Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: wEusq3ISOuB4sXDbbO751UqxNarEuoEtVWdmDowWX6s=
Subject key identifier: 6D:EE:DC:71:F2:25:05:D1:E5:63:2E:76:37:03:B4:6B:9C:AE:9F:F0
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 0198D65FE658AD67A9BB861A6BD3DEF22E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:05 +0000
Manifest this update: Sat 23 Aug 2025 10:01:05 +0000
Manifest next update: Sun 24 Aug 2025 10:01:05 +0000
Files and hashes: 1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: 3L95qn/AUrHFSOR+AQfvIw9CEmxUt8AoYDIyjf0UdWw=)
2: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (hash: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e6:58:ad:67:a9:bb:86:1a:6b:d3:de:f2:2e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Aug 23 10:01:05 2025 GMT
Not After : Aug 24 10:01:05 2025 GMT
Subject: CN=6deedc71f22505d1e5632e763703b46b9cae9ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:5f:45:d1:bd:48:05:a4:0a:0e:ed:14:47:
62:20:b7:84:70:b4:30:26:e3:14:6a:55:57:4f:90:
4f:6e:93:c2:64:6a:05:d5:66:12:83:8a:20:a2:96:
68:93:c3:c7:f8:be:1e:71:f9:c5:ae:e3:54:74:f9:
e9:48:c4:08:52:82:3e:46:a4:bd:a7:82:a8:fc:28:
35:a0:a1:28:04:4a:7e:fa:49:35:d5:2a:ca:a4:36:
c7:13:37:d8:3c:20:4f:7b:a8:64:13:4f:d9:7a:05:
7e:90:69:f1:7f:ed:49:7e:9a:d6:f5:5c:02:ad:46:
5f:48:46:6d:4f:4a:d6:2c:74:8d:fc:16:49:ec:a6:
7f:ce:d4:45:28:a8:b6:1b:44:bd:04:a1:80:ea:6c:
1d:95:9d:f3:56:a3:e9:49:f8:d9:c7:7c:95:2a:34:
9e:a5:2f:84:62:92:77:b0:a0:51:b1:c3:24:36:d7:
c7:88:9d:fc:82:b5:9a:b4:34:68:cf:70:f4:15:53:
7a:5e:57:c3:f6:3b:a6:fe:18:36:48:38:f1:30:1a:
11:88:44:6f:ea:f1:e5:33:fb:47:ea:f0:68:a8:e5:
8a:0f:45:81:c0:6f:6f:e5:a2:19:3c:09:1b:7e:7e:
30:d7:65:9b:b6:9b:41:9b:d3:80:8c:a9:d8:29:9e:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EE:DC:71:F2:25:05:D1:E5:63:2E:76:37:03:B4:6B:9C:AE:9F:F0
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ae:e0:3c:60:a2:65:ec:c6:bd:09:06:35:d1:46:b7:2d:12:
ea:01:1c:7f:13:1e:9f:60:0b:61:e0:e3:0b:c6:83:42:1c:75:
fb:ee:68:99:ba:69:22:b3:3d:5e:35:fb:04:f2:0f:d6:6a:54:
3c:c2:8f:95:69:00:fd:4f:0d:0c:9e:23:67:21:22:26:e8:50:
67:f3:9a:cb:c1:6b:a7:9a:6b:a2:70:5f:01:f0:ba:dd:76:c7:
d9:e4:b2:6f:09:95:3e:52:f4:17:81:82:be:ca:cf:a7:0e:28:
b3:ac:b7:44:8c:87:c7:41:a3:b9:a8:9d:eb:d0:1e:3e:d0:d7:
2c:3b:46:49:4d:1b:1c:cd:f2:b2:73:ff:87:3e:cb:98:cb:de:
83:c6:1b:2f:0a:36:d2:db:9b:4a:e6:1c:29:0d:44:b8:6a:bd:
35:83:3f:2f:30:c2:b7:19:d5:52:5e:65:e5:15:4e:df:ce:83:
d9:1c:29:70:ca:30:1b:32:56:41:a5:5e:6d:8a:b7:42:96:59:
27:d6:68:bc:6d:8e:9b:eb:c5:ed:9c:8a:da:da:5a:d2:a2:02:
f2:ce:a1:56:af:30:85:36:df:d9:20:40:cd:8e:ff:00:e2:de:
b1:66:d0:e8:1f:d5:6a:49:4f:e1:49:40:32:f8:a9:0f:c7:68:
e6:61:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:03 2025 by rpki-client