Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: 4O8VshNGXxE/b0MGWs792SzTfYIJ7llb7bSp902vS6U=
Subject key identifier: 79:F3:B7:F0:1B:DA:7C:16:9B:8D:85:33:DD:93:D3:95:E6:77:9C:50
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 01987B2D72A5F1329349663D794B391661DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 13AB
Signing time: Tue 05 Aug 2025 17:00:32 +0000
Manifest this update: Tue 05 Aug 2025 17:00:32 +0000
Manifest next update: Wed 06 Aug 2025 17:00:32 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: w8Ox3XrHZCZ6K3jCexBiysoJ7uMshGymg/JQt9J+di4=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:72:a5:f1:32:93:49:66:3d:79:4b:39:16:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Aug 5 17:00:32 2025 GMT
Not After : Aug 6 17:00:32 2025 GMT
Subject: CN=79f3b7f01bda7c169b8d8533dd93d395e6779c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b4:be:14:9f:dd:48:44:e9:4a:a6:f5:f1:4a:
2f:d8:95:5f:78:22:3c:8d:07:72:b1:3d:4e:31:4f:
b5:01:40:20:80:af:20:64:94:58:56:d3:c0:51:dc:
73:a0:31:74:48:33:6f:18:c2:a3:c0:c5:17:94:89:
5a:4c:58:58:3b:f4:0e:5f:da:b1:e0:59:5e:ed:cd:
65:c4:0b:3e:ff:a1:f7:d2:6d:0e:1c:7b:f5:c3:5a:
39:ed:a3:8a:74:43:59:74:40:ec:ee:10:e9:6f:16:
f7:ce:03:ac:cf:e6:79:35:c0:5e:ee:b4:d6:00:b5:
be:60:0a:ea:1b:e3:2b:1f:38:15:93:b7:d2:f6:72:
67:02:74:cd:4b:c6:11:7d:65:4b:50:b3:4c:15:48:
27:0b:28:b7:8a:88:eb:27:7c:cd:ef:12:6a:fd:38:
c3:30:50:ef:cc:a1:fe:20:00:12:60:3f:2d:99:15:
0f:88:cc:70:5e:75:8b:b9:b3:3d:93:81:30:23:24:
b5:04:e3:dd:a8:88:8f:43:7b:28:d9:90:08:f7:b9:
e4:55:14:9f:61:31:62:af:13:84:48:c1:74:d4:f4:
39:f1:37:68:ab:bd:97:bd:f1:5d:bc:92:59:5a:77:
88:e4:d4:f6:d2:ae:9a:22:6f:44:f9:d5:63:50:bc:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:B7:F0:1B:DA:7C:16:9B:8D:85:33:DD:93:D3:95:E6:77:9C:50
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:ba:d6:87:5b:b6:e0:05:47:ec:54:cb:ac:77:c2:9e:96:
05:d7:3f:0d:96:d4:57:60:39:93:9d:a0:42:71:db:e1:0f:14:
10:53:13:7f:b3:9b:18:99:a6:47:6a:b7:69:2f:70:1b:d6:3d:
4b:bc:ed:e1:6c:87:d6:d6:69:33:a1:b9:f4:e9:1d:9c:aa:76:
f1:2a:16:0d:16:a1:05:3f:ff:fa:7f:c6:d7:51:ac:4c:d8:32:
3f:ae:e0:49:aa:fc:cc:cc:7b:4f:8a:c6:ec:9d:96:8e:35:f5:
23:b8:3e:ec:fb:ca:63:48:db:6c:62:86:19:8f:d0:58:64:fe:
46:39:f0:6e:06:5b:1b:26:00:63:42:59:51:6b:17:8b:00:37:
82:e0:f9:d8:65:22:08:5a:af:f3:d6:93:b0:98:95:03:a6:f8:
52:5b:5b:9b:d7:f0:fe:05:cd:b7:e1:2e:ef:2f:1f:9d:4b:39:
41:11:17:12:02:b3:6a:af:02:e4:5a:28:b6:32:60:19:02:50:
5d:32:35:f5:6b:c8:5b:0e:f5:48:c6:ae:0b:fe:3f:87:16:d7:
63:22:3b:e2:67:12:87:eb:c5:d8:db:88:b8:02:a2:39:20:51:
be:51:ae:7a:3b:4f:02:d6:06:b9:93:7c:35:e4:2c:66:bb:c7:
ba:05:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:18:18 2025 by rpki-client