Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: Bpe7U2UGyxPtMPYXJqjVONwYJyO43D144BIIjv9yLzE=
Subject key identifier: A0:A9:6B:2A:F3:7E:02:36:37:A9:C6:5E:B9:97:DD:78:E1:A8:D6:94
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 0198D5BC0324EB09CCB38B0DBB7450318B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=)
2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: tqUILtPTcn/5gTlyDKoZjLd/YPS/8SVsDZJC7vP0RiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:03:24:eb:09:cc:b3:8b:0d:bb:74:50:31:8b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=a0a96b2af37e023637a9c65eb997dd78e1a8d694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:3f:5b:19:69:c7:a0:c4:f1:e3:d1:e1:d3:
31:75:ef:c2:ce:78:55:30:9a:89:ca:0c:56:1f:68:
75:f5:8a:d6:f5:88:0f:1f:b2:d4:ce:e7:94:07:82:
76:a5:0c:d0:6c:ae:59:fb:77:78:b4:35:73:2b:87:
e0:0a:95:70:02:4e:d9:df:15:35:a4:15:14:04:bf:
10:7a:5c:81:04:ad:25:3e:68:61:6f:bb:ae:18:f4:
ad:76:b0:18:e2:35:15:1d:1b:4b:23:eb:ee:f2:1e:
c9:0c:2d:76:a1:29:3c:ea:c6:a0:49:14:15:39:4d:
9e:a8:e3:ef:c1:b6:65:fa:ca:dd:16:43:42:41:0f:
0d:00:ae:d9:cd:f2:26:49:d0:ae:8e:6a:c4:cc:f5:
29:28:e2:42:26:b5:bf:c6:db:4c:e5:5e:89:8f:9c:
6f:a3:42:b2:bc:fa:f9:c3:d7:c3:b1:32:c1:54:4b:
6a:34:31:25:88:3d:a6:b5:9e:7c:da:3c:55:7d:8a:
69:b4:21:6c:f9:d7:13:23:00:c4:3a:f4:1f:ca:d4:
1b:33:13:b3:e4:25:67:c2:9a:73:97:17:74:cd:9c:
2b:a8:70:e6:65:20:42:ee:9a:b1:a9:4a:46:69:18:
57:32:75:14:30:62:d5:83:2f:22:f4:41:6c:10:9c:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:6B:2A:F3:7E:02:36:37:A9:C6:5E:B9:97:DD:78:E1:A8:D6:94
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b2:b8:03:98:4b:07:e7:ff:7c:84:93:19:3b:4f:01:49:14:
ce:4b:fa:9b:35:0f:cc:7f:43:de:92:34:07:3a:d7:51:f7:08:
2e:b7:05:b0:f4:7f:59:00:ad:6e:bd:61:92:4f:df:95:57:ce:
bd:b3:3c:3d:cf:db:38:46:ad:7d:c5:54:9c:ef:3e:b1:d4:fc:
b6:19:4d:62:ad:c5:7a:38:52:d9:6c:a4:bd:03:7b:d8:7f:e3:
e3:bd:59:5a:ee:1b:5d:c6:74:fd:1c:3c:60:bb:70:b8:30:9d:
ce:c4:f6:69:c0:70:af:a5:ba:8a:10:f0:55:d9:02:bc:38:39:
86:cc:aa:63:06:26:c6:90:04:08:87:0d:ef:5f:87:fb:da:b6:
6a:cd:c6:9a:71:94:9a:6a:c0:10:74:dd:c7:5c:11:d0:7f:46:
2e:0f:12:a3:d3:0b:f3:12:a9:25:98:a5:e7:3b:eb:b8:23:63:
8d:5f:33:b7:a4:28:93:ab:2f:30:5d:cc:95:af:8a:63:76:0a:
f6:01:67:73:97:82:33:92:8f:65:5c:6c:8d:ff:50:e0:43:c8:
a4:0f:49:23:c3:d9:8c:21:d6:9c:63:24:06:e1:39:0b:9c:a7:
92:71:56:f3:da:ac:55:37:36:a0:70:63:8c:7a:9a:23:be:a7:
8c:fd:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:45 2025 by rpki-client