Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier: MegZ2hqq6VPX4XjcjBtJMEchqRR+QFHQ3rLw6Lmc1tI=
Subject key identifier: 15:91:4C:3E:48:8D:70:3E:BE:69:CE:27:C7:0C:C2:87:63:77:21:95
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 0198D66031794EB49EAE3F9C4162ADC828E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:24 +0000
Manifest this update: Sat 23 Aug 2025 10:01:24 +0000
Manifest next update: Sun 24 Aug 2025 10:01:24 +0000
Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: u6E7y5aH50FjEbvxON4usWNyYM7ATs6/kZLWNX2fuP0=)
2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:31:79:4e:b4:9e:ae:3f:9c:41:62:ad:c8:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Aug 23 10:01:24 2025 GMT
Not After : Aug 24 10:01:24 2025 GMT
Subject: CN=15914c3e488d703ebe69ce27c70cc28763772195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:54:a4:28:98:72:6d:67:a5:2a:92:9d:63:
23:3a:d4:3d:c2:7c:ee:0a:4f:bc:21:2d:7f:d2:a0:
01:2d:28:30:b8:62:5d:3d:85:0e:55:63:76:ba:87:
33:96:a4:40:a4:9a:2a:1d:24:aa:b0:67:ec:06:22:
05:de:48:2b:a7:aa:ae:08:4a:ee:ac:d0:e8:46:5f:
35:ec:c5:03:c7:0e:5a:ad:4b:ac:6e:9a:d0:9c:fa:
9c:5a:34:55:73:31:7c:80:a7:dc:2f:e2:d4:6f:3f:
69:8f:10:f3:f6:77:a8:4b:a8:b9:98:9c:92:96:7d:
1d:55:41:02:4d:3c:73:4b:7f:8c:04:67:22:5c:b4:
b4:ff:f4:14:bd:22:2e:67:4a:23:2d:53:8d:fb:5c:
7e:b6:22:07:2a:08:ad:40:b8:f2:57:a5:74:1d:66:
8d:a6:0a:ea:67:10:d9:df:8e:b9:ac:a3:59:02:6f:
e9:55:7a:45:91:e5:7c:7a:68:db:ab:0f:83:22:7e:
5c:85:20:ea:55:e3:d0:fa:e7:eb:ba:70:1e:0b:d7:
84:e3:92:d4:64:7c:77:d1:87:88:02:17:ae:a5:cd:
88:c4:34:a3:35:fb:94:22:e1:a9:36:31:8b:62:e2:
5f:c7:64:39:28:e5:b4:52:79:eb:4c:47:3b:0b:c2:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:91:4C:3E:48:8D:70:3E:BE:69:CE:27:C7:0C:C2:87:63:77:21:95
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:86:3e:0b:17:97:21:84:37:48:ce:99:9f:49:04:61:b6:92:
5f:51:7d:c5:f6:59:9d:8e:a0:5b:89:aa:c0:1c:47:3e:9a:03:
2f:42:2b:4b:21:72:f6:d1:04:bd:0f:c2:7c:e3:32:c3:5d:fd:
00:66:c5:17:18:91:6a:bf:10:01:55:cf:5b:d0:14:04:d1:73:
17:4e:be:db:a7:b1:2a:f4:ec:3e:ae:f7:86:51:a6:86:3d:0e:
df:9f:41:f8:b2:ba:02:e6:7f:1e:61:98:d8:19:c2:8a:df:1e:
b3:f1:85:29:e9:a6:94:7e:d4:88:6c:e0:bc:01:5d:8f:48:d0:
99:61:83:e7:32:a2:00:72:4e:15:93:f8:23:0f:d7:1f:5a:ee:
f6:ea:ca:ea:c7:f0:57:71:63:bf:61:d7:09:6c:9b:fe:0d:a9:
2d:97:a7:91:06:bf:48:dd:cf:25:d9:bf:af:63:83:94:be:4d:
06:87:cb:07:dd:48:cb:e5:a5:06:1d:41:d9:69:94:cf:b4:03:
df:0d:28:04:bd:49:4b:0b:c2:a3:8a:9f:53:8e:96:3c:d2:24:
35:fa:7e:32:4d:0c:47:87:fc:5a:f7:69:26:bc:32:0a:01:6b:
fd:0c:3d:d9:cb:9b:12:7d:ed:ff:27:3f:4d:c1:93:fe:66:c9:
25:63:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:04 2025 by rpki-client