Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
File: HKrZOQiq2NJG62n35mqnDeW9Whc.mft (raw, json)
Hash identifier: AMO5x1caODun/KPMFTm6WEnHbLgyEv3BThRPQnImvdE=
Subject key identifier: 4B:B9:DC:57:69:56:1F:F8:20:DB:70:D6:EB:59:56:3A:9F:12:3B:45
Authority key identifier: 1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
Certificate issuer: /CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Certificate serial: 019923D65620095B0CC363DA12906D293009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
Manifest number: 0D57
Signing time: Sun 07 Sep 2025 11:01:13 +0000
Manifest this update: Sun 07 Sep 2025 11:01:13 +0000
Manifest next update: Mon 08 Sep 2025 11:01:13 +0000
Files and hashes: 1: HKrZOQiq2NJG62n35mqnDeW9Whc.crl (hash: b6rK4C1numoGaDhY64qvyRy2+C/sU+GTipsojEFSTGo=)
2: ackszuiJCTUVf3NL6BGlMWZR6mU.roa (hash: eS/ev9znkjBG3HaRk+tKGqjX3/CUPsNsHqj4Rs2K9+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:56:20:09:5b:0c:c3:63:da:12:90:6d:29:30:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Validity
Not Before: Sep 7 11:01:13 2025 GMT
Not After : Sep 8 11:01:13 2025 GMT
Subject: CN=4bb9dc5769561ff820db70d6eb59563a9f123b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:b9:31:10:41:42:82:5e:2b:29:3d:25:58:
6a:d9:ad:5c:14:5e:9c:7d:ac:ba:db:52:1b:58:8c:
2c:ba:bd:50:28:e1:6e:c9:51:65:9a:1c:cd:ee:66:
db:b1:31:06:91:81:48:30:a8:1a:14:76:48:b2:c6:
a5:02:b7:ed:3d:36:4c:54:79:c6:73:59:1d:f9:72:
ea:b8:3c:b1:40:51:03:8d:01:3c:cc:67:47:3b:b0:
0d:b0:0d:f0:af:95:3c:93:0e:c2:ae:9b:d4:b8:ed:
c9:bc:d1:b0:ae:a9:e9:26:23:4c:7f:3a:61:0e:7d:
1c:2b:1f:90:20:6b:2e:b6:90:fe:cc:36:fe:8a:cc:
f0:b0:29:33:6a:2d:37:a3:e1:45:95:e2:83:49:a7:
54:5e:55:63:de:38:0a:d9:9c:38:32:c6:87:31:a1:
6d:62:b9:0a:c9:32:3f:1e:a4:23:2a:fe:66:ca:ad:
c5:72:7a:d4:47:48:cc:1a:4e:ec:58:80:72:1d:09:
2e:24:57:3a:1f:c7:c9:35:f8:73:48:50:b5:ae:43:
68:e8:a4:99:6f:da:80:ee:d7:5a:8c:bc:d6:d2:81:
29:dd:3e:2c:0a:31:41:e4:7d:04:6c:2d:38:ec:7a:
4f:3d:1a:25:5b:67:7b:67:a1:b6:79:5a:fa:91:cb:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:DC:57:69:56:1F:F8:20:DB:70:D6:EB:59:56:3A:9F:12:3B:45
X509v3 Authority Key Identifier:
keyid:1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:a6:46:77:d1:3b:bb:f1:a8:61:e5:3f:2a:26:ee:41:fc:
17:42:3b:ff:7b:df:7d:4a:ec:7a:6a:99:f6:c1:4b:5e:e1:53:
2c:5b:88:38:4c:99:31:9f:fc:8f:45:9c:e2:e6:01:a6:40:87:
0c:91:dc:01:37:0b:4c:a6:36:40:92:ba:05:e8:bd:66:41:fe:
a0:37:16:ff:39:2e:ce:ba:6a:8f:51:69:de:c9:fd:0d:fd:73:
d3:da:e0:86:93:69:42:cf:96:01:40:cb:ba:33:57:20:42:59:
27:9b:1f:18:30:85:9c:51:dd:f4:8c:35:6f:6f:8d:32:0a:c6:
cb:69:b4:d8:c1:22:fc:d3:d9:1a:e6:4c:3a:d0:91:4d:22:74:
04:5a:7a:f8:4e:77:6d:09:42:7a:45:d2:45:f7:2b:18:9d:ea:
bf:ad:5b:53:cc:00:0c:fa:e8:58:7e:95:ec:23:a4:8e:62:bc:
73:b9:54:6d:e0:cc:97:41:9a:41:a9:7b:86:6a:3e:06:b8:b4:
14:a0:24:5b:ca:17:5e:7d:92:05:71:e8:dc:70:54:72:66:e4:
3b:12:9e:13:3b:67:79:2b:62:8c:88:fb:92:ba:6d:4f:78:40:
a9:99:fa:0e:0d:4f:df:1b:12:21:5f:7d:b1:34:c8:15:c2:36:
ff:00:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:03 2025 by rpki-client