Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: +JYuOj5XLx+B2GI01i4JP118rjk6lCgsy+fjAmcd3R4=
Subject key identifier: 23:34:19:84:8C:8F:13:2F:02:C4:03:31:7D:B6:D0:AE:C3:37:C9:D3
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 0198D4E0030B81608D2399B62A3635FAF13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 0823
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: L4ZQWz1TKERYOKlQh+8GHy4wNM41DQS+sqFaI5vKkCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:03:0b:81:60:8d:23:99:b6:2a:36:35:fa:f1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=233419848c8f132f02c403317db6d0aec337c9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:3c:d8:32:df:95:b9:ac:f8:6c:fc:76:62:
2a:38:09:5f:33:93:ca:b1:05:4d:64:b4:cf:db:a0:
e3:03:e6:ac:a0:6f:c2:a5:66:71:56:dc:a9:da:19:
48:0a:2f:7e:e9:1b:ed:a6:f3:44:0b:f9:a1:33:86:
f0:72:5d:6a:6e:78:58:dc:30:12:be:96:45:df:17:
0e:72:d2:66:4c:02:97:ed:82:90:66:95:a6:25:c9:
0e:e4:df:0e:89:89:70:68:b8:18:5a:9e:c1:d1:68:
e4:4e:da:70:39:fa:06:aa:3c:6a:9a:d5:a8:fc:62:
c5:25:ae:d9:15:ed:ec:98:82:c7:bd:2a:ab:0e:1a:
39:de:e9:75:88:de:38:25:f9:c6:cc:1e:30:6f:11:
c2:33:8c:d1:8e:65:2d:ea:c9:ef:78:80:45:d1:2a:
5e:29:56:4f:ef:f8:6c:65:f0:8b:4d:98:37:b8:fd:
41:b9:99:79:d6:2c:2c:fd:4b:ce:af:5d:59:fe:83:
55:a9:3a:e3:0e:06:cf:63:9e:8f:c8:07:c8:c6:1e:
2a:fe:9a:4d:71:cf:a8:51:a5:ca:5d:74:df:02:d8:
ae:0d:5e:64:b4:61:d5:6b:b9:56:0b:16:12:dc:ca:
e4:73:7b:81:61:59:b0:fb:36:e9:c5:8b:3b:51:39:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:19:84:8C:8F:13:2F:02:C4:03:31:7D:B6:D0:AE:C3:37:C9:D3
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8e:52:5c:e6:7f:3f:94:a6:b2:49:25:e9:af:3c:8d:28:30:
28:f4:2a:6f:78:f8:36:32:e2:14:9c:83:09:04:b5:05:41:21:
8a:51:82:4e:bc:f0:e9:45:8e:75:3f:ad:ce:32:b8:80:79:3c:
dc:2c:19:e2:50:41:f3:0f:a8:69:b8:f6:ee:0c:76:59:a2:f5:
c6:ea:06:d4:3d:a6:1b:be:c8:5c:00:d7:40:03:dc:38:cf:5e:
a9:35:84:7b:29:7c:4f:a3:4c:4f:43:c7:dd:35:f9:4c:18:6b:
0d:24:5a:d9:eb:1a:46:b8:18:c7:30:a3:af:c0:62:8c:8c:c6:
8a:e8:52:60:f5:ce:f7:06:02:98:f8:15:a2:db:f5:ce:fc:6e:
ac:0a:18:39:3f:ed:b9:91:e2:43:62:53:b8:f0:7b:9e:bf:9a:
4c:fe:48:fb:7b:4a:95:3f:6d:b5:5e:bf:ab:3e:31:29:33:28:
40:d0:46:5a:90:64:84:51:7c:a6:fc:27:ed:8e:a7:15:67:da:
63:d4:65:17:69:b7:aa:7c:f8:67:7d:21:fe:48:ce:ba:3e:43:
2a:23:98:5d:0b:7c:b2:ff:d6:cc:56:2a:25:17:74:25:4e:6e:
9d:85:11:a9:81:f7:82:b1:e8:21:12:ea:72:1a:b2:40:c2:1a:
97:1f:59:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:01 2025 by rpki-client