Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: AetgA4TMeWAAg76af4L5F/FkMO9DG7fs2grBftTdo50=
Subject key identifier: 40:65:1C:C7:3E:C9:7F:02:AF:87:A0:BE:6B:6F:0D:FE:57:9F:3F:20
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 0198D51615B050F430047D5D11984AC0BFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 031D
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: 8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa (hash: rhq0p1ekXajroUDi/6gbWVszGGw1Hl0Cw7VvrAiAjNE=)
2: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: DK0sK9n/JZBub1Pv0FcdMfqYwJebXkgFipy7zI1hWbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:15:b0:50:f4:30:04:7d:5d:11:98:4a:c0:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=40651cc73ec97f02af87a0be6b6f0dfe579f3f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:13:52:43:b2:e9:7a:30:87:b8:1e:b5:d8:
c8:1c:cc:c0:73:db:af:f8:98:31:56:b4:f9:35:ef:
f6:81:cd:04:11:f5:77:08:b7:71:bd:33:82:4c:57:
9d:ae:30:b9:b8:94:72:ca:aa:f5:54:92:7f:bf:48:
24:ef:99:1f:f5:d6:16:4e:e2:c6:6f:c0:f2:43:77:
a5:d1:d9:ba:62:5b:04:b8:43:73:2e:d2:81:12:dc:
ee:12:63:d5:79:61:6b:fe:52:e8:03:cb:80:a6:a3:
1f:e2:60:fe:3b:43:4e:ad:74:1c:38:60:82:c6:d0:
50:d2:d6:21:ac:80:30:a1:fe:e8:da:85:c4:2c:9a:
7d:83:a5:44:eb:ef:75:86:9c:2b:ef:cc:40:8f:4f:
c0:27:95:9f:7e:5a:62:92:85:d7:7e:4a:93:1e:0a:
51:51:ad:12:9a:02:ff:63:eb:b4:e1:e4:9b:6c:09:
87:3a:6c:a6:38:a6:d5:64:45:18:9c:8a:ea:ec:c7:
be:c3:c8:96:78:53:17:f2:8d:ff:b9:23:ba:26:89:
7d:9c:fe:e5:36:f6:20:1d:f3:82:60:39:75:1b:61:
4c:37:65:fa:f9:ab:30:45:fd:b2:9c:f5:1a:7f:fd:
36:d1:14:cf:54:18:c9:a7:c1:d7:a3:c7:98:5b:95:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:1C:C7:3E:C9:7F:02:AF:87:A0:BE:6B:6F:0D:FE:57:9F:3F:20
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ec:4a:06:ea:70:f2:93:6e:66:65:80:e7:d4:31:e4:6f:75:
a3:0e:1c:fe:d6:0f:c2:0b:89:37:c9:70:1c:bd:17:8a:c4:cf:
fe:21:bb:55:95:3a:0f:1e:a6:b1:d3:02:fc:de:f4:61:a2:0d:
69:7b:4a:6a:e7:16:f3:b5:78:b9:30:8f:32:1c:d2:05:8b:4b:
e9:cf:17:5f:57:e0:24:48:8c:a7:2e:a8:92:33:d4:c7:7b:5a:
21:8c:7e:92:06:2c:56:a7:25:6f:60:aa:62:25:ed:89:71:c1:
0d:12:2b:cd:31:ab:4b:36:d2:80:39:a4:2d:bb:50:06:f8:dc:
48:fb:d0:ad:4c:64:98:05:3e:d4:5b:e0:d3:ba:59:d2:e6:8e:
e4:6b:c6:64:88:44:97:32:8e:7b:4a:1e:86:78:68:2c:e3:72:
f2:7b:51:4c:12:0e:01:6b:70:47:1e:48:41:9c:eb:f0:c1:f3:
a5:ec:1a:f7:26:1e:83:29:30:31:9a:b7:db:aa:80:4b:fa:24:
84:ec:b5:1e:e6:44:b2:9d:8e:b4:be:79:95:58:18:4f:83:96:
72:d2:80:39:ad:10:c7:da:4c:29:1e:d3:5e:48:d5:66:0f:d2:
d2:e0:dc:d9:30:78:be:93:95:50:03:70:7e:23:6f:4b:4a:1a:
fb:4f:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:11 2025 by rpki-client