Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
File: HjXAaowG1d1k_nawkKPh4qSZbcg.mft (raw, json)
Hash identifier: +Per2TMWpTGL6RqeStM2JPnuGXRy+psxO2rpOPKgGh0=
Subject key identifier: 9C:BD:90:2E:81:13:D1:0E:69:4D:47:24:3E:06:28:BD:32:C9:C4:25
Authority key identifier: 1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
Certificate issuer: /CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Certificate serial: 0198D583E86705B784735FC91B67AF5CFF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: HjXAaowG1d1k_nawkKPh4qSZbcg.crl (hash: VHgMHu2kDydHg5XtJNawgYE3qPRjX3oPEvJRzxodsFQ=)
2: R12AgdneGd4IinauuD2IQCzaNdo.roa (hash: 0Vf4DfoprRpqIbS3viTk0elhBi8JnCMTTU8OHnzZBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e8:67:05:b7:84:73:5f:c9:1b:67:af:5c:ff:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=9cbd902e8113d10e694d47243e0628bd32c9c425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:3b:0a:f5:2a:7d:c5:62:78:fb:5f:ac:5d:
7d:5c:bf:b1:58:50:6e:61:bc:03:ee:1f:3f:ea:fd:
92:72:50:52:f8:59:46:cb:9d:52:2f:f9:32:bb:74:
e1:95:16:b2:20:9e:34:c6:9b:01:1f:e1:04:85:75:
a3:4a:2d:f3:c7:eb:7c:86:4d:83:d7:7b:17:e7:d2:
40:fb:e6:03:9f:be:a2:c9:e4:8a:9d:f0:55:a7:b2:
c5:90:c3:0e:37:8a:84:46:19:21:4c:95:9b:62:1a:
76:82:98:28:da:5a:61:bf:12:9c:32:47:6d:fa:61:
7b:f3:b6:c2:ca:77:64:e4:a3:99:e4:99:bc:48:d4:
51:fb:cc:f6:95:6b:1c:b0:5d:0d:68:de:82:4e:a8:
d4:9a:fd:34:2b:7b:6f:0b:48:b8:3c:1f:cb:1d:79:
4c:2a:d8:6b:a6:79:f4:60:5a:e9:b5:cb:a3:27:68:
50:4f:98:c4:15:25:63:58:e6:43:30:73:f0:d5:8a:
f0:12:bf:11:2c:7e:aa:4e:87:7d:e9:e6:85:e8:76:
08:0e:a8:e9:53:ec:ed:50:27:f2:73:3e:6a:c2:49:
4d:3a:86:ef:03:71:a7:20:47:17:c0:4e:22:a0:49:
4f:9f:bf:9c:41:36:6e:01:56:58:4d:5f:7a:9d:41:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BD:90:2E:81:13:D1:0E:69:4D:47:24:3E:06:28:BD:32:C9:C4:25
X509v3 Authority Key Identifier:
keyid:1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1e:8b:f9:23:49:94:3a:f9:11:e1:50:02:07:e2:34:b9:d6:
14:6b:3a:9c:99:b0:39:ba:7a:fc:6a:35:0b:c1:fc:e4:6c:fd:
ee:91:60:9c:cf:3c:20:33:fa:fa:bf:ee:3d:6e:9c:66:08:34:
9e:3a:17:f9:ea:81:20:d6:f5:72:ac:b2:13:09:0a:62:f3:ef:
ee:dd:47:90:0a:ef:00:df:82:83:01:13:aa:6a:a8:73:6a:db:
56:69:4c:32:fb:0e:4e:3b:6c:28:30:6f:c4:e4:14:22:b9:68:
a4:e4:c8:e8:af:f5:6b:6f:b9:74:cf:ad:83:27:49:58:1e:92:
0c:e1:6b:52:ee:67:e8:5c:11:f3:c6:05:fe:b9:a6:d5:bb:c9:
2e:12:64:cb:50:14:11:7f:d8:c3:a9:88:65:24:1f:de:52:ff:
64:4d:d7:81:92:10:d8:bc:eb:68:87:77:7c:06:63:29:95:d6:
ec:ef:a4:eb:25:d3:eb:cc:f1:cc:0c:2a:e6:df:f6:a7:3b:d4:
83:af:32:03:42:9b:c2:8f:e9:6f:70:c7:ff:48:c9:bd:66:83:
a6:96:9b:ca:3c:f3:78:a9:d7:9e:7f:f3:63:9c:49:cc:9b:ae:
ba:e0:7e:f2:1c:b3:82:83:76:31:ea:86:bf:c1:5f:44:7d:af:
d2:81:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:58 2025 by rpki-client