Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json)
Hash identifier: Edn3y6fasqNYzgXt2WP+d2IQPoRkp1nIPhmrdxWZIQA=
Subject key identifier: 97:27:0C:FA:51:38:CA:95:9A:82:B4:A1:64:08:12:9E:B8:F5:F0:69
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 0198D4A7E2EA3D16AA6D0AAF2B507CE05926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: Bbc/ivcWOyGZha3WqonjNrXBBSd+xvOkFMIpfGpgbvY=)
2: nfcB4W3-frcdsttLFxfqKvUAYPA.roa (hash: LSLZu1kedUT6p6v50vQ31LG0ikk6bjLybjbis0FT+ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e2:ea:3d:16:aa:6d:0a:af:2b:50:7c:e0:59:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=97270cfa5138ca959a82b4a16408129eb8f5f069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:4e:ca:22:d2:0f:87:59:8e:84:a8:bc:11:
4d:5f:1a:4c:7c:07:1b:2c:b8:49:cc:5d:97:3d:40:
4a:17:08:c4:02:04:5f:73:2f:a6:1d:ec:3e:7b:1a:
69:32:69:4d:9e:45:27:4b:ee:8c:8d:b5:91:8f:eb:
5d:f4:5e:32:f1:88:1c:37:1f:7c:1a:ef:fa:0c:64:
a6:b1:1c:f4:b7:d9:0f:42:1d:51:5b:05:70:28:6b:
c4:a4:23:57:65:ee:ca:07:59:8f:3a:7e:4f:fc:ea:
6e:5c:56:8e:5b:96:84:d2:aa:98:d9:f4:1c:c5:ed:
5d:c8:bd:85:e9:60:54:25:9b:b1:c5:52:ed:c6:29:
5f:c8:5c:e8:ba:63:ec:db:04:08:85:55:c6:59:a6:
f1:3d:4d:d8:b4:3d:8c:92:d7:3d:75:6d:a6:2f:c6:
1d:49:1e:29:1e:e9:f0:8d:9d:ef:21:fd:26:e1:79:
ea:e2:ed:6d:38:25:70:a8:7c:33:36:8f:7e:49:08:
a5:d3:64:4e:f1:e3:97:45:dd:0c:9c:e2:2b:7d:40:
d9:d1:2c:65:3b:20:c2:06:90:96:8d:8c:de:e2:e3:
42:22:b2:99:83:f0:41:96:9d:4d:1f:3e:9e:76:ab:
b7:f6:de:0b:46:e9:d5:f2:4c:01:f2:1b:06:6c:0a:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:0C:FA:51:38:CA:95:9A:82:B4:A1:64:08:12:9E:B8:F5:F0:69
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c4:dd:5f:21:fa:0a:fb:36:de:5f:91:52:43:7f:ae:b7:98:
db:14:5c:c0:eb:c3:9e:6d:fa:07:17:ed:6d:b6:ae:d7:8c:56:
dc:5b:1c:3a:08:8f:88:b8:1e:f0:7d:7d:24:1c:47:3d:8c:2d:
7b:31:7c:53:5a:04:ee:c2:79:c0:3d:a4:a0:40:a6:e5:fd:46:
4c:fe:a0:56:80:19:17:03:f6:48:ae:e1:92:c3:f7:41:99:b8:
46:7b:2a:a1:a3:52:79:e5:6b:4d:25:75:55:06:63:ce:ad:30:
49:75:b2:4b:5d:c8:f0:cb:49:83:ad:4e:85:15:28:51:91:b8:
92:c8:0a:a3:28:6b:c1:04:47:39:7b:e8:6a:90:92:da:b1:ae:
8d:2e:5f:1f:98:bf:83:b8:8e:b2:d2:0f:6b:d8:f0:29:b2:8d:
40:34:9d:cc:01:ae:72:bc:14:05:bb:c9:a6:5e:7b:59:20:e0:
d3:fa:30:a1:75:f5:da:2c:8b:8b:44:58:10:d1:62:cc:4e:e6:
b0:05:dd:50:53:97:1f:8f:b0:b4:56:73:eb:aa:ce:aa:0a:f6:
f1:d2:ef:03:c0:09:80:d8:07:73:8d:23:b5:a0:9c:70:89:94:
46:2c:e5:63:62:c7:71:bf:0e:40:58:cc:54:9f:7c:45:93:e4:
54:64:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:16 2025 by rpki-client