Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
File: HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json)
Hash identifier: HlNjff2q41Dt/ZAL9HpXXnlxJm2HUA/btqlGcI4EkFI=
Subject key identifier: B5:DF:50:1E:0D:26:BA:87:3B:0F:9A:D1:98:05:DB:3B:45:C5:53:0F
Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Certificate serial: 0198D65F2E149ED6F6651B284928E80A184A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
Manifest number: 0BA4
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: Bh5IC48JAR5FB63v2dnakNOTX34.roa (hash: FMLGNxpZDrf8rppZSMEnpJR9pt6oa5eJBxowJrkMq7o=)
2: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: sI7ZChZN0pnoKvQ7KrCP/z2XDZP/WozbOCZXh8db+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2e:14:9e:d6:f6:65:1b:28:49:28:e8:0a:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=b5df501e0d26ba873b0f9ad19805db3b45c5530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:bc:68:9a:eb:56:eb:6c:da:16:b6:ad:ac:
65:6b:e8:1d:e1:a7:54:5c:0f:44:34:f6:0b:f1:04:
ed:c5:b8:d5:50:11:a3:43:be:3d:91:90:09:18:56:
6a:e5:d0:89:5e:f1:38:16:ad:3a:92:1f:b7:53:7e:
b7:55:f2:c4:09:4c:8f:0f:7c:b3:8a:e5:6f:4e:55:
4b:fd:85:ff:17:ed:db:ac:fc:bc:30:d8:09:54:59:
68:98:d1:16:6f:93:30:47:c9:92:95:dc:f5:4b:d6:
c5:6b:eb:3c:c6:32:20:71:e9:99:83:3d:20:9d:c6:
35:00:9f:56:5d:b8:7f:19:d5:79:c7:7d:c4:2f:bd:
16:7f:aa:b2:0d:3e:a2:73:f8:75:33:68:ea:ff:7b:
94:d6:c5:27:8e:2e:01:31:ea:8c:51:b9:81:2e:b1:
45:e0:1a:96:64:9f:33:f2:1c:18:a1:31:10:c9:71:
74:b1:fc:59:5d:14:85:57:45:49:7f:7b:e2:e7:d3:
50:66:36:e4:38:70:79:90:cc:dd:0a:67:4f:7f:12:
2d:5c:e3:af:ee:7a:17:02:bb:6f:98:af:2c:78:fa:
97:f6:3c:a1:23:44:7e:63:99:02:22:d4:20:38:26:
6c:5f:82:4d:77:7f:49:d2:e5:90:95:65:3a:e7:51:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:50:1E:0D:26:BA:87:3B:0F:9A:D1:98:05:DB:3B:45:C5:53:0F
X509v3 Authority Key Identifier:
keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:53:75:42:1b:5c:dd:80:c4:8a:c3:04:d5:e0:21:9f:f5:f4:
84:17:f0:cf:8b:ac:b4:6e:29:7e:bc:02:d9:a6:84:7d:7c:c6:
3f:02:e8:47:8e:73:a0:b2:2a:82:ae:ce:61:d9:7c:bf:1c:75:
16:9c:c7:a7:4f:39:09:9b:95:b0:c8:5b:d6:51:af:a1:8c:bb:
87:ac:90:24:04:cc:ab:5a:72:9f:ae:0b:6d:0c:27:0a:92:78:
c9:38:c5:0f:07:fc:19:d3:33:7d:eb:c6:e0:a4:71:e4:0d:48:
5a:08:f9:fb:62:29:a8:2a:1a:f8:88:3c:b3:b5:58:32:ac:ac:
53:e6:fc:d2:99:e3:9e:40:95:63:ee:f6:34:02:dc:3f:14:95:
d4:a1:ca:5f:5f:85:dd:37:2f:9a:89:dd:69:a5:82:47:16:6b:
8b:e8:eb:f1:c2:16:aa:ec:2a:9e:df:be:2c:ef:52:fd:89:f1:
40:b8:70:af:83:5d:fc:91:f1:d6:a0:f8:3b:f9:7f:54:dd:96:
2c:c7:14:6d:c4:7e:6d:ec:3d:4e:8e:3d:7e:f6:e2:02:78:ce:
51:a8:13:2e:d0:1a:2a:f4:6b:cb:93:d8:29:11:85:11:d5:8f:
6a:06:2f:34:7a:5f:c9:db:83:93:19:01:14:39:11:86:1c:fb:
77:e4:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:45 2025 by rpki-client