Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: i4dAGraqxodP8MGiRSx9/fZHy+fmlTjzxZhGoaMNTsE=
Subject key identifier: 78:2B:F0:0F:5A:68:68:48:EE:7E:0D:1C:65:A3:47:C7:C8:4C:E9:D1
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 0198D473C47E27F9BDAC6E15F7DAC161025C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:33 +0000
Manifest this update: Sat 23 Aug 2025 01:03:33 +0000
Manifest next update: Sun 24 Aug 2025 01:03:33 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: hTGvVQnJyCvLz4DdQbh5tQrHvxMowreXjgB89LLC2DI=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c4:7e:27:f9:bd:ac:6e:15:f7:da:c1:61:02:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Aug 23 01:03:33 2025 GMT
Not After : Aug 24 01:03:33 2025 GMT
Subject: CN=782bf00f5a686848ee7e0d1c65a347c7c84ce9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:f8:5f:b0:10:55:fa:27:af:b7:92:0b:b9:
19:c7:52:5f:02:85:2d:cf:b9:60:6d:57:27:84:10:
5b:28:47:e1:df:98:21:bf:94:e1:7b:ea:f2:87:f3:
b6:42:9e:86:f1:c1:72:22:e0:b0:87:6d:8d:e9:81:
68:f5:1c:78:b8:0c:51:f1:2e:3a:24:14:34:d0:63:
a7:a9:af:97:f8:fb:5b:58:da:06:c4:80:5c:55:c9:
a1:1f:f3:17:9f:f5:1b:97:ac:d5:5b:a5:32:28:f5:
64:c6:5f:3c:cf:42:da:3c:78:3e:00:f1:68:40:aa:
cc:4c:76:27:1e:c1:b2:74:c2:24:3b:23:15:4e:16:
3a:d3:a1:d0:1b:b1:80:71:9d:69:1a:e8:82:6c:eb:
c7:26:0f:9b:6c:98:1b:75:86:a5:94:e3:33:9e:5c:
d4:b0:a9:c4:07:bd:e0:09:a8:c9:ea:4a:ca:77:92:
c3:2e:e9:e9:c8:21:8d:bf:47:12:26:36:60:19:a9:
b8:5d:07:d8:14:54:b5:af:fb:eb:9a:25:45:ea:b3:
b9:6f:27:1d:01:e4:3d:0e:ac:3b:ef:65:df:b6:0d:
dd:1b:35:91:32:fc:c5:eb:c0:51:4e:0b:0a:86:ca:
48:b9:95:bf:74:c6:a9:b6:06:8b:d9:3e:81:0e:40:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2B:F0:0F:5A:68:68:48:EE:7E:0D:1C:65:A3:47:C7:C8:4C:E9:D1
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9e:4e:48:79:b6:89:21:ec:34:80:21:e4:3a:7f:48:9b:6c:
68:6e:8c:67:a7:cd:50:d2:d3:32:52:21:9a:b8:60:3f:f9:28:
95:fa:ec:a3:d2:f2:e8:05:fb:8e:39:df:cb:5c:7d:22:22:b6:
49:d7:89:d5:09:73:8f:0e:16:4a:b9:20:4d:08:79:94:b5:69:
e5:2e:d2:41:74:fb:06:24:c8:0b:bb:98:23:25:b5:45:c6:bb:
0f:ad:77:b7:07:31:ab:8c:c3:75:b3:9e:9c:38:f2:0c:ef:8d:
d9:5f:05:45:c4:4c:5c:a6:f6:b2:d3:fc:ad:69:5f:d4:15:3f:
ed:28:0d:71:61:7d:cf:1f:d4:9c:24:f1:96:de:83:51:bc:b0:
a8:0b:ea:eb:b5:8f:65:a9:1e:7d:a2:c7:57:89:8b:0f:4e:2e:
44:bf:f3:ed:74:fd:83:58:ec:6a:49:3e:44:c6:f8:1a:37:40:
71:d5:1c:5a:6f:04:19:db:e5:33:21:49:82:5a:ae:a4:df:ef:
26:46:1f:a8:15:b5:21:71:e6:48:e4:05:ad:30:ba:f2:1e:0b:
11:d3:b2:68:6b:39:22:dc:e1:26:e8:89:c6:1a:4c:4b:1e:4e:
06:e8:a3:d4:b1:4c:1d:e0:f2:03:17:dc:cb:19:89:e5:02:da:
bb:7d:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:49 2025 by rpki-client