Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: prVziOazlsgCDTUicO75BIc0evBJCTZRH/iA8UrLDz0=
Subject key identifier: 0D:7C:B0:14:EB:9A:F2:D5:64:ED:16:84:C7:BE:0E:7E:4A:DA:A2:48
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 01992255396E18A81CECB23F95C0446743D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 14A7
Signing time: Sun 07 Sep 2025 04:00:34 +0000
Manifest this update: Sun 07 Sep 2025 04:00:34 +0000
Manifest next update: Mon 08 Sep 2025 04:00:34 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: m3YvFFAseYP2mWJrw5us8Y3Av6X5R8dExB92Dth69So=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:39:6e:18:a8:1c:ec:b2:3f:95:c0:44:67:43:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Sep 7 04:00:34 2025 GMT
Not After : Sep 8 04:00:34 2025 GMT
Subject: CN=0d7cb014eb9af2d564ed1684c7be0e7e4adaa248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:69:4b:e7:04:f5:27:9d:1a:a3:25:01:04:
8f:7b:e8:99:d4:23:ea:0a:9d:99:5c:af:db:23:38:
3a:66:df:9c:05:25:bb:3d:53:38:8f:d6:53:a6:9b:
ed:34:af:4f:3a:f2:8f:14:09:9d:72:43:6d:bd:4a:
10:ee:55:32:e1:24:65:5e:be:58:87:00:0f:05:72:
9e:34:b3:a8:f0:b7:aa:94:4b:4b:56:30:37:ee:44:
35:b7:b5:33:01:a9:54:6e:87:43:e3:d8:fe:07:e8:
72:23:09:5e:66:d6:28:ba:87:2e:79:b7:b9:55:c6:
6b:c4:9d:fe:77:db:8f:cd:a3:07:44:a4:96:f1:58:
21:ce:ce:78:d7:dc:54:ef:fd:bf:d5:cf:e1:43:04:
91:57:a0:90:19:78:df:62:51:79:5b:49:d6:aa:a8:
54:69:2a:f2:4b:05:34:33:89:c3:b0:44:53:79:3f:
7c:0a:5f:40:58:92:96:28:0c:e4:ee:71:cc:55:ab:
ef:46:ba:dd:78:79:2e:e6:3c:3f:bd:5a:24:ab:09:
7e:a1:47:d1:c5:dc:88:e3:a6:ce:a0:35:25:4a:67:
34:b1:5f:ff:09:84:72:49:50:cf:24:36:cb:30:f9:
3d:12:41:5e:4c:8e:3b:24:73:6f:c1:47:f9:16:a2:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7C:B0:14:EB:9A:F2:D5:64:ED:16:84:C7:BE:0E:7E:4A:DA:A2:48
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c5:0e:fa:cc:22:de:5c:a7:1c:75:db:cc:0d:37:e4:48:25:
c2:8e:67:53:21:9e:29:12:08:7a:20:1b:8d:33:64:ec:00:9a:
5a:ec:1d:c4:55:78:79:7a:6d:af:51:bf:52:46:35:65:42:73:
77:91:78:13:f4:c7:5c:d1:35:67:99:77:35:c5:90:ff:bf:5f:
ab:65:71:a0:af:9d:93:23:a1:df:33:50:09:f9:38:63:2d:e0:
e5:2d:e4:2e:21:0c:6d:c4:eb:54:bd:a8:c7:2d:4e:61:10:77:
00:2c:a5:1b:92:23:59:30:62:26:36:77:71:6a:f9:31:e3:7a:
5d:f0:00:30:b8:76:ed:f4:c6:14:85:ae:22:3f:b1:81:0f:03:
90:32:b0:3f:1f:55:25:23:eb:1f:7d:9d:6e:4a:54:53:4e:3e:
78:4a:5e:70:b4:8e:0b:fa:7a:f8:bd:12:bd:98:4c:2d:8d:ce:
66:ad:5f:aa:f1:f7:40:5d:56:f6:57:0e:41:c1:73:9a:b5:69:
33:20:e4:3d:df:ee:af:1f:f5:4e:75:5d:52:36:e0:ae:bb:89:
3d:f2:eb:32:91:01:16:d7:c5:d8:7b:35:d4:42:70:d8:df:4f:
87:78:c0:10:ca:53:1b:d5:ed:3b:52:02:0d:fb:05:42:9e:6f:
83:34:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:49 2025 by rpki-client