Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: bHuBoeJcTSCIDE4roPepDqEYvds3lZoexGuImdXst7I=
Subject key identifier: A1:C7:43:23:6C:B5:0B:19:27:24:46:AD:54:F0:F4:53:86:7B:66:B3
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 0198D4E092D5C1DADAD87B32271CF4D9CE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: MqQ0yHo6QV8VlRxbu9TpGUCjvvOMHybJszVnptDZeUA=)
2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:92:d5:c1:da:da:d8:7b:32:27:1c:f4:d9:ce:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=a1c743236cb50b19272446ad54f0f453867b66b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:b2:81:40:7e:af:56:1a:4a:78:aa:6a:2f:
e1:d8:19:23:1b:e1:d8:d4:82:cc:be:5d:46:bf:c6:
1b:3c:2a:22:37:4d:89:dc:a4:42:8b:88:73:e6:95:
78:8e:8e:d3:25:49:8a:0b:87:45:57:d5:51:20:b1:
27:cf:7d:b4:2e:54:f6:84:73:8f:9f:ef:f6:97:25:
99:13:b3:95:4c:67:3e:a1:b2:dd:48:64:de:aa:59:
77:75:48:ef:83:ea:c8:75:a1:3a:54:bb:bc:1e:1f:
2f:b8:5a:b1:8f:92:b9:2b:d0:9b:d2:a0:95:4d:ca:
2e:d5:56:c1:8b:73:9f:4f:75:06:06:32:4a:b2:48:
fa:0d:74:70:4b:9d:b5:bc:41:7f:dc:b6:0a:01:42:
d3:85:77:59:21:3a:2e:06:9c:37:27:e0:1c:c7:2d:
c8:69:81:dc:1c:aa:49:47:3c:b9:16:22:00:33:7e:
99:31:5c:db:de:9e:96:6a:42:90:25:43:43:c1:94:
b0:93:84:7a:70:80:73:2e:cd:5b:7a:fe:18:b2:0a:
76:16:87:57:ee:da:d0:56:a1:f3:27:64:dc:ba:fd:
27:b5:52:8c:87:84:01:9f:e7:4a:08:b7:f1:2f:23:
b2:1d:92:fa:65:6b:e4:fd:c5:30:8d:7e:51:3f:42:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:43:23:6C:B5:0B:19:27:24:46:AD:54:F0:F4:53:86:7B:66:B3
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8e:88:12:07:8b:df:c1:46:a0:2a:6e:57:9c:9f:e1:0a:65:
b8:c6:81:f4:e6:0d:86:c8:60:af:8b:9c:11:24:08:6f:f6:b0:
dd:67:77:01:ca:2a:b6:ed:03:8e:57:11:1d:0e:d2:fd:5e:05:
cb:2f:f6:3b:96:03:de:65:30:98:27:dd:bd:30:57:05:2d:70:
dd:75:a4:8b:55:14:d1:ff:84:76:2c:1c:32:87:a2:c4:9a:a2:
7c:f6:43:9e:96:6f:14:4e:4f:a1:88:fa:91:c0:70:dd:9c:5d:
13:45:d2:4d:ea:2c:7a:a2:99:0b:54:7b:cb:68:53:f9:91:96:
66:8e:60:b8:8e:db:79:71:73:14:d2:fb:7a:fc:fa:83:34:ca:
b7:07:70:a9:57:82:91:97:aa:09:4e:f4:7d:06:76:ba:0f:59:
d3:69:2e:f1:4a:80:c6:7f:2d:9a:65:47:35:ed:fe:38:af:a1:
4d:83:8a:26:5d:64:79:db:b5:74:4a:13:74:e5:01:0f:eb:5f:
8c:f3:3d:3e:f3:24:ad:12:3d:7d:bd:c7:f2:e2:9d:cc:6c:09:
b5:f4:15:bb:d3:1e:67:ef:4e:84:3f:9a:5a:53:09:48:88:d7:
56:85:75:b7:a8:11:c0:e1:7b:91:38:9f:b5:f2:a7:bf:b9:6b:
81:a7:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:14 2025 by rpki-client