Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: 8ohhqZZli5xc3/aR2lYXJSlanZxLSy8vifEAqLqfl/I=
Subject key identifier: A4:1C:A6:83:AD:A7:32:4C:2C:E8:99:C1:13:4E:8F:6E:C0:AF:0A:63
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 01987486E0F6FB36FA838F880C183C660E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0D9A
Signing time: Mon 04 Aug 2025 10:00:52 +0000
Manifest this update: Mon 04 Aug 2025 10:00:52 +0000
Manifest next update: Tue 05 Aug 2025 10:00:52 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: Cc2+63BKfP6oMI//jVAyWC6EF9IV5p3wKcaf5rd/D6w=)
2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:e0:f6:fb:36:fa:83:8f:88:0c:18:3c:66:0e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Aug 4 10:00:52 2025 GMT
Not After : Aug 5 10:00:52 2025 GMT
Subject: CN=a41ca683ada7324c2ce899c1134e8f6ec0af0a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:96:3c:a2:f2:d4:04:c3:12:49:4e:51:d9:
66:64:12:0d:ef:a5:86:21:b8:89:5a:19:6b:b4:2a:
f7:cd:e6:7e:c7:60:b6:77:59:b3:3f:13:6d:96:2a:
53:1d:c1:ed:bc:7b:9a:51:fd:f2:9c:a0:aa:a8:31:
0f:ec:62:d2:6a:5a:17:d0:f7:1e:15:d9:37:87:30:
95:cf:8b:dc:e4:a3:be:41:af:59:ff:0e:b1:19:22:
09:75:49:01:a5:e7:e6:9d:e6:55:e1:b4:3a:19:60:
ce:76:1c:7b:ba:c3:c1:fc:36:fd:3a:22:9f:f5:3c:
f4:2f:70:d1:f2:70:9f:28:a1:a0:1e:10:99:a7:2d:
46:af:db:e6:ae:2c:83:61:e4:d4:ba:c3:85:6d:75:
51:4d:54:cf:4c:b4:90:9b:db:aa:c4:53:f6:aa:b2:
c5:6d:7b:00:19:7c:fc:a7:7d:f5:d8:e8:aa:22:44:
35:1b:72:3d:17:f0:e9:33:35:27:9c:85:75:ad:fb:
80:02:ea:eb:71:d6:35:bf:91:18:a2:ae:d8:75:f5:
08:56:3e:38:eb:d0:27:2b:a1:9b:c7:9e:65:bf:70:
f5:00:28:a5:cf:b7:ab:5c:fe:46:0d:03:b5:45:02:
58:c7:c1:e4:2f:58:1a:60:bb:8e:dd:0a:92:bb:95:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1C:A6:83:AD:A7:32:4C:2C:E8:99:C1:13:4E:8F:6E:C0:AF:0A:63
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3c:34:3e:1a:45:3e:d3:57:c0:7b:6b:74:66:f2:96:9f:02:
fb:c9:74:35:cc:7a:4d:55:06:62:78:31:62:6f:67:55:68:ed:
0b:8e:92:f1:89:53:70:6b:03:56:37:12:29:41:2a:5a:c1:da:
a5:43:c5:53:0a:59:0a:39:b1:11:d6:4c:a3:25:6c:97:6f:c4:
8f:36:0a:72:a5:7c:22:39:ba:9d:d4:3c:b7:52:22:d5:d3:a8:
90:04:85:8b:f4:56:50:f7:e6:72:0c:3b:d3:93:6f:de:a1:4c:
fa:b3:94:6d:a2:25:e1:c4:7f:5a:67:6a:30:66:cb:e5:98:22:
a4:db:fd:48:e2:e4:60:94:9c:7a:66:da:78:21:68:ca:4c:fb:
df:17:e4:00:e5:3f:55:41:e8:5e:67:ea:39:10:b7:72:db:00:
0b:9d:12:72:41:00:8b:a3:8f:f7:4c:77:f3:9d:dd:6b:c2:73:
e3:25:c6:50:f4:9e:53:d2:c5:49:9c:3e:d0:7a:20:93:48:b0:
de:ae:98:14:9d:7e:3f:84:b1:8e:9a:2c:cc:92:67:d7:37:1e:
f5:7a:53:04:5e:4d:ee:86:0f:45:ac:25:58:17:22:96:8b:97:
6d:e4:69:ee:29:a3:3d:18:47:03:c8:3e:02:29:14:e3:33:bd:
df:76:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:37 2025 by rpki-client