Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: WDbPixYKh9Fr8FwoqunCdipPNDFMedyIdhbzDzZfRDc=
Subject key identifier: 1D:1B:97:20:47:D5:3B:89:3B:46:5F:6F:F0:7A:3C:E4:89:DB:70:71
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 0198D65F44E513916070A5353B8D6706702F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 1D
Signing time: Sat 23 Aug 2025 10:00:24 +0000
Manifest this update: Sat 23 Aug 2025 10:00:24 +0000
Manifest next update: Sun 24 Aug 2025 10:00:24 +0000
Files and hashes: 1: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: Z2jemLFrv9M+Myn5NkMOf17Sr074/95clLhyo1prWGk=)
2: OdJQ9ucOjx55eZ_eL46dI-RF4qw.roa (hash: 3F8ARNX3fBht3YClKm2Q9MgUMQczvUb3C47SGcMjWTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:44:e5:13:91:60:70:a5:35:3b:8d:67:06:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Aug 23 10:00:24 2025 GMT
Not After : Aug 24 10:00:24 2025 GMT
Subject: CN=1d1b972047d53b893b465f6ff07a3ce489db7071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:81:0b:66:fa:bd:94:5b:be:6a:59:32:20:
82:f2:6e:fe:9b:d2:a7:c5:0a:5e:91:80:92:0c:a1:
40:36:09:e4:15:50:78:95:92:6d:dd:af:88:58:76:
d8:75:0d:fc:c1:da:c5:6d:14:aa:13:1d:32:e8:cd:
de:68:b4:08:b2:f6:e3:ee:f8:3a:57:aa:e3:50:ae:
6a:89:5e:84:f9:ff:5a:b6:26:7f:03:2c:d9:37:b0:
55:ba:f6:15:7d:67:3f:b8:dc:f3:85:8d:9a:bc:82:
65:cf:9e:44:1f:42:96:bd:66:3d:ef:7c:48:84:69:
d8:78:c7:d4:37:bd:40:65:8a:12:33:c7:08:6e:d7:
10:cc:a3:84:71:ff:86:74:95:32:90:88:6d:ab:7b:
68:b7:e5:0a:9b:7f:71:a9:8a:2e:57:99:4f:18:7d:
aa:bf:1a:4c:dc:08:b1:dc:2f:1d:e4:51:4a:9a:00:
4b:11:4e:2b:eb:fc:69:ce:83:9e:67:ba:60:cb:dc:
c7:73:20:7b:c9:58:3f:d3:82:1e:72:bc:48:de:87:
6e:81:14:8f:ce:d4:00:70:e5:2f:68:5f:6a:21:7f:
99:30:0d:ff:09:4d:80:5e:16:b0:19:8f:11:39:fc:
60:e3:d8:6c:88:5a:15:41:b4:f8:95:68:da:21:5d:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:97:20:47:D5:3B:89:3B:46:5F:6F:F0:7A:3C:E4:89:DB:70:71
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3a:47:51:9e:16:7f:b6:6d:50:3b:f6:08:e4:85:55:c5:2a:
e3:61:ba:a7:4a:0c:b2:8b:0a:8b:47:c2:22:cd:1f:93:c2:40:
33:87:20:79:fb:80:bb:c7:57:f5:a4:99:05:4e:53:7e:0c:33:
c4:a2:f1:7e:2f:36:1f:f6:73:c0:4d:89:80:49:1a:5e:fe:99:
85:1e:fd:e8:22:9c:6f:ce:83:2b:78:57:5e:94:02:9a:3e:19:
c8:15:4e:90:8f:fe:fa:52:aa:9f:64:27:2e:ca:d3:69:83:18:
3e:2e:3b:aa:2f:d0:60:14:0b:4f:fd:fb:17:32:ca:42:a3:b3:
bc:2c:ac:63:09:72:68:b6:e8:b1:2a:7e:56:3b:50:f6:15:f0:
0a:3a:b5:46:67:d6:5c:89:53:5e:72:93:cc:94:50:7b:60:d3:
f3:cb:bc:5f:f8:be:3b:63:df:2e:ff:c8:9f:82:dd:fc:b4:0e:
e5:25:23:05:60:5c:4a:5a:91:0a:b9:3c:bb:a3:3f:02:75:52:
6e:50:8a:be:43:27:45:39:fb:16:0d:24:8c:e2:8d:68:c2:ab:
18:dc:20:7a:aa:d7:36:d5:a1:70:ad:76:ed:46:74:a5:0e:96:
90:11:ad:43:97:02:3d:c3:ac:b8:39:29:4d:67:bf:43:ae:49:
e4:fa:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:29 2025 by rpki-client