Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: 8A/cxzpyD3YsFoukyjnT+ORDCXcauvLBj8P3Ch1lFcQ=
Subject key identifier: 78:1E:FE:9C:FC:13:DD:97:58:F6:F9:AE:B7:DA:A8:EB:77:33:93:71
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 0198D47432F76325B82F2B794D083F9F0C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 13FB
Signing time: Sat 23 Aug 2025 01:04:01 +0000
Manifest this update: Sat 23 Aug 2025 01:04:01 +0000
Manifest next update: Sun 24 Aug 2025 01:04:01 +0000
Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: rruoFJa7cpgjQtu+M/0/S0DGNH4ci9kTSBOXsAnGIBE=)
2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:32:f7:63:25:b8:2f:2b:79:4d:08:3f:9f:0c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Aug 23 01:04:01 2025 GMT
Not After : Aug 24 01:04:01 2025 GMT
Subject: CN=781efe9cfc13dd9758f6f9aeb7daa8eb77339371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:93:c8:d0:43:4a:36:c2:5d:57:c0:8b:7f:
6c:09:e7:25:eb:96:f6:ee:22:1e:5d:57:20:d9:b3:
b1:f9:fc:56:8a:98:c5:fd:51:5b:23:7f:90:b4:b8:
d2:9b:91:b9:0e:e2:a9:ae:55:f5:c0:9c:c1:65:2a:
03:9c:8a:c0:32:e4:65:85:64:5d:df:75:ce:c9:ca:
62:92:75:a3:00:37:1a:7e:93:24:5b:25:63:a7:53:
92:7f:91:02:08:6c:28:f6:fe:93:bf:2f:29:9e:f8:
68:b8:50:a1:c1:93:3a:47:b4:1b:41:87:ec:aa:9e:
31:36:fc:4e:0f:5d:d2:64:75:92:af:1c:34:be:85:
b2:fc:33:43:ef:14:ce:6a:c5:56:f1:d2:22:99:69:
0f:fb:ee:81:93:7c:95:7f:12:1d:f2:2c:53:38:b8:
0d:66:09:12:00:11:77:ea:2e:d2:d9:ad:f3:cf:9b:
a9:63:d1:fc:cd:b6:85:84:e2:b8:5e:5b:a3:5f:8d:
39:1c:a6:ec:28:cb:3f:44:bf:3c:2b:ad:f1:6a:8c:
ef:85:67:ca:bb:0d:9a:e0:59:12:78:42:f5:fc:d6:
07:26:8b:7d:02:bb:01:08:3d:fe:72:b3:69:c5:be:
12:89:d7:0c:57:94:40:21:78:bb:5a:e5:af:7d:22:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:FE:9C:FC:13:DD:97:58:F6:F9:AE:B7:DA:A8:EB:77:33:93:71
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:15:4b:b0:ad:ef:f0:a7:09:76:1b:ba:c4:b3:02:0a:98:0e:
f9:04:ae:f3:cb:15:3f:a9:56:5a:d8:21:67:21:96:34:ee:17:
ce:ba:c8:b3:3e:5e:cf:ae:ee:ce:d7:5b:62:98:ee:7f:3d:3e:
56:a1:f5:92:ac:5f:ba:91:f1:0d:f4:0a:95:67:48:36:e7:29:
9f:67:a7:6a:3c:93:32:c4:43:d4:08:78:ad:50:e1:bb:92:3b:
b6:4a:5c:6f:48:55:19:6c:f8:a3:77:b9:1c:b5:71:38:bd:df:
fc:df:33:b9:c9:6b:df:08:29:09:76:c7:36:11:62:69:45:8f:
72:6a:f3:47:d2:fc:d1:0f:27:a5:e0:87:a5:df:54:16:4c:2a:
4e:0e:4b:3d:c8:4b:05:bd:af:72:a4:2d:67:a4:e2:53:5d:e2:
da:08:24:22:c1:49:bf:21:44:ab:20:aa:3a:13:5e:24:d2:35:
e6:92:35:a7:4f:76:ea:06:29:a4:60:8b:8d:06:8c:0f:3a:b2:
de:83:e1:44:67:41:de:f0:02:d0:8a:32:9c:85:7c:95:5f:b9:
c4:54:22:6e:aa:4f:0a:84:05:67:55:65:28:8a:81:a4:57:f6:
a4:5d:34:6c:60:a8:18:2d:9b:3d:92:9d:e3:e2:79:be:4f:4e:
9e:1e:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:55 2025 by rpki-client