Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: oz8OHat2T2YxFFd2WEZoJsChRzfJ0ciqUNnOJPeixTk=
Subject key identifier: 2F:62:9E:85:31:58:F3:FA:2D:FA:33:88:B1:8D:F6:FB:41:BB:09:A3
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 0198D66049E7B05A2400620123AEBC7E10C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 15AE
Signing time: Sat 23 Aug 2025 10:01:31 +0000
Manifest this update: Sat 23 Aug 2025 10:01:31 +0000
Manifest next update: Sun 24 Aug 2025 10:01:31 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: aK/IDlQ9nXVoCW2i6bgmDNfjRrNM0A4yomcuqgD8Ydo=)
2: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:49:e7:b0:5a:24:00:62:01:23:ae:bc:7e:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Aug 23 10:01:31 2025 GMT
Not After : Aug 24 10:01:31 2025 GMT
Subject: CN=2f629e853158f3fa2dfa3388b18df6fb41bb09a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:e8:30:d1:33:12:e0:e5:a0:b6:6d:41:f3:
6e:40:ab:da:5e:d9:b3:d2:98:3f:51:a7:82:ed:01:
60:ae:2f:b9:55:50:c7:d3:67:45:16:9a:92:9c:fd:
08:8b:63:b8:6e:dc:1f:98:13:0c:87:6b:f7:c6:a1:
33:77:8a:cc:47:a0:23:1d:f3:58:62:b4:fe:d8:2e:
1f:4a:6f:a1:73:22:c8:66:23:36:57:6e:71:9a:36:
2d:4b:f9:9b:f9:a5:9a:32:d8:eb:53:fc:34:5f:7e:
db:54:ea:e2:81:49:55:bf:15:4a:92:72:6d:d5:2f:
da:fa:95:d1:21:f2:71:b6:c2:f9:d3:54:02:a2:7e:
d9:b6:66:2c:b9:3d:05:d8:97:25:0f:e2:0e:be:20:
6d:79:3e:28:0f:9a:a4:e4:b9:72:39:e1:7b:ac:86:
68:90:53:54:5a:3c:cf:ed:08:a0:d2:56:4e:96:df:
8e:b9:6c:50:ff:a5:1d:28:2a:2c:ab:c8:75:ff:83:
df:f6:0b:58:08:da:15:d2:40:53:be:7c:ec:a9:1b:
9e:d6:50:1d:d2:cb:e0:92:7d:53:a5:24:1c:1b:32:
13:55:81:0e:aa:3c:b9:c0:96:e8:37:b6:92:e5:c3:
23:fd:49:f0:c0:4b:c5:27:d1:c7:34:3b:6b:24:75:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:9E:85:31:58:F3:FA:2D:FA:33:88:B1:8D:F6:FB:41:BB:09:A3
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:17:e0:de:eb:b4:51:c7:2e:5e:46:94:3d:f7:4b:ca:84:
79:d3:57:d9:3c:bf:24:74:64:d2:8a:ba:b2:63:c0:5b:11:25:
5d:cb:e8:5f:64:db:48:34:83:25:f3:c3:03:51:d9:46:76:7e:
a7:f1:1d:fe:2f:03:f4:64:4e:41:b7:38:ff:32:c0:ff:e7:c4:
53:77:bb:2e:93:d2:8d:67:7c:ad:13:9e:5a:84:17:93:d0:b6:
d9:57:0d:08:5a:87:01:fe:42:97:7e:85:d2:67:47:db:56:42:
71:12:ac:63:05:94:2c:32:2f:d0:e8:c0:63:1f:49:c7:19:50:
22:34:9c:49:bf:df:b9:e0:e6:24:30:9d:e2:ba:0b:ac:12:c3:
fb:06:47:d4:e2:42:82:13:50:cb:5b:d1:f7:35:aa:fc:d0:be:
9b:d2:1f:fa:bf:40:4e:0f:b8:5c:8c:ea:ad:43:0d:e4:a3:76:
a2:f1:75:8d:32:d0:1b:6e:90:25:9a:79:bd:8b:52:c7:20:8f:
85:65:9c:5e:b7:77:ca:e9:81:ab:d2:12:ed:9d:12:9a:9e:9a:
d1:2d:e1:db:0d:c4:8a:dc:d8:5b:d5:b5:91:ac:22:2d:9f:8d:
4a:f1:90:9a:ff:0d:c9:d6:97:03:df:7a:1a:0b:9d:44:5f:57:
a1:9a:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:38 2025 by rpki-client