Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: icH2XJoM4zVbHw7Lc60/tezhJj4Gbq72Wdng+rjQn1U=
Subject key identifier: 0A:72:7D:F5:4E:6B:24:C5:DE:50:9C:BF:2C:D5:CB:7F:1C:4A:AC:36
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 0198D583742993B2B52783F757D2C08073A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 14B3
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: J2Gn0PIo50mAeS+fjgVSyqvn/U6aDNU1vBxXJoL6YXU=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:74:29:93:b2:b5:27:83:f7:57:d2:c0:80:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=0a727df54e6b24c5de509cbf2cd5cb7f1c4aac36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:b2:85:71:49:89:b1:11:8a:55:c2:24:d6:
1c:d9:9f:ff:76:1d:b1:48:16:b7:b7:77:c7:fc:2c:
c6:31:3c:14:a7:b8:3d:bc:f2:29:db:4b:20:49:66:
9c:04:9c:d1:ee:9f:d7:c5:01:03:80:7f:b8:e3:17:
c9:3c:5f:84:0a:0f:96:b3:24:40:c4:29:a0:51:15:
c9:3a:c5:26:13:7a:b5:bd:b1:61:86:80:dc:7f:8a:
07:33:f4:ce:92:e9:43:47:cf:37:fb:8d:84:32:23:
fd:14:02:02:ee:26:df:20:d3:5e:df:22:18:2a:99:
5a:66:be:98:8d:3a:a3:fa:1d:4d:a1:d2:48:91:48:
c0:d7:fd:fd:12:ad:9b:5f:13:19:97:e3:f4:9c:98:
1e:7a:b7:55:fc:34:dd:35:4e:f2:55:b0:8c:38:ef:
21:23:e2:22:c0:18:f5:7c:5a:73:99:c4:4e:f3:7b:
2d:74:b5:e8:1d:60:73:5c:5c:d9:ea:55:25:96:3e:
e1:64:54:18:45:0d:1d:86:24:39:1c:3a:c1:22:e2:
b4:7a:9a:03:6d:57:4f:89:36:4b:3c:c9:77:5f:4f:
d7:ef:4a:b7:8a:7a:0d:27:a7:54:c5:76:cc:14:9d:
8d:30:b9:a8:36:c8:78:b4:42:fe:c3:78:67:2e:3b:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:7D:F5:4E:6B:24:C5:DE:50:9C:BF:2C:D5:CB:7F:1C:4A:AC:36
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d1:60:b5:90:29:61:01:87:74:88:44:f0:07:6a:17:59:5d:
f7:ce:1f:5c:cf:63:71:3e:2c:6a:29:a4:84:3b:ee:2d:c5:ae:
e2:f2:1f:ef:c9:06:fa:bf:d6:0c:6e:d9:db:be:96:ac:7e:b4:
1e:e0:c6:80:7a:9e:cf:6d:73:7c:a0:be:75:f7:3e:0f:3e:0c:
54:ba:1f:54:52:b7:8d:ef:e5:fb:14:96:8b:11:c9:fb:bb:e5:
ec:e1:03:cc:6e:24:b9:17:b9:62:3a:f0:1c:3f:6f:6f:5b:e6:
96:3b:8e:4c:a3:d6:d1:7c:84:7b:a2:56:8b:44:bb:25:bb:0a:
10:40:47:90:6a:a0:77:e4:8a:12:b9:2e:85:d1:33:d4:cd:d7:
33:5b:f5:e2:31:dc:d7:b4:1c:74:d7:55:89:a0:d3:a7:c9:98:
7f:38:22:9a:1c:3f:95:90:ec:be:bd:f0:8a:2c:2f:dd:f3:1d:
a7:60:10:dd:44:65:f8:69:f9:fb:d1:27:f7:e0:e1:1a:02:6f:
c3:77:4b:ed:e0:47:df:26:92:1b:91:27:27:e1:ff:03:0f:b9:
a7:e8:99:25:4b:ec:35:0f:7e:cc:6d:ea:b0:5a:07:7a:b1:5a:
7c:0f:ae:1e:8a:51:15:b6:e9:35:12:e3:e7:0d:8e:d7:53:a8:
ba:bd:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:53 2025 by rpki-client