Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: +pYranY2qpymPea2eWGQLrJMHzwVRDPd+K8HSsjGZ58=
Subject key identifier: B9:37:15:A8:16:34:5E:54:CC:0D:E6:3B:28:2B:83:33:94:D2:66:28
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 01987D8BC0192E44F83E3004724F1467C0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 06FA
Signing time: Wed 06 Aug 2025 04:02:47 +0000
Manifest this update: Wed 06 Aug 2025 04:02:47 +0000
Manifest next update: Thu 07 Aug 2025 04:02:47 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: X1MPDrrMRjbaKhZe/rPgTOEl2sVVtjsZCWxWgiuiqwM=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:c0:19:2e:44:f8:3e:30:04:72:4f:14:67:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Aug 6 04:02:47 2025 GMT
Not After : Aug 7 04:02:47 2025 GMT
Subject: CN=b93715a816345e54cc0de63b282b833394d26628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:40:f7:98:54:f5:ca:cb:71:3b:3b:5e:45:
d6:51:84:f7:32:c8:93:b9:9f:f0:45:2f:a9:e4:00:
ad:1b:ba:f0:0d:f5:fe:3f:3c:b1:97:2a:99:02:42:
46:a2:c7:ed:dc:5c:4a:d5:53:64:5d:be:57:91:05:
38:ce:16:51:08:74:71:b7:25:5c:cd:1b:ab:1a:ac:
1f:10:21:38:ad:b7:20:98:96:72:00:d9:e5:82:ea:
fd:14:89:2b:be:b7:ec:94:35:65:a8:52:40:17:20:
70:75:f5:73:ba:70:ad:10:a9:c7:b9:63:94:37:41:
4e:8c:16:50:91:1b:c8:57:a8:81:3a:b1:0f:29:46:
38:7b:5c:14:a3:db:96:b0:f8:bb:83:d6:9b:34:01:
cc:d7:e0:cc:f2:c2:0a:1f:e9:03:96:df:be:d4:d6:
ec:d5:0f:35:56:77:99:c2:d0:35:1e:7f:27:5b:74:
23:b4:c0:99:d6:05:c2:88:71:c7:55:43:9a:67:94:
95:8f:db:71:a6:de:94:c3:88:7e:ab:08:94:fb:5b:
7d:0a:89:52:65:b3:15:7a:6c:5c:e3:79:8e:17:ff:
cb:a1:42:c1:ee:db:05:00:54:0f:28:9c:5e:18:24:
62:6b:bb:93:bb:91:8b:39:ca:71:36:5f:2a:a2:ef:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:15:A8:16:34:5E:54:CC:0D:E6:3B:28:2B:83:33:94:D2:66:28
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e6:2a:df:85:db:94:ae:07:cf:4f:49:c6:1f:c0:bb:ee:61:
0b:aa:34:a8:6c:e3:0e:3e:f5:90:af:bf:77:c3:1c:d2:10:dd:
a2:5e:cb:54:e0:97:22:15:bb:66:a1:4d:fe:f8:20:9d:6a:f7:
c2:7e:71:41:9e:df:95:80:75:27:67:12:0d:3b:1c:59:d1:e0:
35:74:41:1e:4d:7b:0c:51:bd:c4:90:eb:bd:0c:96:9c:c2:08:
23:f7:bc:11:9e:2b:7e:5a:d2:c1:2f:4c:9c:44:a5:4d:ce:5c:
13:1d:ed:56:b8:b5:6f:3d:86:b7:7f:bd:52:2b:94:87:2f:f9:
e5:6f:3f:c6:a9:b0:d7:4c:18:d0:4a:c2:ec:b5:ef:af:98:24:
9c:e3:0a:38:4c:b3:0a:c9:1f:78:e4:db:95:96:28:0c:74:21:
f3:b8:85:ea:c0:89:4b:c6:e2:49:8d:85:4c:4d:a2:e1:d0:cf:
83:86:ec:5c:63:8c:b1:99:de:dd:f2:1e:1e:6c:c0:fa:c8:da:
70:c2:0b:82:8d:95:d1:2a:bf:53:dc:f3:e4:8b:6d:fa:ac:6b:
ef:ac:dd:7d:d5:29:27:91:d2:aa:40:e4:64:b5:6c:2c:42:64:
e7:5c:10:5c:4f:2e:94:53:27:63:38:c8:7e:c2:c0:af:5e:f5:
26:64:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:16 2025 by rpki-client