Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: LTV2eLC5DUgDrDiK4ZgXlucvFMt1i6Wpxidb+p/HsEI=
Subject key identifier: 00:22:3E:48:37:B0:C1:8D:11:88:0A:BF:D8:65:2F:9C:37:EC:FC:EC
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 019922557A13361FCFE74FD93C12FD3459BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0DE5
Signing time: Sun 07 Sep 2025 04:00:50 +0000
Manifest this update: Sun 07 Sep 2025 04:00:50 +0000
Manifest next update: Mon 08 Sep 2025 04:00:50 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: mM2YohhgW/d0TddG3HkeMJNuMNVmUexHGxzm26w+1Y4=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:7a:13:36:1f:cf:e7:4f:d9:3c:12:fd:34:59:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Sep 7 04:00:50 2025 GMT
Not After : Sep 8 04:00:50 2025 GMT
Subject: CN=00223e4837b0c18d11880abfd8652f9c37ecfcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:ce:15:fd:47:89:5f:e3:24:a4:fb:dc:04:
ba:db:16:02:e7:d1:f3:87:d5:9c:e0:eb:eb:66:44:
9e:97:e1:fd:14:5b:31:6b:36:12:cb:9f:08:51:23:
c3:ee:d1:5f:15:ed:4b:17:f8:ee:48:02:ae:94:4e:
95:a8:ab:43:e3:ed:63:24:8e:2b:33:f4:4b:80:ef:
02:66:2e:d6:46:1a:32:1e:51:26:61:d4:b6:cf:c2:
ca:21:c6:62:c8:1c:1d:00:55:61:ff:9a:d1:90:85:
75:1b:97:8b:fa:ec:79:bc:08:51:3a:c5:21:3d:00:
d0:5e:77:2d:ee:ad:bb:6f:c4:92:39:f7:3c:34:bd:
1b:97:a7:48:9f:f6:a0:1e:65:82:20:e9:94:f0:99:
b3:18:fe:9c:37:15:80:f4:2f:4e:2c:52:91:4f:35:
4f:9d:64:f8:9c:6b:e8:70:8d:9e:55:14:87:b2:91:
8a:0d:2b:2a:26:67:c3:da:af:c8:a1:70:21:4e:2b:
c5:13:a0:91:fc:72:3a:41:00:5b:01:23:6d:16:88:
08:b9:f9:4e:ba:51:99:d6:88:8b:34:4f:a1:a7:5d:
b8:64:d0:aa:4f:a2:0b:8c:de:36:18:1a:63:7d:0e:
c0:a9:ae:94:96:b7:d4:9b:1b:b1:f2:60:c3:06:e9:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:22:3E:48:37:B0:C1:8D:11:88:0A:BF:D8:65:2F:9C:37:EC:FC:EC
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ea:73:59:27:c7:7c:c5:42:f5:55:d7:02:6e:80:65:d9:a5:
99:6d:35:45:dc:f3:bd:73:9e:03:42:1e:cf:e3:ed:11:27:7e:
16:4d:df:89:1e:ca:b5:ff:da:8a:1d:59:94:66:ec:ac:0c:92:
bb:dd:0d:0f:05:b8:a0:47:df:c9:e6:13:56:04:63:8e:ba:1b:
c5:38:d2:9a:eb:ab:81:11:26:c4:69:c1:bb:ed:d4:c6:75:fa:
51:2e:9f:df:23:54:28:ce:5d:3b:b0:14:af:b8:ea:18:d7:e1:
b5:15:60:96:bf:73:b6:40:d3:66:3c:b0:06:ac:b2:e1:c2:11:
39:04:52:33:69:0e:68:a0:25:7c:f6:d3:76:f5:cc:00:8d:f5:
74:c0:58:e0:3f:9b:19:f6:05:b0:d4:b7:42:ed:a5:53:4a:19:
ce:64:87:7d:37:bb:cc:71:31:07:07:ed:80:c7:9f:35:f2:c6:
0e:05:e1:7d:82:30:7a:a9:83:68:aa:89:46:97:86:e8:4f:3d:
6f:35:6c:43:f9:6c:3f:70:30:62:b6:ca:c7:40:62:6c:f0:40:
21:c3:d3:1a:61:c6:cf:78:cb:86:a1:e6:39:3d:89:ab:91:87:
93:0f:4b:91:10:80:38:f5:ca:42:a3:7f:29:04:10:9f:e2:0c:
92:12:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:13 2025 by rpki-client