Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: MIOFQld2hzfcZYqYfqgTsumZj9TNJDhxcWJ9RiMKuv4=
Subject key identifier: 5A:41:62:D4:03:99:19:99:D7:B1:58:19:D8:8A:F2:05:EB:DA:63:44
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 0198D4E010B1AEC15F9C3AED9A677FA01E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 1336
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: Biv2qTrQNJJYQlmIhX2GXCsPh8k.roa (hash: qgzc+HC1Pbq5Sym5wnfMxLGpd7cCm/TouNcPCVsFEcM=)
2: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: /ZNA6itJHxk4KWuYh9DkCWx2sJHHFNzMhEEh2lV1lzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:10:b1:ae:c1:5f:9c:3a:ed:9a:67:7f:a0:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=5a4162d403991999d7b15819d88af205ebda6344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:26:c4:f6:11:da:99:92:e7:c5:41:06:45:
ae:05:31:ed:d6:9c:9e:8e:c1:72:86:ba:1d:33:71:
41:84:63:46:14:e8:cb:13:63:e6:28:62:a8:ad:85:
26:e6:08:14:01:24:ac:85:4b:d8:4e:78:04:2f:56:
0c:06:8a:d3:cd:08:5c:e9:95:51:63:4d:fa:02:d3:
5a:b8:ba:a8:e4:a3:42:05:7f:b3:48:cf:09:e0:88:
92:dd:dc:8f:dc:ac:25:bb:62:c6:f8:bf:e1:7e:04:
63:64:d7:79:c0:4b:e8:d4:42:ac:21:77:13:e1:11:
da:33:1c:44:38:17:9f:43:07:db:6b:dc:ed:73:73:
e9:80:9b:4a:af:b9:35:5a:68:04:ee:7c:e5:9e:a6:
a6:3d:7c:01:60:2a:97:ec:d8:21:be:d5:2c:72:c9:
8a:ff:0f:20:e6:7b:09:7f:2d:d3:30:28:36:1a:20:
7c:66:34:f4:08:92:f3:eb:6c:ac:08:f8:c1:08:87:
f8:e8:37:9c:87:85:92:fe:e1:50:4c:a7:e9:4e:06:
3e:83:c2:a6:43:83:2f:8d:6c:f8:cc:27:87:a1:c1:
21:1d:78:bf:d1:32:37:a4:81:8f:14:a3:52:2c:28:
39:a5:18:e3:d7:83:24:99:da:81:b8:19:07:93:c7:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:41:62:D4:03:99:19:99:D7:B1:58:19:D8:8A:F2:05:EB:DA:63:44
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:05:3c:c0:a6:8f:ec:05:48:b1:e7:45:0f:58:53:35:9b:24:
75:da:c1:48:38:b5:89:31:01:b8:21:48:7e:db:6a:60:37:32:
a7:20:9e:00:66:49:90:31:f7:ec:b9:e8:cf:9c:b4:c1:d9:ad:
d2:31:0f:71:7b:ce:b8:08:8b:24:19:5e:8f:e3:ad:f0:34:c0:
86:ab:5d:ad:1f:fe:46:3a:65:06:37:dd:8f:b4:67:63:ab:fa:
1d:04:06:dc:62:d4:ff:a2:b4:2f:25:38:2e:21:7a:3f:57:79:
b6:d0:33:ef:b2:a2:84:80:76:a0:c6:8c:8d:15:3c:dd:f9:f7:
ad:27:43:33:50:41:35:87:0a:4b:39:3a:42:cc:83:fe:70:cb:
71:83:bd:94:f4:6e:8e:28:ec:43:f4:67:9c:6e:ee:0c:8e:e5:
42:45:cc:a7:61:49:e1:88:51:af:d6:ad:e3:6a:f5:41:75:82:
02:ef:90:c3:03:71:0b:bf:69:72:fe:8b:bd:65:34:8b:0e:2e:
ed:4c:ea:f9:18:90:03:91:f6:32:a2:c7:fc:ad:db:95:93:24:
5e:4b:92:69:81:40:b7:52:ad:4b:27:cb:0e:83:fe:7e:b7:22:
3b:b5:1d:de:e0:c5:7e:f2:d3:83:5a:e0:5f:46:bd:ac:f4:c8:
d4:f7:96:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:44 2025 by rpki-client