Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: kiCIAEgUY+Ahz5wbtukfsOIM8n5JHn6YAig1d5faSPo=
Subject key identifier: C6:DB:37:5C:C1:47:68:5F:3D:C5:6E:8E:09:CA:F1:AB:0C:2D:36:4A
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 0198D85145B90BA9FFC6B3887DE7E94CBEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0F58
Signing time: Sat 23 Aug 2025 19:04:21 +0000
Manifest this update: Sat 23 Aug 2025 19:04:21 +0000
Manifest next update: Sun 24 Aug 2025 19:04:21 +0000
Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=)
2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: aCu9ijlQBFh+/7GVSkUlPDfhUT4qogyMG6RVuJauDRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:45:b9:0b:a9:ff:c6:b3:88:7d:e7:e9:4c:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Aug 23 19:04:21 2025 GMT
Not After : Aug 24 19:04:21 2025 GMT
Subject: CN=c6db375cc147685f3dc56e8e09caf1ab0c2d364a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:7b:b9:1b:ae:ef:1f:11:da:44:e6:87:e7:
1c:fb:89:7e:8e:d2:01:3f:88:cd:ad:f6:0c:79:82:
3a:cf:df:81:cf:ac:0d:d5:9d:35:d2:36:54:e9:d1:
c3:db:e9:76:ad:7d:a8:a7:93:c3:dc:c5:0b:06:eb:
b8:47:c9:29:72:c3:03:a7:73:8c:c5:6a:f2:87:64:
41:18:0a:3a:79:32:57:e2:2f:08:0b:37:df:5d:44:
8a:3a:75:ab:5e:db:59:d9:2e:43:e8:d7:d0:30:f9:
24:90:d4:16:c8:e6:a8:23:43:f3:41:a9:12:e2:a8:
48:6d:30:3e:4a:94:fa:e0:eb:cf:11:2a:9e:cf:1e:
84:f1:e8:23:36:21:d4:d5:4d:c1:98:ee:2d:90:9a:
c0:7b:63:7d:3b:e7:52:4e:8d:70:7e:9e:b2:e7:37:
fc:92:21:53:39:4c:cd:f4:3d:56:13:7a:29:f7:ae:
45:05:b7:13:79:37:c0:0b:6c:6c:7d:d9:45:71:01:
c8:85:23:26:f9:4c:ae:f1:db:26:a7:7e:da:aa:59:
b5:d0:71:97:73:ed:62:c9:ef:07:dc:47:68:06:c0:
9b:7e:d8:1b:43:f0:7f:4b:a7:ca:5d:0a:4f:06:75:
96:41:63:e5:27:1e:a7:b8:a9:5e:c6:ba:ad:1f:9a:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:37:5C:C1:47:68:5F:3D:C5:6E:8E:09:CA:F1:AB:0C:2D:36:4A
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:54:3d:b4:5e:2c:54:d6:7f:3e:e6:4a:b0:a7:46:05:3d:40:
e3:03:e0:c5:86:19:44:3c:cb:a9:4e:08:ad:8e:05:d6:dd:23:
c2:cf:01:1e:e2:26:31:11:b9:ed:a9:06:56:8e:9a:1c:67:49:
29:02:bd:20:75:9f:d5:e9:67:9d:a8:84:e0:20:7c:cc:b3:89:
34:3b:13:98:d5:c7:88:5f:70:15:bf:28:74:30:1a:06:69:08:
0a:0f:0b:ed:13:c2:61:83:c8:d7:4d:52:8b:25:cc:4d:2d:a6:
b2:d6:3b:cd:bf:28:6c:12:9f:48:1b:90:53:a9:15:eb:1d:c8:
33:cc:13:88:4a:a2:d3:c3:a5:68:7d:57:d6:96:76:df:6c:64:
a5:f8:8e:6e:44:e9:bb:6e:89:fd:7d:46:66:e2:36:b2:c9:c9:
1e:c3:65:6e:8a:61:ad:1a:aa:ec:13:a8:8e:4e:31:23:8e:ca:
32:92:15:47:31:af:6e:ab:07:57:85:91:87:a0:75:3c:0e:dc:
6b:e6:40:c8:16:65:49:98:6e:ed:9e:fc:b3:4f:68:47:ca:c4:
d7:01:50:01:54:e1:ca:7e:12:f8:5c:27:28:c3:ec:ad:99:dd:
7f:58:f2:9a:54:fd:58:bd:f4:43:ad:6d:b9:e0:13:45:a0:e1:
de:c1:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:30:42 2025 by rpki-client