Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File: HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier: ea+eoge0MInLTlxo8FC1dnaUaZBEXUlZq2frDpIFA2M=
Subject key identifier: A9:BA:A8:17:A5:29:78:4E:35:0D:BB:34:33:9B:63:9B:A0:DC:97:98
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial: 0199221E6FEC9287A9E598C24FBC1BE3693C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:43 +0000
Manifest this update: Sun 07 Sep 2025 03:00:43 +0000
Manifest next update: Mon 08 Sep 2025 03:00:43 +0000
Files and hashes: 1: 1Az4dE0ZX7KAKDKykX60lhzHZkE.roa (hash: 8wvcW71BfAfRwFPQ94lUDGje+TfkTvnyVdfl40+6qJo=)
2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: ShzB3GvyBTRqQUdPlBXBAeoTGHTlrPqN18yTJEReZ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6f:ec:92:87:a9:e5:98:c2:4f:bc:1b:e3:69:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Validity
Not Before: Sep 7 03:00:43 2025 GMT
Not After : Sep 8 03:00:43 2025 GMT
Subject: CN=a9baa817a529784e350dbb34339b639ba0dc9798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:e9:90:2c:87:94:e7:82:d3:b7:e5:f8:11:
d7:26:de:4e:e9:5b:dc:d4:c1:cd:9b:63:d1:ea:74:
35:7f:ba:94:49:80:39:e7:b9:ab:3b:3c:7e:b9:dc:
38:21:98:96:ff:cb:bd:f0:c9:9c:1a:41:d2:29:fd:
d8:37:89:dc:89:25:f4:55:1b:e3:33:0a:c9:8f:fa:
52:de:ed:ad:89:2c:da:48:df:c3:59:06:c9:bd:e4:
0a:be:e9:0b:df:df:f1:77:3b:93:91:88:8a:c6:9a:
b7:19:86:73:51:1f:22:5c:35:24:13:5c:e7:39:b4:
51:c0:14:79:c6:e4:e1:0c:34:e1:59:f6:85:ef:41:
73:8f:d0:ee:25:ff:0c:76:cc:61:a8:ba:fd:0b:02:
7a:73:42:0d:8e:4e:8d:0f:cb:8b:df:f6:d6:c2:15:
42:ef:ee:f5:a2:45:5d:f0:40:ca:8a:aa:0a:82:e3:
2d:b7:75:c1:b1:56:0a:e6:b1:b5:35:e6:91:9f:8e:
36:de:24:cf:75:39:e3:24:95:33:35:52:36:36:1d:
6a:8f:25:ca:c4:00:15:18:f3:3b:2c:ea:d1:25:64:
d6:ae:ff:75:ee:02:a6:fd:ba:70:4e:de:0b:4e:2b:
35:0b:84:71:66:d0:1c:24:fd:de:1d:d7:8d:6f:1c:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:A8:17:A5:29:78:4E:35:0D:BB:34:33:9B:63:9B:A0:DC:97:98
X509v3 Authority Key Identifier:
keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:51:17:e8:09:83:c4:25:e7:61:85:df:b4:50:b6:25:0d:1a:
70:b0:99:ab:68:b4:eb:e7:af:75:f0:aa:c6:96:24:76:74:92:
16:37:47:de:54:c5:a6:60:56:d2:18:08:95:72:0f:da:10:c6:
00:00:75:60:b5:6d:65:e9:56:d5:59:b9:79:24:76:b4:97:18:
55:1e:7a:58:8e:5c:94:da:cc:22:fb:ed:83:0a:48:82:f4:c8:
b0:9b:bf:84:1b:42:0f:02:d1:36:1e:09:8a:fe:88:ef:da:09:
c0:15:c8:ca:9d:40:b5:ee:92:e8:e5:15:e2:0d:38:0e:a0:7f:
64:2a:b0:0e:78:7c:3c:69:6c:4e:39:6a:4e:ff:dd:6b:0c:4f:
13:3f:c0:da:ab:b6:b7:ad:d4:d2:fc:d8:bc:bd:b0:2e:44:b2:
b9:82:69:bc:58:80:15:73:11:37:e4:56:71:ea:d6:bb:38:5d:
c8:72:40:9b:02:e7:13:da:04:7e:78:e9:f7:45:0c:0c:71:32:
b0:8b:33:4e:89:53:64:93:e1:5a:45:c1:3f:be:30:70:87:ed:
44:22:ee:3a:9b:a7:82:86:52:5c:b3:46:bf:2d:94:91:d1:de:
93:16:c1:44:8a:31:81:7a:9a:19:7a:6b:3f:1f:22:24:d6:f3:
59:4d:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:03 2025 by rpki-client