Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: 9sJcn42D7DXDcB1KjLxUNixr/7/z+0XvwhfKjK3A/9c=
Subject key identifier: 89:3A:E2:20:74:6E:E8:5D:BB:BE:97:4A:38:2A:38:77:64:BC:52:AF
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 0198C949D160533F962532E21335C9A472E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 15
Signing time: Wed 20 Aug 2025 21:01:54 +0000
Manifest this update: Wed 20 Aug 2025 21:01:54 +0000
Manifest next update: Thu 21 Aug 2025 21:01:54 +0000
Files and hashes: 1: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: w0mWV/3RsKbJDAgZZcK72h9KwbPdlLvFb4kKv4HaO08=)
2: hmCWYHAx_l1n1SYpS9jRT3uM0iI.roa (hash: 2xccex4c5TiEuZ5rxVkKqjI8A2nitz/9qzZXBxsXe9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:49:d1:60:53:3f:96:25:32:e2:13:35:c9:a4:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Aug 20 21:01:54 2025 GMT
Not After : Aug 21 21:01:54 2025 GMT
Subject: CN=893ae220746ee85dbbbe974a382a387764bc52af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:75:a1:2e:97:de:b9:47:8f:b6:9e:07:03:
01:00:0d:fe:39:e7:0f:4d:05:1a:86:d8:67:29:bc:
c1:50:11:83:c9:1b:0d:0d:30:9d:38:2f:cc:2b:df:
04:d3:27:db:33:ec:7a:d1:c6:f0:49:71:80:64:47:
2e:ab:37:48:0d:9e:40:25:73:6e:fc:7c:ba:b7:85:
43:5d:4a:b8:a0:4a:4c:d1:0d:2e:6a:bb:90:8b:2d:
07:63:c0:0b:1a:17:06:76:05:30:0c:bd:a4:e7:6c:
5a:ac:b5:a5:75:45:41:cd:75:36:57:34:64:34:8f:
a2:40:53:c8:36:a4:ce:72:eb:c7:5e:ec:0a:04:b0:
84:68:db:d0:96:9b:6e:6b:b0:93:14:17:d0:cf:9a:
31:8b:fa:40:6b:94:c9:f8:13:6d:69:b7:c1:ed:a0:
f3:c5:aa:9e:a9:f2:c1:18:f0:10:9f:b9:40:b4:70:
a6:f2:0e:f5:69:26:d0:9d:e4:35:06:10:b9:f1:f2:
01:21:11:75:61:f7:84:87:a6:ab:57:d2:f3:8c:16:
7a:4f:9d:7d:b2:d3:f5:3b:5b:d7:13:25:e9:d2:70:
04:9e:2a:ed:e3:b0:de:8e:af:44:52:b7:bd:70:4b:
eb:64:f6:26:02:02:13:13:ea:62:09:fb:41:b8:dc:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:E2:20:74:6E:E8:5D:BB:BE:97:4A:38:2A:38:77:64:BC:52:AF
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:15:0a:59:83:1a:2d:66:5e:40:1f:3c:e3:e8:3a:58:60:94:
aa:32:6c:0f:0b:26:0c:a5:88:b5:2f:4d:e3:fb:8c:0f:38:f4:
91:70:4b:ff:6d:c5:56:50:ce:6b:ec:00:00:a6:2d:86:f5:6b:
50:34:e8:8e:ea:8f:c2:20:c6:f1:4d:c6:c9:b7:a4:5e:f5:bc:
cb:6f:67:24:94:67:93:07:8b:3a:87:69:d2:4f:e6:69:6a:04:
85:92:ed:93:e1:cd:b7:ef:f0:09:ee:fb:53:a3:8e:d2:b6:1a:
ce:09:66:09:20:9a:4f:8c:87:b0:79:7d:9f:ed:f3:4f:53:a2:
d8:e3:ec:e2:d5:dd:88:1f:b4:ac:d8:89:63:0f:4a:86:ef:93:
cc:8e:14:5d:be:52:64:3a:f7:e7:e7:57:cf:08:ad:1d:6f:2e:
8e:5e:d4:20:c7:2c:99:5a:d5:8e:25:d0:83:a0:7c:2b:04:3c:
1b:68:b5:a6:57:06:4c:47:60:fd:ea:27:f1:e1:c9:94:66:b3:
db:08:3f:c9:4b:0c:72:d3:a2:73:db:f3:44:95:f9:bb:cf:05:
a6:ae:47:bd:57:7d:54:c7:14:ac:b1:33:12:25:8b:ba:d0:cc:
21:d7:64:51:eb:4e:75:dc:8f:07:51:f4:c6:1f:74:f7:37:57:
63:d2:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:19:06 2025 by rpki-client