
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier: 1HYoaABRM2lXZFezk3Id6mTfr+2lppw6RTvEDN1JKcY=
Subject key identifier: E5:94:A8:5F:EE:B3:C9:C4:F1:3C:31:BB:67:5C:E9:3A:E2:A7:41:6F
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial: 019923A0BC88A20438A09035A695B86A5256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number: 0783
Signing time: Sun 07 Sep 2025 10:02:40 +0000
Manifest this update: Sun 07 Sep 2025 10:02:40 +0000
Manifest next update: Mon 08 Sep 2025 10:02:40 +0000
Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: o+Gi9l8HLHeYwsWoeIvURHa5/dh04saA6EsZoe6/6fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bc:88:a2:04:38:a0:90:35:a6:95:b8:6a:52:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Validity
Not Before: Sep 7 10:02:40 2025 GMT
Not After : Sep 8 10:02:40 2025 GMT
Subject: CN=e594a85feeb3c9c4f13c31bb675ce93ae2a7416f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:c6:26:99:ec:b2:1a:b9:5f:7e:17:e8:51:
38:3e:5b:7e:a7:d2:d1:67:5e:de:66:31:f8:3e:65:
9c:6c:4c:f2:84:c0:d3:16:69:ee:f8:5b:91:d7:70:
67:70:c8:52:03:de:28:26:32:b0:ab:8e:7b:57:a8:
46:b5:ca:d3:5f:e8:a0:47:3d:ff:39:c6:05:7d:78:
e5:01:4f:e5:34:db:0a:8c:db:89:e5:e3:ea:da:ee:
02:eb:17:fa:09:6e:32:e7:96:4f:ba:e9:58:6e:4e:
1c:3f:17:ec:fd:12:b9:7b:5a:b5:f0:20:94:8c:c2:
a3:5d:7a:59:83:54:b4:a0:1f:2d:7b:61:eb:3a:4d:
2a:f6:11:de:d1:be:ad:0c:8e:af:42:d9:61:07:cf:
e1:a4:1a:39:1b:f8:6c:9f:db:05:59:9d:7a:42:79:
dc:e8:00:b0:8a:53:7d:57:8a:3f:98:42:57:be:66:
1a:e6:3a:ea:44:81:a8:74:3b:dc:05:db:6e:14:c9:
65:d3:21:5a:db:07:85:de:b6:2c:ee:bc:92:25:9d:
62:e5:7c:71:eb:dc:91:da:5a:1b:c7:2d:49:19:b8:
21:96:ef:81:cc:81:ee:13:07:e6:a6:7b:82:7d:aa:
9b:dd:3a:b3:8e:7e:56:9b:90:ab:a6:b3:76:03:fb:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:A8:5F:EE:B3:C9:C4:F1:3C:31:BB:67:5C:E9:3A:E2:A7:41:6F
X509v3 Authority Key Identifier:
keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d1:2e:e5:14:82:c8:2d:3d:2f:c9:64:91:86:f9:2b:83:0d:
2d:cd:0b:54:83:34:3d:a8:d1:0a:33:8d:7e:c3:f2:9b:31:05:
f8:24:dc:19:48:d7:ac:1b:1d:81:11:53:aa:2f:c0:98:ef:1a:
74:d7:e5:98:84:e5:4d:df:ab:3a:df:6c:45:8b:bc:a0:f0:58:
47:bc:f9:f8:5c:22:f0:d1:0c:a6:12:86:fe:e7:bf:d8:dd:d5:
41:de:d5:73:55:70:70:e9:10:97:d1:8c:86:8b:07:fa:9b:e5:
41:fe:d6:90:b7:87:b1:b7:58:9e:5d:2e:a5:78:87:28:70:ec:
92:e5:60:d1:ed:45:fb:a2:a9:55:9b:8c:f2:a9:f8:50:f3:a2:
11:e0:1d:e2:fa:0f:c9:3e:99:eb:8b:52:61:87:fb:3a:ca:a8:
56:8a:89:6f:39:9d:d7:9b:11:ad:76:12:b6:37:8d:ef:bb:98:
00:0e:78:c0:4d:1b:cc:24:38:b6:d2:ee:08:ec:5a:dd:5b:0c:
a2:23:c0:40:95:39:df:c7:5f:be:f1:4a:f3:a9:b8:e6:47:c9:
68:0c:28:b6:0d:34:6e:72:8f:4a:cd:6a:2d:0d:44:1a:08:7e:
24:3e:80:41:18:65:a5:f8:46:9e:32:8d:b7:22:6d:aa:f6:be:
b7:84:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client