Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: dNstCSH6jaf7hCJmim/i7cBHRQ9J1k71Su54Bw3+bko=
Subject key identifier: 7B:DF:0F:BA:87:ED:72:94:EB:3C:4D:56:16:E7:A7:DB:AC:27:29:04
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 0198D54DE77E90D6D1C1D6F879EF7391E74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=)
2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: JPQSohaMK91ukLsxEs1EnXDCWZjF6QNcW8DoiJlecp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e7:7e:90:d6:d1:c1:d6:f8:79:ef:73:91:e7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=7bdf0fba87ed7294eb3c4d5616e7a7dbac272904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:61:13:5e:a6:60:af:bf:26:80:52:81:86:
ca:d8:3e:fa:16:cf:b5:31:ad:e4:89:94:d6:c1:a6:
d4:ce:6a:15:30:0b:72:f1:94:24:1b:d0:c5:dc:5f:
12:65:95:01:ac:17:fe:7c:61:a4:42:70:12:8c:42:
b4:c1:0c:da:49:56:12:d3:43:8a:11:09:de:f9:ec:
42:8a:36:09:0a:33:cb:a1:ba:9f:6a:f6:7d:f0:76:
ff:0c:61:75:e6:27:a7:cd:98:30:f6:92:b1:e7:04:
97:f5:35:3f:a0:7b:5f:29:5e:74:3a:e1:a5:94:c7:
8e:85:7c:6e:66:57:fb:51:8f:17:46:95:30:6d:c4:
1b:a1:fd:e9:0d:dc:b6:ee:81:62:9e:31:59:67:59:
da:cd:f0:61:15:34:ca:a3:fe:f9:4c:45:9d:4b:c3:
65:16:ca:6d:81:3d:46:17:2f:d8:3b:40:f3:a8:e0:
a1:9e:48:36:dd:ac:59:f1:bb:eb:b3:da:6e:64:92:
a4:b8:3c:73:d1:16:b0:b4:56:1a:40:b1:cf:b4:1d:
b2:eb:2b:af:44:7a:f6:df:75:e7:1d:77:a1:3e:51:
d2:19:26:42:65:ec:7b:78:77:0c:47:a9:dc:f0:8a:
38:e8:63:6f:83:f2:f3:fc:f8:20:54:de:93:1a:fc:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:0F:BA:87:ED:72:94:EB:3C:4D:56:16:E7:A7:DB:AC:27:29:04
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:88:3f:49:45:ad:89:06:2b:65:57:fa:50:f6:64:2a:f5:
3e:1e:ea:7c:fb:d8:8c:11:92:04:df:c8:8a:76:00:7b:6b:4b:
8e:5a:89:b7:e4:38:fb:0b:4d:10:f2:d8:fd:26:18:6e:26:f6:
f3:f4:af:e0:4f:9d:a8:51:ad:e5:37:36:23:db:c9:a8:ca:e1:
6d:12:00:b3:af:81:3c:04:1f:e7:a4:11:ed:bf:8b:7e:94:67:
b8:12:99:9b:35:25:c0:19:cf:76:5c:88:2c:6b:e6:cc:6f:6e:
7d:d8:44:b2:d8:d1:bd:31:15:4c:cc:5f:43:2d:e1:a5:f0:ae:
f4:18:1c:4b:a5:ea:14:7b:9e:30:d4:78:ed:72:8e:68:3d:9e:
d3:36:37:79:7f:d4:8c:56:90:10:02:07:5c:d8:4e:df:16:3d:
4a:4d:64:b5:08:cb:e9:b3:0d:b9:af:ae:bf:0e:b9:2d:2e:ea:
03:27:2b:c1:e7:6a:b2:40:67:d9:9e:5e:e8:74:15:f3:dd:1c:
77:45:97:8e:15:da:4c:61:bc:5b:b9:a7:68:88:a9:90:55:bf:
a0:bb:31:6c:a5:b9:e1:dc:88:cd:fd:fc:98:80:98:a9:6c:07:
63:5d:dd:ea:77:6a:cb:40:7a:a3:98:0e:c9:04:07:a0:e3:a0:
46:52:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:37 2025 by rpki-client