
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: cRzBWDtSnretMguoSOnzBeaRSxz4osmTgUXo+ASZ/6c=
Subject key identifier: 8C:FE:78:76:5F:57:E7:06:92:75:81:A8:5C:38:A5:DC:6B:ED:49:52
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 01987298A68D8F2D681F536D724E31788BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 01:01:03 +0000
Manifest this update: Mon 04 Aug 2025 01:01:03 +0000
Manifest next update: Tue 05 Aug 2025 01:01:03 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: vQA+T6kEji9WbrFGjhaO8+gbClRC3Vkp+0Eu13r5jtA=)
2: zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa (hash: SDcPgjrr8y9zPr3/XTNgtJ+0oZH17N4IYV4VzMId4hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a6:8d:8f:2d:68:1f:53:6d:72:4e:31:78:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Aug 4 01:01:03 2025 GMT
Not After : Aug 5 01:01:03 2025 GMT
Subject: CN=8cfe78765f57e706927581a85c38a5dc6bed4952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:ba:09:7c:5e:07:49:f4:71:ef:af:cf:25:
f2:47:6f:92:02:9d:12:83:26:92:2a:fb:22:f2:f4:
1f:75:64:60:79:3c:74:f2:66:a1:b7:f0:51:3e:38:
b3:9b:79:1e:22:e1:33:cb:8a:84:9f:7b:48:51:63:
1e:c6:02:4b:0b:6d:46:45:fd:a8:e4:0d:26:18:75:
0b:bb:82:fb:c6:bd:2f:43:66:5d:97:fb:2c:6d:50:
58:35:7d:2e:78:1b:7b:4e:7d:d7:a1:71:93:d9:9b:
da:2c:57:2f:34:ab:55:72:9c:31:8b:f0:93:c4:29:
dd:eb:cb:49:c3:23:52:c1:9d:2e:7a:78:b6:bb:13:
56:0d:82:c3:f3:81:2d:90:6f:88:85:17:9b:5c:39:
c8:bf:c0:f7:01:a3:1b:f4:2c:19:1f:ee:8c:46:d4:
ba:52:0c:68:d0:20:44:1b:d3:1b:ea:1a:89:46:d9:
ab:90:bf:90:47:11:59:62:d9:f3:a1:9d:8d:46:a4:
1a:9e:c1:5a:e6:95:cd:26:51:cf:22:5e:5d:5f:72:
83:84:f4:4b:d7:41:56:02:70:62:f9:f0:cc:6c:63:
71:27:0d:e7:08:e1:dd:bc:f2:71:af:7c:32:16:2a:
93:bf:08:a2:7d:e2:49:c2:a6:dd:1c:1e:32:85:e2:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FE:78:76:5F:57:E7:06:92:75:81:A8:5C:38:A5:DC:6B:ED:49:52
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:11:10:fd:5d:d2:d1:4d:ba:f9:e5:17:00:d9:08:d5:fd:96:
96:84:a1:65:9b:8a:3c:42:fa:99:c3:75:84:a7:2c:9d:23:6a:
5d:db:20:b4:95:9e:96:bb:11:f8:e9:51:66:33:27:c0:86:95:
e2:27:98:6b:d2:4e:df:7e:dd:7c:f0:2f:45:cb:03:3e:97:72:
87:1d:3b:2e:2b:cf:b2:07:c8:4b:65:95:f0:c3:15:e2:36:48:
53:05:f8:ba:2a:bc:a5:58:32:3b:48:73:50:d9:e6:3e:93:95:
35:cf:c4:6f:e4:6c:63:88:2f:2d:d1:2e:f5:01:2e:00:73:9d:
8c:aa:09:1e:89:d6:91:63:96:44:6d:22:fb:29:d0:37:0b:a8:
0c:7e:71:ec:82:3f:f4:cc:f4:fd:b8:48:26:0e:e0:e4:c9:e1:
dd:55:c9:9f:99:36:6b:af:85:c5:3b:f2:1c:28:1b:45:bc:e1:
9c:1a:23:a9:af:7d:6e:00:4f:cb:fa:e2:07:78:a8:48:d6:b7:
76:f2:7c:23:0a:25:1c:3b:df:a6:b9:5d:0e:45:6a:99:54:9c:
e3:31:c6:75:ac:94:63:18:93:d1:58:cf:e2:49:ff:5b:a8:0a:
45:e0:e5:f0:10:c2:c5:e5:05:cf:6f:87:a9:2c:f3:4e:83:d8:
df:16:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:21 2025 by rpki-client