Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: KhwnMGossxU/kCYJlFag9E2xTX8B32o92bx2OQfgN28=
Subject key identifier: EF:8E:A1:07:A2:C2:AD:3E:29:54:C2:CD:47:28:E9:7E:3A:62:5A:76
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 0198D4E06CBE5EE8B5F3CC458281AC3464A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 15C3
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: x4pjmFbim8LgA5O564ZZ3W2wEAA5BhuClmQplNWM6dE=)
2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6c:be:5e:e8:b5:f3:cc:45:82:81:ac:34:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=ef8ea107a2c2ad3e2954c2cd4728e97e3a625a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:91:55:cb:7c:1c:a0:a2:84:1e:1d:4f:5a:
4b:3a:f1:88:3a:c1:67:31:66:46:87:02:0b:8b:c1:
48:b3:6c:e6:e8:13:48:55:ad:b5:5c:8e:a1:46:66:
fa:00:7a:fb:b0:70:b6:de:6b:41:23:4c:85:0a:f9:
da:7d:d4:bf:c5:e6:d5:a8:cf:55:02:3f:67:71:49:
2a:06:9f:f7:5d:26:78:c5:b8:e5:41:7a:27:6d:10:
88:b0:94:2c:cb:64:5b:d1:09:66:e0:f0:62:f2:b2:
3a:85:bb:c0:4a:53:8b:88:cf:5f:cc:e2:0c:ac:48:
9f:56:08:58:5c:e2:80:e4:47:d2:58:b5:79:cf:ea:
d9:8e:57:3b:b7:5f:d3:88:ab:7e:72:ce:3b:2c:42:
ae:6a:dd:f7:9f:5e:f4:86:0c:ad:36:09:ca:0b:4f:
c0:96:0b:68:b7:7e:43:32:a0:af:35:cc:a8:fa:ef:
31:64:8c:4a:b8:e4:98:7f:0e:e3:e6:d7:e5:d3:ab:
e2:8f:68:10:ce:1a:be:4e:bc:b3:52:26:15:87:26:
79:eb:39:83:e1:1d:12:3c:2b:2f:1d:c1:9e:57:82:
ea:4c:97:af:4b:9c:0b:3b:98:ea:47:56:26:a1:d9:
1e:4c:57:ae:b0:cc:3b:76:e1:19:40:92:bb:26:99:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:A1:07:A2:C2:AD:3E:29:54:C2:CD:47:28:E9:7E:3A:62:5A:76
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2e:ab:8e:ef:23:15:fe:6f:9c:b1:e0:06:b0:7d:96:1e:8b:
3b:0e:b1:fe:7e:ed:ba:0f:93:83:50:9b:de:99:2c:dd:e3:58:
f4:39:7a:f0:93:93:49:6b:19:26:51:19:2d:22:32:6d:5b:e5:
80:6c:9a:ea:ad:e9:ad:63:11:68:c7:cc:0a:c2:bd:4e:4b:71:
49:29:c6:5e:29:d8:a7:09:58:ac:dd:ce:22:14:1f:36:6c:17:
05:9e:85:b1:18:d2:3a:62:21:af:b6:61:05:a3:cd:79:51:23:
57:58:3d:15:d3:45:91:fc:4d:79:c3:7a:1f:7b:a1:7a:b1:6a:
2c:a7:fc:5f:da:dd:08:2c:e5:eb:c3:38:ce:97:7e:29:64:5f:
b7:cc:58:18:7b:88:18:24:c6:a7:65:bc:dc:91:47:c4:49:da:
8b:69:37:66:68:16:28:97:b3:b8:68:92:33:61:a3:16:2c:cc:
89:54:93:c7:3e:45:d4:e7:41:dc:9a:c7:56:ee:08:a9:cb:f1:
72:fb:16:75:23:65:0f:6b:af:14:d8:29:de:f8:fb:64:93:bc:
bb:79:38:a3:77:86:83:ad:c7:45:3f:d3:e9:cb:a5:73:90:2b:
54:7c:6e:f1:06:5a:c4:a7:69:59:22:12:a5:bc:27:ea:26:d9:
64:af:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:09 2025 by rpki-client