Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: qQClYTtKXmRIbINV8b+LmPlK0Rt4paj/sgMmRaIl4Uo=
Subject key identifier: 18:93:03:64:BF:F7:90:0A:7A:20:12:CD:93:C1:D0:01:6E:89:41:6F
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 0199350089D624C7B7ACC159222B3846BEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 19:00:51 +0000
Manifest this update: Wed 10 Sep 2025 19:00:51 +0000
Manifest next update: Thu 11 Sep 2025 19:00:51 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: aY2WxstdXntAw1KgaTAbizfbpo+pLDRsb9kb0G1RXnM=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:89:d6:24:c7:b7:ac:c1:59:22:2b:38:46:be:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Sep 10 19:00:51 2025 GMT
Not After : Sep 11 19:00:51 2025 GMT
Subject: CN=18930364bff7900a7a2012cd93c1d0016e89416f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:c2:61:75:26:ad:3d:0f:4a:6e:5e:af:eb:
9b:2d:f8:a9:cc:28:73:06:e4:c7:ae:21:39:58:c2:
fc:b1:11:e5:67:b5:d4:be:7e:d1:b1:af:c2:35:38:
d0:94:8a:5f:65:ab:fd:90:7e:fd:71:cd:ad:31:fe:
1b:b9:57:51:a1:4b:a7:e5:db:20:a7:02:d6:96:ce:
0b:80:d2:cd:03:df:d1:4a:13:d4:0e:0c:05:53:a7:
a3:83:2a:3b:a9:a5:4c:35:9e:cc:1a:c7:1e:69:c8:
24:b7:b7:0a:f4:2f:66:d0:1f:40:57:11:02:10:be:
11:68:75:a4:5e:46:bb:8e:6e:1c:fd:0c:e1:4a:7d:
cc:3a:68:d6:f0:ba:62:f2:db:d1:9b:64:70:b7:a7:
96:97:84:40:c6:8e:d6:47:2d:3a:bf:8c:a4:0e:a6:
b5:77:55:53:e9:a8:0b:39:78:2e:66:91:9d:bf:c7:
51:7d:0f:c4:a8:75:48:6f:26:0b:e8:f6:9e:85:46:
c2:db:3c:fa:87:50:20:e4:c8:06:ad:94:00:e0:d3:
55:c1:98:4a:a6:ea:30:72:e9:62:5c:eb:49:62:6a:
3e:dd:28:f1:ad:83:79:47:8e:f9:18:1c:2b:d2:fa:
a6:a9:20:ad:50:5d:90:89:73:df:8c:53:89:71:fc:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:03:64:BF:F7:90:0A:7A:20:12:CD:93:C1:D0:01:6E:89:41:6F
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:59:fb:b5:46:75:02:99:88:87:91:ad:84:ed:9c:69:b3:ee:
df:93:f5:1b:43:62:b8:e9:49:88:bd:85:9e:8a:59:6f:c9:c5:
fb:c1:8f:80:43:39:c9:71:6f:2e:13:8b:05:d5:15:c1:75:a7:
08:05:ca:5b:d8:1d:1e:35:a1:59:09:fb:68:a1:87:6b:08:db:
3c:9c:6c:26:7f:06:d0:4c:b0:2f:ca:34:6a:54:b2:82:2f:f4:
cd:03:14:f4:0b:e4:fb:02:9e:87:64:d6:73:48:ad:e6:bf:b0:
49:4a:ec:40:24:0f:4d:d0:82:44:27:4a:4c:f7:b4:27:36:e1:
ef:fe:3a:4f:7f:84:d0:31:72:1d:8b:f8:7f:d6:30:fb:8d:8c:
58:54:4f:eb:c9:2c:9c:2c:be:94:0a:3a:6f:61:fb:e1:95:ee:
60:82:0e:1c:3d:3d:f9:d6:10:e9:7f:cb:62:20:3c:a8:46:74:
36:cb:ce:23:7a:f4:ac:e7:37:c5:59:b5:0a:dc:0e:65:a5:1f:
eb:98:5d:b3:8f:9f:4e:71:df:da:0a:7d:53:63:74:46:2c:96:
38:63:3c:4d:3e:ab:67:80:12:02:57:07:e4:84:52:1e:58:9b:
0b:66:30:77:32:6f:1c:2a:9b:43:4a:03:82:57:33:d3:b8:ce:
50:44:2b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:04:27 2025 by rpki-client