Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: j0b3fYdXMt3a/TzUf97+Jrijy8WD8d46mU8S+FyTL2k=
Subject key identifier: A0:C5:DB:5C:2B:4E:B8:58:42:9A:BF:5B:40:92:57:E3:8F:9C:23:80
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 0198D65FBE62295F982677F3AF544FC906E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 0598
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: 1-i_f4gNCAnPwT26M-00faBCZ1ec.roa (hash: rf9DtMiWGOZOoz1U+iRouParfUgOp6ltk1lTfbvhGLM=)
2: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: 2ayHhG4KPvKNlyia89i3aPGAOmwBWX4YjinddlkaCzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:be:62:29:5f:98:26:77:f3:af:54:4f:c9:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=a0c5db5c2b4eb858429abf5b409257e38f9c2380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:f2:cd:00:6c:4e:33:40:a3:b7:8a:c4:3f:
ca:2f:f2:b9:f6:9b:8f:2a:06:54:48:7b:f8:f2:75:
1c:62:b9:a5:2d:cf:36:65:ba:ff:26:8e:19:aa:24:
2f:1a:1c:3a:cc:fd:10:6e:1f:b5:7d:53:29:31:1c:
94:6b:aa:f4:39:7a:67:21:ac:05:0d:b8:09:14:08:
f4:5b:29:2b:d4:ae:d0:5d:2c:6b:4a:5d:b8:55:6d:
60:af:9b:64:50:23:a5:04:83:0d:93:b2:1d:93:c3:
5d:82:7c:13:a1:4f:92:a3:25:23:f3:46:0b:2b:ee:
80:31:9e:a2:38:5d:06:31:8a:9e:5f:b5:8e:49:09:
1c:e4:23:73:b1:6a:e4:e5:60:08:a3:18:74:cb:da:
16:53:73:b9:26:0c:15:f1:2a:e7:97:d2:b6:75:8d:
b1:7d:f8:70:18:2e:c0:b4:2c:22:59:47:7b:03:c7:
90:8e:5c:78:38:bc:7f:25:a2:dd:7d:10:9f:cf:fc:
f2:cb:4f:0a:28:f5:eb:8d:5e:58:63:85:0b:50:84:
fb:13:2b:c9:4d:8b:6d:45:57:27:ba:a1:b1:c0:f4:
bd:dd:aa:d5:31:39:fd:ca:8f:a2:2a:26:4b:ec:77:
f6:ae:84:1a:f4:90:33:e0:07:e7:26:38:82:19:4c:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C5:DB:5C:2B:4E:B8:58:42:9A:BF:5B:40:92:57:E3:8F:9C:23:80
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:db:28:6d:77:c1:00:27:9a:73:04:31:44:7e:59:48:79:4d:
41:88:75:35:0e:41:db:21:3d:7f:81:ea:d4:4c:0f:a5:2e:23:
e1:b8:bd:b4:e3:6e:84:ec:6f:0d:cd:74:5f:83:23:1f:03:49:
af:02:7f:42:b3:2d:01:07:7e:2f:8e:f7:fe:14:17:93:db:75:
b9:2e:b5:15:a4:39:ee:73:99:cf:65:40:20:85:f1:d0:8c:c3:
0f:f5:4a:ee:70:db:91:d6:ae:29:97:a0:28:9f:9a:09:89:54:
aa:5a:32:59:20:57:cb:04:49:fb:f9:90:c4:d1:39:00:86:64:
4f:73:7d:26:62:18:ac:b3:f2:0e:48:b7:74:fe:07:c0:0e:9c:
ea:0d:5d:a3:de:ef:c6:24:d3:66:90:6b:02:80:94:52:c7:9c:
eb:fe:a3:92:92:70:e1:a7:51:b0:cd:d0:59:ef:9a:da:a0:14:
f3:4f:26:27:f7:e2:7d:12:58:ab:b3:83:5a:57:3b:e9:da:3e:
3d:f0:c0:33:26:b1:31:f7:4d:98:8b:1a:ff:ca:5b:97:b9:fe:
9a:51:41:6e:5e:a9:02:5c:40:67:a3:99:d9:7c:06:49:57:ef:
07:cf:fb:5e:a8:84:4e:9c:78:b5:f2:97:10:61:f0:3f:4e:7b:
ae:ad:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:22 2025 by rpki-client