Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: 18kjNTXQldABbq6MTqc9Ij+ejWU6QqqC3LXpb2l+KSo=
Subject key identifier: 87:4A:39:B2:08:BD:17:CD:50:28:AC:6F:32:8F:7B:57:09:40:79:45
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 0198D4045059E2F6E7DEA4F5EBBB5395F41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 1646
Signing time: Fri 22 Aug 2025 23:01:49 +0000
Manifest this update: Fri 22 Aug 2025 23:01:49 +0000
Manifest next update: Sat 23 Aug 2025 23:01:49 +0000
Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=)
2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: j9BifIt7uCOKqugdfZhEBwuQ4/bctYg8fHFo8ikZ8+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:50:59:e2:f6:e7:de:a4:f5:eb:bb:53:95:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Aug 22 23:01:49 2025 GMT
Not After : Aug 23 23:01:49 2025 GMT
Subject: CN=874a39b208bd17cd5028ac6f328f7b5709407945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:27:e1:30:15:da:34:c6:d0:cf:8a:9e:ba:
c5:69:9a:6d:e8:a4:d2:31:08:70:f3:61:1f:b1:8e:
10:1b:d3:46:61:60:44:21:f0:bb:e4:4a:2b:24:80:
5f:15:98:bc:11:2c:70:98:33:5e:7f:50:08:1f:ff:
69:6f:51:ec:42:4c:86:fd:7b:b7:e2:b5:11:95:ed:
b5:37:76:c7:d2:1c:7d:ef:48:3d:e2:01:ed:cc:45:
53:5f:55:17:55:6d:4d:b1:e2:d4:c8:6b:18:b3:4e:
5e:d5:e0:f6:82:44:c3:90:b6:eb:05:11:ee:43:30:
76:f0:29:48:d1:e2:9d:dd:19:fc:be:0a:dd:c0:59:
60:28:c6:ec:f1:99:ed:4f:63:4c:18:1c:6f:82:a7:
2d:4f:c8:aa:b9:7e:bf:69:e1:a3:cc:14:82:14:57:
0e:6d:c3:d7:20:78:0e:a8:63:ca:df:e7:41:16:1c:
47:6a:19:d2:b3:5a:02:b3:45:7f:2a:f7:ca:f2:18:
02:d6:86:8f:65:78:71:ae:bb:80:99:4d:08:14:8d:
24:4e:e2:45:c2:74:a5:46:10:90:54:2d:44:6d:d1:
0d:fb:07:d6:fb:b5:59:9f:26:8d:59:c0:32:8d:0c:
1b:20:4b:11:d8:9e:cf:35:35:ca:f8:60:dc:77:92:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4A:39:B2:08:BD:17:CD:50:28:AC:6F:32:8F:7B:57:09:40:79:45
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:25:47:0c:95:c5:ae:40:0b:03:83:6d:bc:17:3a:6e:12:df:
44:4a:98:3f:25:e0:1e:fe:b8:23:5c:ed:55:75:08:d1:92:72:
02:d4:34:22:ef:c3:2e:05:23:66:35:47:24:5a:c1:c5:8d:c0:
70:af:54:1e:f8:b1:f4:e8:0d:e5:d2:2c:28:ed:0a:7e:cd:cc:
1c:5d:5b:c2:b7:5a:19:e2:9c:e5:d6:e1:85:74:74:6d:68:86:
8c:33:a2:a1:7b:63:86:2a:b0:6e:f2:ef:06:d2:66:1a:7d:07:
f1:49:6b:f3:a8:d8:35:3a:f5:64:48:85:fe:b7:46:f0:a1:98:
51:91:d9:53:85:03:ee:3d:77:6b:df:b6:a0:10:8c:6c:78:e0:
18:2f:2b:8f:83:e8:ba:ca:c5:af:b9:3f:68:99:f6:d3:03:7a:
02:01:21:01:52:b8:b2:6a:bb:2a:06:56:2e:e7:f2:b8:e7:30:
63:af:58:07:93:7c:34:66:c4:29:d3:cc:19:04:d7:6a:0b:e1:
8c:4e:10:80:8d:8b:dd:80:a5:92:4c:38:c6:96:8b:b4:d0:c6:
ee:c5:ee:54:0e:d3:42:f8:d4:f0:04:86:6c:87:31:8d:dd:d0:
9e:0b:56:0c:51:f5:49:9e:47:75:55:32:c3:bf:d3:ae:49:b7:
9a:ef:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:36 2025 by rpki-client