Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: 1dl0TGcL6p5/Jv7OygFvrMvd0Xo/fZJsHmpW7NWBtec=
Subject key identifier: 8D:ED:E2:2B:D6:20:2B:7E:55:04:1D:E3:D1:59:0C:15:95:99:B9:81
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 0198819E535612FD466BD34EF068FF5E662A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 1391
Signing time: Wed 06 Aug 2025 23:01:33 +0000
Manifest this update: Wed 06 Aug 2025 23:01:33 +0000
Manifest next update: Thu 07 Aug 2025 23:01:33 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: cySyIcciyH2cn2ehdpURjpzWUeVe6PhlpQpLEA6UCHw=)
2: lUApR8rVpWyDLR1GadE8v1PzIFI.roa (hash: SjTc2RPVxxZZujKF5tyIKpHPh6Uad/TapUg1uEd/j6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:53:56:12:fd:46:6b:d3:4e:f0:68:ff:5e:66:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Aug 6 23:01:33 2025 GMT
Not After : Aug 7 23:01:33 2025 GMT
Subject: CN=8dede22bd6202b7e55041de3d1590c159599b981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:f8:56:08:24:c8:33:ee:36:ed:80:ce:4f:
fd:8c:49:6d:c3:5d:98:3d:a1:4d:4d:65:30:55:1a:
a2:0b:8f:74:d5:7c:d5:03:c8:1c:4b:08:2b:b0:f8:
49:42:e4:bf:95:e2:1a:06:b4:a9:6b:ea:b4:2c:3b:
60:e0:ba:a7:c5:8c:c6:eb:b6:16:03:73:01:b0:74:
d7:32:73:1b:ed:48:e1:19:69:1e:c2:46:97:98:bd:
e5:26:8e:f9:31:07:93:b1:0e:ff:9c:1f:90:e8:44:
0c:8d:5c:b4:1a:c9:7a:f4:17:d2:67:b8:20:cd:cc:
8a:32:25:b1:d0:02:75:42:3e:cf:8f:f4:d9:8c:f5:
f2:2b:b2:e6:f9:89:1a:ef:14:13:57:be:db:e7:b0:
6e:d8:96:cc:18:55:70:f4:8d:cb:e9:59:fd:b3:6a:
c3:63:c7:75:b5:3b:5a:a8:c2:40:a7:23:50:76:f8:
da:6d:c7:8b:55:0c:43:56:9a:0b:87:ce:8b:77:0f:
37:3c:c3:72:2b:80:29:0c:92:f4:a6:22:65:41:5e:
a1:89:01:7d:3a:bb:d6:23:0d:fe:bf:a0:5e:6c:c1:
e7:5b:a0:9c:cd:20:b5:43:61:fa:81:1d:72:2d:d7:
73:40:c7:52:94:7e:e7:92:ac:49:b2:cd:ce:4f:82:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:E2:2B:D6:20:2B:7E:55:04:1D:E3:D1:59:0C:15:95:99:B9:81
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d6:05:eb:9c:e6:96:65:66:13:49:e3:cb:34:69:34:14:32:
fc:d7:84:db:93:5c:bc:f1:73:fa:e6:eb:57:91:77:7e:0c:e4:
38:bd:81:9c:6a:40:24:cd:28:30:d6:af:8a:82:95:1a:76:a9:
05:35:c7:c4:8f:0e:c9:65:68:e1:8d:34:ea:0c:d8:c6:30:bf:
fe:e2:2b:79:3e:bb:63:ca:46:d6:a7:32:2a:cc:cc:4f:9b:0e:
4a:07:4e:af:3a:5a:db:f2:9e:c7:f2:79:a7:8d:9b:3e:89:6d:
10:9d:c8:aa:1a:e3:80:5a:a2:a9:8e:c0:61:6a:cd:b5:e7:7f:
23:01:8a:53:f9:40:1b:37:18:fc:93:16:74:30:02:be:87:58:
78:e1:98:d9:15:31:6e:2a:a3:bf:06:8d:ce:b8:37:9a:6d:ac:
9a:74:92:72:85:04:dc:95:6e:a9:89:07:1b:35:bd:76:94:6f:
61:41:83:b9:3b:de:ac:c6:73:ff:9e:b0:70:1d:d9:9c:cd:c8:
67:b4:39:b9:b7:e1:9e:e4:8e:62:78:22:70:66:41:8a:bb:34:
70:27:53:cc:0a:59:a4:5f:00:28:29:2f:b5:2c:16:12:82:ab:
7f:be:d4:ad:3e:31:02:20:b4:3f:b8:6d:67:b4:d8:0d:3a:8f:
bf:b1:3c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:10 2025 by rpki-client