Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: PBN3G3zUHMwV4B3z1xrYYnDn2j0ya29LXHVvRABDTb8=
Subject key identifier: 85:7C:0E:C3:03:76:66:EE:BC:F8:C6:E8:1B:BA:06:54:8E:20:CF:CD
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 0198D54E41E9FE7B1DD61D7B5AC186BA5ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1563
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: ouwWabOg+RxMl9t+GOdnQFS43iDmROeW3FXc5nHThF4=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:41:e9:fe:7b:1d:d6:1d:7b:5a:c1:86:ba:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=857c0ec3037666eebcf8c6e81bba06548e20cfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:67:6c:4e:4c:b0:14:6f:73:fd:f9:a2:f2:
00:9d:95:df:58:da:30:1a:a2:3f:bf:83:8c:99:8f:
2b:e9:0c:f7:4c:e9:84:46:eb:eb:fc:4f:a8:25:54:
8d:9f:77:b2:e7:5a:64:bc:45:8f:90:12:a3:63:55:
3e:3b:40:ca:e3:00:71:39:b3:15:4a:61:89:6e:80:
39:2d:b0:81:95:76:ce:db:ac:56:50:27:81:78:8b:
13:c2:d9:7b:cb:27:2a:67:e8:81:8e:c7:da:bf:fb:
5f:66:72:88:77:d8:76:f5:ac:75:2b:39:49:bd:48:
23:6e:ce:b3:4d:f0:28:25:e4:c8:a8:41:ed:e5:6d:
a8:d0:17:52:24:07:7c:85:45:cc:b5:3d:65:b0:49:
53:29:34:8b:48:f5:af:f8:e7:3d:fc:8c:6b:7e:ac:
6e:04:e0:e3:c2:d8:86:92:43:7c:f8:68:5f:83:db:
4b:cc:b1:4c:a3:66:b0:a5:e3:09:1a:82:e1:85:c0:
15:0c:70:e0:c6:b0:71:1f:f6:1b:f9:61:20:9a:25:
d5:9a:62:51:de:5b:9a:62:53:2d:3c:b8:30:35:ee:
ae:1e:20:ad:15:dc:ff:80:04:3e:06:ef:76:ba:8a:
c2:41:f2:c4:78:f4:0f:22:12:f4:48:a0:88:21:4c:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7C:0E:C3:03:76:66:EE:BC:F8:C6:E8:1B:BA:06:54:8E:20:CF:CD
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5c:bb:fa:91:b3:26:d9:0d:5d:c4:67:ef:03:26:cd:42:f5:
21:e4:aa:84:4a:cd:fc:53:51:f5:eb:72:72:9a:52:be:a1:8c:
d3:a7:6d:f2:33:b2:56:2f:74:0b:0f:bc:9c:38:22:fc:55:45:
0c:88:2c:e5:88:40:2d:c8:9a:18:0b:e0:e3:04:58:f5:3f:d4:
02:ac:4b:a7:61:26:5d:a7:c9:16:72:c5:4f:6c:5f:7f:9f:a6:
67:c0:7f:e3:8e:aa:30:0f:c8:d3:d2:f0:37:76:a3:91:fd:24:
a7:56:4c:a7:e3:83:fa:74:fc:2d:c0:d8:d6:c5:f7:e1:3a:0d:
39:ec:f1:a2:be:f6:a2:9a:8c:b0:d5:b2:e7:82:8b:49:29:9f:
03:65:46:a1:92:bc:44:28:f4:4f:07:d1:f1:39:38:57:06:d0:
20:aa:3d:7d:12:06:59:09:c8:22:06:21:20:21:ef:b0:b4:8e:
a0:a7:e1:80:ba:80:a0:59:09:65:cf:7b:e8:ad:43:d1:cc:8c:
b2:c3:0a:4a:32:89:56:dc:8e:33:16:22:3f:33:a6:83:b3:e3:
13:37:18:c6:85:35:80:1d:10:5b:4b:d1:19:d7:ba:1b:35:71:
26:19:cc:a5:8d:fa:2b:2b:d2:47:58:48:e3:da:05:8e:9b:6b:
71:44:72:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:24 2025 by rpki-client