Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: BJsegwm2mXFoS2G9KvAzA2ZXURpVOd1jxbayVmjzk5s=
Subject key identifier: 40:C2:84:BF:FE:72:6F:12:97:83:14:42:44:7C:16:50:87:2D:C2:8B
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 0198D4E082CD7E038EBF57618737297DBC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=)
2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: 2dnP296qACdGi1r+KsfDRw0jTNVdu4EpfSsl42hj6E0=)
4: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=)
5: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=)
6: n-W5m8Lx-i-ynu-cgERA98e1TOA.roa (hash: 4MuuW1m/TV8O5IZ0i/ayNAC7gzR7V1teSLC1JE5/iDs=)
7: pMSZccnz2cyq4EAmIRmDcUPtCn0.roa (hash: rRJO86ohCtFwFSEvJg481KQrtUgLqQRd6A69YZTm2Ng=)
8: ySmmDjcV5o8HMr8fci-zFbiYdNg.roa (hash: QRYJ/tIaqmXv+2YeufSiFwnuiLCPfX4BPxDANJPYOl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:82:cd:7e:03:8e:bf:57:61:87:37:29:7d:bc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=40c284bffe726f1297831442447c1650872dc28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:b6:8e:c1:c8:1a:d6:b8:0f:74:8b:d4:52:
21:58:9a:77:ac:63:d8:c7:dc:bd:be:13:b0:e9:eb:
6b:1f:77:cc:8e:45:05:6d:f4:c7:ba:b9:59:39:bb:
f8:69:62:fd:21:5d:9b:a4:fe:3f:7e:c0:c5:cc:4f:
ad:47:f8:bc:f3:f4:93:b5:0c:b6:74:ab:0f:2b:7a:
22:32:d0:75:f9:4f:4e:32:68:2c:18:be:5c:c2:f2:
9d:8d:ee:67:72:66:04:f1:f9:6f:ca:46:41:ca:94:
0d:9c:66:c6:41:92:84:55:6b:6b:a9:51:3b:75:88:
b3:c8:f4:8f:30:d4:76:4b:1b:1f:49:9d:3e:4b:ed:
bf:88:f9:69:d9:5e:c7:56:c3:ff:93:a4:a9:2a:36:
a8:c6:c0:98:de:11:c8:eb:10:2b:8a:eb:6a:13:f5:
72:9c:36:2f:e5:87:9b:7c:4d:e6:10:44:5f:71:05:
06:7f:7f:ab:6d:3c:1f:d3:c4:a2:3a:13:67:d8:2b:
d6:65:21:02:0b:de:66:52:08:f7:18:9d:94:4d:02:
ec:c3:52:37:c0:cb:45:82:0c:9f:fc:f8:55:63:90:
87:4f:7b:85:6b:96:60:ec:c6:37:d1:3e:f6:12:3e:
74:1a:15:df:b2:6e:f8:62:90:0e:2e:6f:7f:36:0e:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:84:BF:FE:72:6F:12:97:83:14:42:44:7C:16:50:87:2D:C2:8B
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8b:75:35:b3:82:de:d0:71:68:35:2e:a0:ad:7c:f7:b9:c6:
4b:52:14:5a:4c:d3:28:58:ff:5d:42:98:61:b5:f1:e1:d3:44:
e0:e0:e8:9b:7f:fb:eb:d7:47:57:a1:31:eb:be:51:1d:49:32:
43:c6:ec:82:a2:45:10:49:34:46:30:30:1b:b7:f4:63:2a:49:
8c:5c:46:fd:26:44:b3:f5:93:97:d3:b8:06:df:b8:34:bd:9f:
4b:d1:98:a6:be:4f:31:59:f3:a8:e3:9d:51:64:bc:5e:f4:63:
6a:a9:c7:c8:62:b2:73:08:b2:c8:9b:b6:cb:be:1c:03:dc:b9:
36:9e:8d:d4:03:b2:68:f4:22:ba:55:85:db:be:4a:b6:ff:2b:
38:bf:97:f7:d2:1f:db:e6:87:12:57:ac:6c:13:2c:84:53:30:
e2:13:b7:ed:c3:af:7f:4d:eb:61:4b:33:43:12:9f:85:8a:1b:
a7:9b:a7:43:c2:26:67:e8:0d:7d:33:4d:75:b2:ac:cf:80:65:
c6:04:fd:05:14:39:ab:04:06:9d:8e:28:49:03:c0:9c:a3:60:
5b:d1:aa:f2:55:d6:03:86:8f:76:57:53:9c:ef:40:66:23:79:
fa:f2:62:59:fe:6a:54:06:89:a8:9a:8d:7c:5e:ab:df:87:a8:
0e:80:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:10 2025 by rpki-client