Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: GhkKxs/5gExguEnYVgl3RuVzEL24yPghUWFPOX27KdI=
Subject key identifier: 95:52:57:6F:6E:3D:A7:43:E3:A7:66:6A:E7:80:4D:50:19:AE:EC:F9
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 0198D5BBB755E7B68111D1AB368A13B2D91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: 5MK1ewnt7LozxEmddZiWa3omfKc.roa (hash: 7+tCKj1f1iwSFAN/o1/yY8fVwb73KSasEYzwGjDKXO0=)
2: DeHazeP3A9wAumTO_Rmx5RqWaqs.roa (hash: 0hOPuiiQ+UKk5lNFYgiHmEshvjQhpp/6FLqfnT4DM3I=)
3: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: JWV6QcYcFidwTu/unwCb6ytxkhFg+++RI2LSzqmQTAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b7:55:e7:b6:81:11:d1:ab:36:8a:13:b2:d9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=9552576f6e3da743e3a7666ae7804d5019aeecf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:10:2d:df:90:5d:3c:2c:40:59:99:44:3c:
e9:a2:63:03:36:75:ac:08:4e:cf:01:93:ca:50:b4:
02:ae:8c:35:11:e2:3a:6d:68:ad:82:ea:ff:1c:75:
c2:15:ea:b4:ae:f4:e3:fa:40:32:ac:cb:23:cb:51:
5f:4d:15:13:62:56:d6:62:bf:9a:bf:97:df:61:25:
1a:67:5c:99:a1:61:5f:dd:43:b1:be:d2:92:45:1d:
6a:a5:fb:9b:73:cc:bc:c2:f6:26:c1:4e:32:93:9f:
8d:37:2b:cc:06:33:7d:3b:52:61:43:e6:28:a5:8d:
69:c8:fb:8a:29:e6:cb:ea:80:01:3c:bb:b1:47:06:
20:46:f3:cb:7e:6b:eb:af:b7:14:ca:79:e2:ed:a3:
ca:55:36:38:a4:46:45:6f:f3:bd:cb:55:31:af:96:
e8:51:55:8a:96:0f:7c:44:c1:44:05:a7:88:31:3e:
1a:f2:4a:f8:6b:99:3e:b0:bb:b5:09:be:d9:4e:47:
97:76:70:53:70:3e:1e:54:4b:4d:22:a8:2b:9a:db:
cb:b8:dd:11:d1:91:1d:d4:2b:7e:f3:5e:82:7a:e9:
c5:2e:31:e5:f5:de:d0:80:bf:cf:e4:40:4f:14:1d:
77:37:36:b8:f8:50:82:d6:3d:98:86:31:7d:b2:a3:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:57:6F:6E:3D:A7:43:E3:A7:66:6A:E7:80:4D:50:19:AE:EC:F9
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c1:c3:57:af:6d:0e:8d:00:e9:31:d5:69:d1:a7:f3:e9:08:
75:c6:f5:01:4e:5e:c8:f0:9c:b9:cf:35:e9:3c:c7:55:34:2c:
0d:14:a1:70:d4:9a:53:a8:96:44:f3:3e:75:5d:23:dc:fc:b7:
34:9b:f5:3b:be:35:19:6e:97:66:43:5a:b1:63:f9:6f:c4:e6:
2e:69:58:44:cf:64:e6:c5:1b:c5:90:45:4e:7d:31:73:3e:e4:
86:2a:5f:0f:1a:43:7d:34:97:2e:a2:ca:31:52:d4:be:b8:20:
4b:58:1a:aa:9c:78:cc:b8:25:73:28:e1:1d:dc:77:4a:26:d5:
0c:7d:67:f9:a3:ad:82:d5:41:b9:fb:09:b1:49:7b:24:05:34:
ff:c2:74:3c:e2:47:43:cf:20:86:1d:68:0d:b7:81:f3:92:6c:
ab:55:b6:23:ce:ea:39:f5:ef:bf:02:e4:e8:0d:cc:98:98:ac:
f1:7c:b3:85:37:1f:e1:be:87:54:22:20:90:bb:ff:36:49:c8:
5b:e6:eb:e9:e1:a9:ce:cb:f7:5b:c2:1b:d1:7f:1f:76:b7:57:
e7:2a:a0:15:7b:67:4a:22:a9:5e:95:09:49:0f:0d:6f:e2:6c:
6d:0b:32:51:16:95:3a:da:28:ee:7f:47:59:4e:02:9a:04:66:
03:8d:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:18 2025 by rpki-client