ac:2c:39:e5:
9a:56:74:9d:f5:ec:41:9f:e3:58:64:d8:f3:c1:e0:
54:94:b9:3e:e2:f2:20:59:71:7d:b1:9c:44:31:82:
7a:8b:03:45:30:dd:2d:a5:de:7e:a4:83:f6:14:06:
26:8f:57:41:cf:03:8a:06:93:4f:07:2d:3b:d5:8b:
3f:ac:fe:13:94:58:93:fa:26:8f:e8:c8:38:47:e1:
2a:c0:8e:03:2b:07:c9:be:30:af:f7:26:98:ea:0b:
82:d5:2e:f7:cc:94:b8:d0:33:22:7d:d7:83:ce:f4:
fb:44:fa:37:92:56:6b:82:2b:b6:18:a7:5d:12:59:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:97:9F:4F:26:54:87:62:3F:C8:33:DE:2C:4F:C2:38:89:55:3F:E9
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:53:f8:34:54:51:ab:dd:99:5c:42:f4:91:dc:78:5e:b2:d1:
70:86:9a:55:84:1f:3c:8f:6a:6f:a0:c6:5f:d5:6e:c6:bf:39:
ce:6d:14:61:a8:de:87:0f:3d:2f:16:63:0a:6e:2c:c8:2e:52:
ba:d6:ea:36:ba:91:8a:e2:45:89:68:24:6f:db:52:ed:13:3a:
8c:36:d9:19:85:ee:2b:4b:01:5b:fa:92:0e:2f:77:59:7b:f4:
c9:70:19:7e:ea:e4:28:28:f9:57:fa:1a:6f:54:b8:fe:e3:bf:
55:54:f9:f6:59:61:9f:2e:47:a3:36:ef:7c:81:22:b1:48:6c:
f3:01:e7:a3:7d:96:51:7c:c3:b7:53:22:8c:2d:da:2a:56:de:
24:9a:aa:83:c1:96:06:32:c1:fa:35:ba:51:b1:ea:06:e7:12:
2b:1c:c4:00:71:09:63:46:75:c6:86:23:17:f3:10:ea:e9:76:
9e:f2:dd:65:cc:ca:b2:68:b2:5d:07:15:f9:8b:ed:f8:f6:4d:
3c:be:d5:a7:af:26:4e:ee:d7:8c:35:50:5f:d3:eb:4a:af:06:
ff:2e:c6:6b:57:bc:dc:eb:2a:d3:2f:f1:61:c0:b9:3f:5b:01:
c5:a4:ad:d5:ff:48:de:fb:24:53:ec:1f:3d:b7:39:5d:04:2d:
35:63:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:57:58 2025 by rpki-client