Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier: BpLkvnd6O1BSDeyQmbUiXVm21Nsh0pV1nlIURvcrWkY=
Subject key identifier: CB:F3:EF:85:34:BD:97:94:71:35:F5:07:DF:56:2B:29:B3:2D:74:1D
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 0198D4E0A9FC16F184265F72B464BC0B934D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:30 +0000
Manifest this update: Sat 23 Aug 2025 03:02:30 +0000
Manifest next update: Sun 24 Aug 2025 03:02:30 +0000
Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: gdvUhk1juwWSsntUrDEAsqiVYhkRo9t9OhoEzvC1md0=)
2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a9:fc:16:f1:84:26:5f:72:b4:64:bc:0b:93:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Aug 23 03:02:30 2025 GMT
Not After : Aug 24 03:02:30 2025 GMT
Subject: CN=cbf3ef8534bd97947135f507df562b29b32d741d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:ed:ae:a3:71:e9:57:12:48:ef:44:28:66:
18:52:9e:72:72:5a:37:d1:78:8b:4e:ba:35:3e:89:
5f:87:94:1a:a0:16:1e:9f:5b:54:38:10:cb:04:ee:
79:55:fc:2c:9e:81:6a:8a:aa:0f:c3:bf:41:18:3d:
64:6d:d0:0f:52:0c:5f:60:d5:3f:fe:6e:ab:b8:2f:
d3:f2:4c:19:43:11:70:c4:eb:6e:6b:a4:53:7c:06:
a1:8b:23:5d:4f:d9:8c:82:e5:75:4d:ae:f0:96:e5:
cf:f2:41:35:77:8e:e2:1c:e6:6a:78:b6:f2:36:0c:
1f:e6:a7:e8:cc:2b:1c:74:62:1f:c1:e7:61:bb:cb:
18:f0:a8:bb:20:f8:07:cf:89:f4:e0:23:d4:15:5d:
29:a6:73:b9:fc:46:c2:85:6f:df:65:d3:43:79:80:
46:e0:57:5c:db:cb:b5:7d:3d:66:44:0c:28:b7:05:
f9:c0:e6:d2:04:8f:03:c5:48:36:9a:46:a1:d6:e5:
44:c6:fc:b3:dd:79:96:5f:b1:c3:8c:74:54:4f:2c:
d6:99:50:d8:3d:c9:b1:a4:1e:ec:f6:7a:40:ea:6c:
67:c5:0b:26:2e:5c:1d:c7:6d:a5:4a:5c:90:e9:01:
bf:62:12:18:b0:fa:38:74:98:a2:77:50:09:e7:d5:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:EF:85:34:BD:97:94:71:35:F5:07:DF:56:2B:29:B3:2D:74:1D
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2b:0e:fc:02:b8:32:7a:f6:52:9a:aa:f2:d0:0a:f4:e8:5b:
93:cd:3d:09:7e:36:0e:ce:b0:96:70:37:fe:68:f2:43:89:78:
36:4e:21:3a:40:71:79:e4:88:02:02:b0:16:e3:59:1d:d7:92:
7d:bd:04:42:bf:60:09:d7:70:49:92:a7:b0:a6:f9:37:a5:71:
a2:25:ff:5a:84:c3:f1:7e:49:93:eb:22:cd:fc:bd:1c:38:b9:
25:9b:f3:f1:c1:ae:e1:85:97:63:54:94:28:8b:ef:79:da:98:
a8:c7:1e:b4:e8:fc:e4:e6:1f:ec:9c:a2:21:92:be:df:64:c3:
82:65:fc:17:70:69:a9:89:bb:96:f3:10:f7:c2:a6:1f:81:25:
0c:27:0c:a3:c2:c1:3a:87:ab:95:e1:29:85:42:02:2d:ac:6c:
4c:09:63:59:f8:d5:6f:83:eb:86:c8:9b:d5:1f:f9:d7:8d:9b:
12:ca:2a:de:45:47:05:eb:91:66:59:15:a6:38:dd:10:08:f4:
31:42:6c:08:36:1c:6e:a5:e2:ac:c3:3b:05:a0:1e:58:10:2d:
fb:8d:fa:61:ea:c3:7d:07:67:24:0c:17:97:d9:2c:55:97:2a:
17:5d:72:b6:c2:d4:fa:44:1d:c2:fb:ff:4b:c8:a6:d3:2a:80:
10:71:4c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:19 2025 by rpki-client