Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File: HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier: ZzmLe5u2kEzZjw6XnpwGfbQLeBb+qpWwOb1Du9j/KJ8=
Subject key identifier: 00:75:6B:9F:2C:51:3F:FA:67:73:BA:60:EA:71:EF:1A:BF:AC:C2:EC
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 0198D54E6C77E6364A4F8298681BDF04D071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: jN4hiIgilABbJpFGJpEN+6KwfJxTW5umzZd1vp1O5BA=)
3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6c:77:e6:36:4a:4f:82:98:68:1b:df:04:d0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=00756b9f2c513ffa6773ba60ea71ef1abfacc2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:b6:4d:8d:33:24:f2:54:27:14:b5:68:04:
8c:2a:a2:50:71:1b:42:83:03:ed:e4:89:a5:8e:05:
9f:40:4a:82:28:bb:8f:a5:33:f6:96:97:46:2f:e8:
d0:7a:cd:99:2c:0d:f5:59:24:39:e4:13:9d:94:a8:
5c:28:0d:fb:b5:08:aa:1e:5d:15:77:ad:ae:dc:61:
af:91:ef:d3:3a:a6:80:ef:14:c5:f2:84:bb:3c:c2:
d7:c5:36:60:f2:95:be:c1:a8:6f:5f:57:93:04:22:
31:67:82:81:93:89:b6:74:5b:31:a9:e2:d5:01:0d:
83:6c:ce:98:ec:97:93:80:d6:b6:2a:4a:89:6d:88:
cd:e7:ee:4e:fc:97:ca:ec:a7:46:c2:1d:04:f1:fc:
4a:a2:54:e3:54:fa:c2:1c:d4:5f:7b:93:a0:9e:87:
2c:2e:56:28:ac:4e:6f:22:fc:5e:01:01:f7:9e:21:
67:21:76:61:d3:5d:e6:3b:e4:32:a2:a9:47:dd:2e:
dd:c1:85:19:49:93:eb:46:19:ca:91:77:3f:6d:1b:
d4:cb:56:43:ff:14:65:54:47:5a:8f:4b:15:c5:90:
16:27:a3:94:a7:ba:33:7e:a5:ae:d1:55:de:f5:40:
9a:df:24:31:8b:b3:d5:74:97:07:88:fb:05:1f:90:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:75:6B:9F:2C:51:3F:FA:67:73:BA:60:EA:71:EF:1A:BF:AC:C2:EC
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3e:07:f7:95:ad:6c:28:77:c5:0d:de:3d:8e:bc:a1:b4:9e:
d2:69:21:a1:99:09:af:8b:e2:2b:bc:58:60:43:bd:8c:23:01:
55:62:8c:a9:db:b0:46:e4:bd:d9:d6:a5:51:f6:d3:62:46:ce:
8a:4e:d5:2d:68:24:d4:81:b0:14:35:82:4e:d7:3c:31:65:c7:
00:f3:82:cc:0c:10:69:73:59:4f:78:8d:8e:28:56:3f:fc:e1:
3a:f8:8a:eb:d4:b4:e9:9f:ae:17:a9:6b:38:df:0d:96:c5:e8:
ce:19:20:a2:6c:ee:99:99:d9:60:74:5a:85:58:20:bd:78:cf:
f5:91:6d:47:1c:d5:78:59:98:7c:27:42:1b:f6:c5:22:65:9e:
d9:9f:61:aa:a9:b8:26:59:1a:30:f1:28:85:f9:92:99:c4:c9:
4a:b6:2a:a7:44:ef:2f:d7:b7:62:21:b4:b5:4b:17:c1:2d:b1:
18:12:e4:3c:3e:8f:a8:ae:c6:88:8b:36:9b:c3:ae:0d:65:43:
74:e1:24:8a:36:2c:f7:de:ca:49:07:88:c6:38:62:2b:13:ba:
9e:68:b8:dd:e9:6d:43:90:61:f4:e8:2e:f3:97:f1:98:4d:af:
e0:87:ca:37:21:d1:44:1f:78:6f:c0:0b:d3:69:58:da:43:e0:
49:b2:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:41 2025 by rpki-client