Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: wxiyAI5M+LWsyhSwb/QATXeknyT0QZnfXX+Ohnxjkrk=
Subject key identifier: BE:66:73:02:7E:9B:A9:AA:77:87:83:A9:8F:6D:C0:0B:59:CD:B4:56
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 0198D698856CF9F2C72BC75EAC3F098C35B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 0F8D
Signing time: Sat 23 Aug 2025 11:02:56 +0000
Manifest this update: Sat 23 Aug 2025 11:02:56 +0000
Manifest next update: Sun 24 Aug 2025 11:02:56 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: /NpX/aBq87gCiO2PZ69tqKdwfU9O4vbw2Y+I/JxdgVA=)
2: SAqPRmB-G6msTnaXyr7m6jyG5Ko.roa (hash: 2YxDfMO4o3RvNMQXIEtYRv7ty5CdsK9saG6EToUsNdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:85:6c:f9:f2:c7:2b:c7:5e:ac:3f:09:8c:35:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Aug 23 11:02:56 2025 GMT
Not After : Aug 24 11:02:56 2025 GMT
Subject: CN=be6673027e9ba9aa778783a98f6dc00b59cdb456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:76:49:ad:eb:6b:07:94:a7:dc:2e:a4:02:
f9:93:09:94:2a:54:bb:f4:69:54:a9:bd:06:65:ae:
2f:38:de:57:ac:fa:60:ba:6f:e4:69:9a:22:ff:0c:
03:18:e3:30:79:2d:ee:eb:2a:97:2a:c8:9f:e6:9f:
1f:4f:d4:0a:65:42:de:29:5c:fb:a3:71:1f:00:8d:
39:8d:d1:dd:08:c8:a7:fe:93:72:8c:bf:21:65:db:
ee:02:47:9e:59:bf:62:f3:9b:52:3c:f6:bb:d0:5a:
12:23:0b:54:90:2f:43:1b:91:73:0e:06:57:e3:95:
1d:4f:02:24:5c:52:ff:0d:d7:4e:61:e8:17:a6:89:
e3:df:fe:31:33:55:e9:ba:9a:a8:e3:13:73:ed:25:
a8:0b:55:53:36:ef:44:5b:7e:f9:dc:c4:4a:bc:62:
0c:21:d9:07:e2:18:57:72:61:64:72:ea:3f:00:c7:
29:7e:e4:67:4d:39:95:af:52:27:18:0b:b7:90:bd:
2f:bd:77:0c:0e:ba:ff:3e:92:32:37:60:a1:97:6b:
cf:b0:a4:15:14:a9:46:a2:7d:a4:74:5d:1b:22:a6:
ee:e4:31:e5:d8:d4:7f:b6:88:ba:f5:a2:12:af:bc:
3d:1c:bb:7a:c0:60:88:f3:0a:c8:35:7b:e3:f0:10:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:66:73:02:7E:9B:A9:AA:77:87:83:A9:8F:6D:C0:0B:59:CD:B4:56
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:85:f2:ca:8e:9a:cf:d0:8a:c5:1e:0b:f9:94:46:e9:9c:45:
b3:16:06:ae:37:03:a2:07:c3:86:0e:b5:6b:ed:a9:a9:cd:69:
3a:7f:99:dd:26:3d:23:40:95:ca:da:eb:c8:5a:15:e1:ef:63:
fc:2d:58:eb:e6:03:e8:b5:56:cb:de:5f:b5:a4:b1:8c:03:e3:
d5:e3:0f:0b:77:4e:a2:2b:e2:13:95:bc:bc:dc:9e:a9:8c:92:
82:89:ef:0d:86:9a:87:c9:05:e6:35:f5:bd:17:12:b7:32:c8:
d4:69:1c:e3:63:c0:15:a6:7f:3e:27:45:b5:bc:3a:af:e7:d7:
0c:3c:e7:2f:d7:77:0c:9d:09:0f:66:88:f3:6a:a0:5a:d5:e0:
c8:8d:9f:37:bc:03:ee:39:93:05:6c:e1:79:75:d5:ed:26:5f:
bf:d3:10:92:56:7b:4d:9e:ef:1f:6d:98:66:41:c8:8e:5a:34:
35:64:af:4c:ce:15:92:29:c1:6a:33:9e:46:75:ea:2b:41:a6:
c7:a9:60:4e:5f:91:84:11:20:56:07:d4:ad:9e:52:71:e1:ff:
c0:40:a0:0d:44:e1:5f:33:70:41:b7:95:b1:dd:d6:4a:9b:c3:
ea:92:94:65:80:20:fa:86:83:39:ed:d0:09:b3:45:ff:63:00:
53:d5:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:24:12 2025 by rpki-client