Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: JC255AlABoiIsKLPQX6irFPPCJYliTUbG/HXYOztPAI=
Subject key identifier: 04:87:6D:06:6C:C2:F0:97:C1:C8:CF:CF:A1:82:11:DA:A6:AF:A1:77
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0198D54E6CB8B01FDE85341625A0517FC7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 0469
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: +5GylHxuRqBVQ620AgziLrf45yam2f5oaBxeVLi6GsQ=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6c:b8:b0:1f:de:85:34:16:25:a0:51:7f:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=04876d066cc2f097c1c8cfcfa18211daa6afa177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:d2:1e:8d:22:18:e5:4a:50:0d:1c:e0:ed:
87:49:3e:06:52:ce:25:7a:b1:2e:4c:6b:8a:f7:ff:
12:46:e8:08:e8:9b:d9:89:bb:1f:3f:0d:2a:29:16:
34:7d:1a:38:13:77:9e:c4:3a:a9:85:79:2a:65:68:
73:00:a3:8d:0f:40:a7:35:fc:d3:4d:24:0c:40:c4:
db:78:b3:aa:b8:7f:76:6d:b1:4a:e7:69:d6:4b:dc:
33:c1:3e:86:2d:77:16:cd:36:e0:e7:62:60:c8:b3:
00:fc:e5:53:8d:f2:19:a5:84:78:17:3b:6d:8b:79:
04:09:90:4b:e9:79:30:06:e9:97:66:12:0e:5b:12:
fc:68:71:0b:a2:63:c1:da:37:91:81:83:a3:b8:e6:
fb:10:ca:49:35:37:17:fa:4f:70:21:2c:a5:a4:16:
98:02:6a:c8:c4:e0:d1:74:df:2e:c6:c3:eb:c3:2d:
e7:2f:77:df:92:e7:90:b9:43:ee:d5:e6:dc:b5:ea:
ee:42:0c:0f:6c:dd:1a:9b:24:fa:b7:a1:30:ef:58:
9c:82:4c:5f:3a:83:3e:a3:aa:f1:53:2d:75:15:35:
2d:79:59:5d:99:d9:e5:84:d1:44:93:db:dd:56:51:
c5:e9:d5:20:8e:9d:61:88:ba:01:22:44:a9:a1:ad:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:6D:06:6C:C2:F0:97:C1:C8:CF:CF:A1:82:11:DA:A6:AF:A1:77
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9a:47:38:15:e6:7a:b1:57:3f:fd:2b:09:50:50:7f:be:00:
ed:9b:30:74:51:0e:9e:7f:02:da:75:0a:e1:80:9a:8a:3b:5d:
5e:e0:3e:a9:04:fa:1c:91:d7:44:80:13:f4:06:25:43:4c:b0:
21:cc:10:09:76:62:08:9e:b7:3b:0b:2e:2a:8d:e0:52:67:16:
c9:bb:b2:3e:34:0a:f6:a1:d3:9d:61:49:99:3e:d0:5b:05:61:
73:49:25:4f:c1:fd:e9:31:51:cb:c8:e7:ff:00:e7:63:57:45:
30:d7:aa:43:45:cc:c2:d0:5e:ea:69:61:b8:94:29:a3:14:87:
7d:8d:01:28:db:b1:4e:8a:cf:73:56:03:c2:58:ca:9d:cc:24:
c6:c6:f4:e6:bb:ba:00:f9:7f:51:5d:df:8d:8d:de:51:46:db:
b8:ca:06:f1:59:0b:80:4f:9c:36:10:29:b2:c4:1b:4a:82:bb:
17:60:c8:53:eb:0e:42:14:79:9d:15:07:ec:af:bd:3c:34:5c:
37:b9:84:9d:82:f8:ed:9c:23:c3:86:46:49:b8:d3:b9:a0:2a:
d9:1d:d1:dc:d3:ee:2c:13:18:fa:a7:a3:97:f1:bf:24:36:02:
c3:9f:1c:63:e2:f0:a9:90:2c:47:0e:e2:1c:48:6b:42:50:05:
32:93:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:47 2025 by rpki-client