Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: Fh6xMM31F16ud37rhs7I/YO0B+JmYox74QSmBmEYU+w=
Subject key identifier: 44:5B:7D:04:E5:7F:57:5C:FF:BA:C9:4D:F0:86:4A:01:80:55:58:FD
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 0198D73AEB65AB72F5AFBA2B3060F678668A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 1299
Signing time: Sat 23 Aug 2025 14:00:19 +0000
Manifest this update: Sat 23 Aug 2025 14:00:19 +0000
Manifest next update: Sun 24 Aug 2025 14:00:19 +0000
Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: mvHs6bYF/MRP4iifXGqyuzDxD92kDp6g2qCQcPcyyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:eb:65:ab:72:f5:af:ba:2b:30:60:f6:78:66:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Aug 23 14:00:19 2025 GMT
Not After : Aug 24 14:00:19 2025 GMT
Subject: CN=445b7d04e57f575cffbac94df0864a01805558fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:24:c3:26:9b:d3:6d:89:77:9e:c6:7a:26:
22:70:f1:cb:93:1b:c6:ef:6a:56:1a:0d:44:4a:a0:
26:de:39:57:41:f9:11:47:62:36:92:3a:0f:e4:9a:
61:da:b2:8f:42:f7:ca:8a:b2:98:52:02:75:cb:47:
73:24:94:9a:7a:93:e4:de:7c:65:29:10:04:7d:9e:
2c:0f:c3:6e:59:d0:a0:4d:af:b7:22:d7:93:63:5f:
36:62:76:11:d3:f2:b3:17:62:34:b8:ba:85:a9:07:
d7:ce:10:c8:cd:e4:43:82:e2:3a:c0:67:61:51:25:
00:51:39:54:85:8e:2f:e6:23:4d:c9:dd:e5:ab:78:
36:1c:9d:a4:49:50:79:78:11:1c:92:e8:76:69:e3:
7f:d5:7a:08:32:cb:a1:80:02:7b:b7:06:94:b3:f7:
55:e2:2b:f4:6d:28:20:fe:4a:5a:82:93:fc:77:61:
ae:d4:97:6c:7a:72:72:36:f1:25:25:67:e2:f3:70:
df:e6:8b:c9:b5:12:fe:8f:c2:19:ba:80:2e:78:a7:
d8:f7:b2:83:a9:17:79:51:2d:a9:b0:d3:3e:57:4e:
09:6e:ab:9b:9e:bd:83:28:99:20:eb:a7:8e:e7:8a:
76:0e:92:54:71:63:03:b0:8d:1a:86:48:c5:f4:01:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:7D:04:E5:7F:57:5C:FF:BA:C9:4D:F0:86:4A:01:80:55:58:FD
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:68:4f:bf:dd:fe:ce:f2:e9:b8:fa:62:89:ea:e5:4d:be:68:
f6:d2:64:96:33:13:b6:26:86:0d:a5:3e:79:92:82:e7:28:19:
74:22:e4:4f:64:40:1b:33:00:4f:e8:c2:84:3d:23:68:17:77:
3e:e5:9f:8b:1a:f0:6e:1f:9a:39:22:16:66:f8:6d:b5:5d:55:
73:46:5d:de:3b:d3:ee:e3:89:a9:66:f9:37:5c:a4:3c:b3:2b:
4c:6c:6b:7d:b7:da:f5:dc:e5:ae:35:5a:7d:22:3d:fe:82:ad:
00:02:22:9d:9c:0f:9f:aa:9a:6d:40:9e:0a:de:ba:07:1b:2a:
5f:3a:d9:58:9c:a3:3f:18:f8:e3:14:2d:75:df:8c:77:d5:85:
b9:c5:95:6b:6e:17:9f:c5:6e:ac:e1:4f:fd:6c:5b:d7:21:f5:
5d:95:98:f8:d5:85:2f:8c:cc:4a:f1:3e:df:79:63:b6:0c:0b:
6c:b6:45:bd:be:23:7f:e5:e1:0f:ec:92:d8:f4:b7:ba:12:d0:
c6:02:ca:b7:52:e6:3f:13:9e:57:f3:cc:cd:7c:cf:15:4b:cd:
da:69:ae:e3:6c:10:0d:8e:01:19:e9:90:43:fd:71:14:6e:30:
b9:27:84:d2:aa:ba:a7:d3:9a:6f:04:01:7c:d5:85:2d:57:b7:
15:0e:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:49 2025 by rpki-client