Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: 8/rxa9gCyRiE54W/7r6WbHgZ6dS4QjdidM0wE4V4xAA=
Subject key identifier: 97:3F:1D:BF:91:B7:E8:4C:C0:D9:7F:F5:3C:C3:B2:CF:85:BD:4D:17
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 0198D5161B1C9DFF37BC499F96B0E1D83589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0DBD
Signing time: Sat 23 Aug 2025 04:00:52 +0000
Manifest this update: Sat 23 Aug 2025 04:00:52 +0000
Manifest next update: Sun 24 Aug 2025 04:00:52 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: WfCX5BqYKqPz1LUgHhl7eRqrRmby0HcNI3TKM0WCbgc=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1b:1c:9d:ff:37:bc:49:9f:96:b0:e1:d8:35:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Aug 23 04:00:52 2025 GMT
Not After : Aug 24 04:00:52 2025 GMT
Subject: CN=973f1dbf91b7e84cc0d97ff53cc3b2cf85bd4d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:04:f0:82:c3:a3:9c:95:60:c5:ad:9d:58:
ac:6c:63:01:b3:bb:c2:b5:f7:e5:1c:1b:27:a0:c6:
66:f6:52:71:fb:55:bc:94:49:36:45:b4:7a:5b:01:
99:95:64:de:fb:72:b0:e7:e4:11:d3:8a:c7:76:96:
91:63:c6:07:07:b8:1f:03:4a:e4:a2:79:a4:5f:1a:
c2:6d:14:14:33:6e:45:94:e3:bc:d8:07:a7:72:21:
fb:c0:1d:03:87:1f:77:93:88:ae:69:93:f5:3f:fb:
e3:e7:12:7e:b3:86:da:be:71:4e:ad:da:3e:fc:88:
0c:31:c0:87:c3:a4:a6:7c:22:7c:ad:68:ba:04:be:
53:7c:8b:6e:44:dd:c6:57:43:7d:db:2f:c0:1a:d5:
f3:07:78:1e:b6:09:84:dc:95:33:08:1b:73:e6:c0:
5e:b3:11:3b:3f:ee:e4:9b:e0:99:2d:a5:7d:b4:4e:
17:d7:9d:c3:bd:f2:6d:cc:e3:28:40:b3:36:68:36:
2e:92:6f:66:95:1d:48:40:78:5a:a3:a8:1b:ab:e9:
a1:4b:1a:a0:02:0c:1d:f3:64:c9:2e:1b:90:fb:00:
fd:d9:44:f1:6a:41:af:71:22:ac:25:c6:38:e0:66:
81:36:1e:86:e0:69:71:a8:af:40:4c:18:c9:b2:27:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:1D:BF:91:B7:E8:4C:C0:D9:7F:F5:3C:C3:B2:CF:85:BD:4D:17
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:11:75:25:10:6b:7e:00:e1:dd:b0:d5:ae:ed:c7:ce:2f:20:
97:04:90:48:e2:c5:7d:07:17:b9:6d:41:03:fa:6e:71:75:e7:
48:94:66:0c:d5:95:01:7c:db:5c:38:b7:77:50:77:6e:9d:74:
fb:5d:e5:20:e5:b8:fa:0f:2c:84:18:62:85:9d:8e:95:c6:a3:
50:ff:b0:dc:32:e6:f6:20:b0:fc:48:96:1d:90:6b:50:b4:ab:
db:89:f6:20:f0:88:5f:4a:36:8f:56:42:9b:04:80:f6:1d:b2:
37:d5:2a:1f:c4:b4:b7:26:f4:72:1d:13:c7:14:39:ff:66:4f:
29:70:4c:03:d0:df:4b:f6:42:1d:72:f8:5f:99:84:09:de:c6:
11:bf:7a:9a:18:1e:1b:1c:40:64:bb:b6:18:1f:be:4c:9e:f4:
e2:20:fa:db:e4:a7:be:0c:80:ea:57:bb:2d:31:77:09:97:7a:
8f:63:cb:75:56:a3:9b:33:a4:59:55:8a:ec:09:51:90:7b:20:
a0:1e:8d:6c:74:2a:3a:6c:5a:5f:07:96:83:a0:3e:07:32:1a:
57:60:5f:73:08:97:d5:5b:45:a9:af:d9:25:7c:29:b4:1a:a2:
90:13:67:ed:a0:a1:b6:af:45:44:44:48:27:c0:37:c0:cf:ed:
7b:30:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:59 2025 by rpki-client