Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: +cVNvq09f5TCQ4S7sIDBZ/WbxGyJlzTEamUY2Vm16OA=
Subject key identifier: FC:AE:BA:AB:B5:D0:1A:0C:76:01:9A:19:EF:29:2F:91:06:F0:65:EB
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 01988FFE07BEAE4220A51C3F11B1C47F45BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 18:00:46 +0000
Manifest this update: Sat 09 Aug 2025 18:00:46 +0000
Manifest next update: Sun 10 Aug 2025 18:00:46 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: wZ94PjpvITX0krtpyZjiCBzLpmWsi3ysWx1FVDQFvhs=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:07:be:ae:42:20:a5:1c:3f:11:b1:c4:7f:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Aug 9 18:00:46 2025 GMT
Not After : Aug 10 18:00:46 2025 GMT
Subject: CN=fcaebaabb5d01a0c76019a19ef292f9106f065eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:0b:80:20:7b:bf:7b:c8:55:68:28:63:39:
9d:4a:e9:5f:62:7c:c4:57:42:2a:30:ba:86:1b:b5:
69:e2:5d:14:69:61:c5:25:ed:da:8b:fc:95:e7:57:
c9:74:cd:51:e8:ca:5a:03:3b:3c:d3:0c:43:76:50:
ab:c2:6b:46:39:8a:72:ec:0f:f9:96:d9:3d:1a:47:
03:e3:81:47:58:c6:e0:3e:17:76:b7:e8:32:1e:6c:
3b:ce:72:89:54:65:cc:b3:a4:a1:df:28:23:7f:60:
56:4b:59:48:0d:5d:41:cf:ec:1a:36:b7:07:87:8c:
58:14:0e:7c:24:9e:31:2f:26:5f:d4:42:94:e8:83:
75:59:ea:64:e5:96:44:eb:4b:78:6f:e5:9c:ca:46:
f1:76:1e:93:64:bd:6a:66:1c:03:61:93:a3:f7:9f:
5e:e2:64:05:88:27:2c:ff:5b:de:1a:43:12:82:b6:
16:43:f7:e2:4a:cd:c2:96:57:b4:81:f8:8f:7d:d6:
bf:cf:59:11:b6:bb:33:ca:0d:32:e6:47:5c:99:c9:
3f:b8:48:7b:c9:5f:60:ec:a5:8b:66:c5:af:09:bf:
eb:56:aa:35:79:f9:25:e1:58:f0:e9:bb:11:6e:1c:
b1:ba:80:48:9b:e9:c9:ea:a6:45:cf:de:5a:40:d9:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:BA:AB:B5:D0:1A:0C:76:01:9A:19:EF:29:2F:91:06:F0:65:EB
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:46:d1:38:49:4b:5f:75:01:bb:2c:17:7c:e2:a6:e0:6f:
01:a7:bc:b4:7b:98:c6:7c:40:dc:2b:3e:1d:b2:d2:63:72:22:
05:ee:b0:8f:65:69:79:61:22:f1:49:52:1f:f6:a9:56:fb:f7:
38:f5:62:5f:5b:c2:13:ad:d5:9a:b0:8f:a0:36:56:aa:f5:9b:
b2:4a:d6:ae:21:b7:25:b0:58:05:3f:d2:e5:97:97:af:d8:56:
12:f7:bc:7e:e9:68:77:ae:f1:0e:2f:81:35:f1:79:57:d8:eb:
68:e6:48:ca:4a:b6:4d:33:61:06:06:2e:29:ff:21:33:f7:f0:
03:ae:37:f9:b8:6f:6b:b1:ef:c9:5c:51:cf:ee:e6:2e:a1:5e:
2e:70:0e:6c:d1:a7:f2:20:b6:d3:82:37:d8:30:31:7c:64:90:
22:fe:c2:cf:17:c2:3a:7e:cf:32:22:45:b7:16:3a:fd:0d:51:
fd:b9:a1:0e:3d:7b:ea:aa:be:75:b1:d4:a3:e1:04:ca:5e:f9:
c2:06:7e:bb:ad:ee:e5:f8:5d:95:da:5c:11:be:b9:91:21:8f:
24:3c:82:00:0d:0d:7c:ff:37:36:b8:2c:1e:76:80:2a:44:39:
b9:23:e2:35:f3:ca:79:df:16:0e:95:53:62:d6:a8:31:fd:07:
a2:78:45:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:51 2025 by rpki-client