Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: keWmGLQTFn+gXlvnqQPHRR20J9Jm7Ct677mH48sIdQM=
Subject key identifier: 43:99:CF:F0:BF:B6:E3:89:F0:40:CB:89:05:BC:16:7D:97:A6:66:5F
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 0198D58368018C31F69312A19390D14A19CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: NWwTjH/yoR6NtJXtFogSpfkkKcri5UwlWa1FsOQNQTc=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:68:01:8c:31:f6:93:12:a1:93:90:d1:4a:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=4399cff0bfb6e389f040cb8905bc167d97a6665f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:47:e7:37:d3:ba:40:5c:86:80:60:c7:d1:
3c:19:37:c6:70:de:77:72:0f:04:01:03:35:df:44:
82:1d:28:70:3a:9a:cf:19:e6:8b:01:a5:06:49:05:
68:01:60:6d:08:9a:fb:80:77:1c:9f:ad:33:d9:3c:
6e:45:12:78:ee:f5:3c:f0:0e:9b:80:8b:f8:37:10:
9b:fa:42:21:a6:40:ca:4f:55:f5:d1:ac:97:41:7d:
89:34:2a:19:d2:a9:e9:ea:d2:23:12:ce:73:67:9c:
9f:3b:07:1a:c7:58:df:b8:a8:a2:01:29:cf:39:14:
52:3d:3f:d3:c0:9d:f9:a2:22:e0:aa:6a:56:9c:c9:
03:a3:bd:72:d4:c9:76:3f:f4:26:d8:3d:7c:83:e6:
6d:02:60:29:35:99:82:ae:a5:8c:ff:7b:4e:ec:81:
e0:57:61:2d:8b:8b:78:98:3c:a9:ae:3a:fd:b5:d3:
d6:49:57:7c:b0:f8:14:19:24:11:99:93:0f:ac:1d:
8d:97:e1:3b:4d:32:39:16:01:82:a9:b2:9e:f1:09:
25:4a:0c:6c:1a:8a:78:73:5e:56:5a:d4:a0:aa:76:
06:52:db:3c:dd:0b:e2:a5:13:f4:51:eb:43:b2:67:
9d:fb:5f:c0:3b:61:61:d5:40:cd:9a:d2:60:b6:71:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:99:CF:F0:BF:B6:E3:89:F0:40:CB:89:05:BC:16:7D:97:A6:66:5F
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dc:a1:91:df:5b:58:01:b4:22:e9:42:1c:14:2f:30:01:0c:
8e:c9:27:3c:2b:ed:72:53:e1:62:47:fe:f9:56:7f:9f:7e:e1:
b2:33:40:60:88:80:ca:a8:6e:4d:9c:91:2f:84:26:46:e0:35:
0d:73:79:d1:fc:d4:48:c1:cb:34:7c:0f:7e:82:53:5e:91:08:
23:04:3e:cd:3b:5b:61:4f:42:89:aa:2f:70:1d:51:79:9a:48:
cc:1c:2f:74:b9:d8:30:81:08:76:af:c4:f5:c6:12:4f:ac:ac:
bf:e6:53:79:3b:cc:7a:2a:a8:06:50:d2:61:01:e7:62:5d:e6:
df:7c:a3:ab:2b:f1:71:81:97:c2:65:23:42:35:96:d5:bb:8b:
d0:9d:94:39:31:b1:af:17:e2:f5:17:85:0e:3c:eb:67:a8:ac:
27:0c:b3:82:49:2f:b5:4f:ad:44:06:b4:08:c6:be:53:a7:e1:
ed:ef:f1:82:82:5f:3c:e2:6a:1d:7d:f6:b4:b4:e5:3e:42:f5:
ab:db:b7:ed:f7:4a:a1:75:b4:ae:cb:10:23:27:b4:89:aa:8f:
c5:b5:b8:b7:d2:4c:bf:f9:ab:49:fa:8f:1d:6c:91:58:87:cd:
0b:c3:62:1d:fb:77:3d:98:22:de:1a:61:f7:b2:4a:88:4b:64:
a4:4b:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:40 2025 by rpki-client