Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
File: HKy3fiC3gUfUf4OUKU8Re1yE714.mft (raw, json)
Hash identifier: +1L21x8hl1SdU1V65dH5ruPcPDpfq1EIfPGjUZCU84c=
Subject key identifier: 65:C9:E5:87:E8:4B:AF:DB:70:68:06:2A:FA:1F:EC:51:E6:7A:FB:DA
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Certificate issuer: /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial: 019894B6DA8914A01E029750DFC8F509D7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
Manifest number: 10DA
Signing time: Sun 10 Aug 2025 16:01:08 +0000
Manifest this update: Sun 10 Aug 2025 16:01:08 +0000
Manifest next update: Mon 11 Aug 2025 16:01:08 +0000
Files and hashes: 1: HKy3fiC3gUfUf4OUKU8Re1yE714.crl (hash: pND/U7lrtgastoF2nTWmXs0Vw1GWB2TzYI6UVY6rSCQ=)
2: OoGFPfomo3cQZiCz4qsidreDjCc.roa (hash: nmvopa2kUZd9MIXgbeUNiD86irOgkmmL30is65pmYug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:da:89:14:a0:1e:02:97:50:df:c8:f5:09:d7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Validity
Not Before: Aug 10 16:01:08 2025 GMT
Not After : Aug 11 16:01:08 2025 GMT
Subject: CN=65c9e587e84bafdb7068062afa1fec51e67afbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:fc:57:05:e9:19:8a:f2:a3:02:e9:55:2b:
09:93:b1:ca:ac:ee:6f:64:35:4d:57:ac:08:a0:90:
79:b7:f1:ac:b6:70:db:62:a4:ed:63:0e:36:2c:fe:
6e:a7:60:26:db:53:1c:16:b8:bc:d0:55:8b:01:7a:
1e:e8:67:4c:74:90:8d:27:e3:7b:04:2f:eb:bb:ab:
2f:86:0e:33:b5:6d:ad:51:06:9d:28:f8:76:60:85:
eb:a6:06:09:53:eb:91:65:73:df:99:73:01:7a:53:
bc:78:7e:b5:b8:a1:95:89:f1:83:b4:59:d4:82:81:
3a:55:73:fb:63:e2:d0:ce:19:33:95:28:2d:64:6b:
f3:7f:23:cb:dd:93:19:c5:59:eb:ed:3e:a7:c6:ad:
3e:1c:cc:ca:4b:5a:57:34:04:1c:b8:03:9e:76:49:
5d:1c:fe:d2:61:29:21:3b:4d:c2:65:bd:5c:29:f5:
6b:24:0c:a5:2a:97:84:da:28:fc:58:33:91:6c:a4:
fb:f9:19:5b:5d:3f:de:02:04:9c:a1:b2:e2:5f:0f:
fc:3a:39:2a:a0:f3:d2:54:94:7e:7d:38:a7:29:a8:
44:e2:f2:e7:ae:64:bd:c1:1d:10:84:d8:4e:85:65:
81:15:10:84:5d:92:42:f1:8a:76:61:74:16:82:9a:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:E5:87:E8:4B:AF:DB:70:68:06:2A:FA:1F:EC:51:E6:7A:FB:DA
X509v3 Authority Key Identifier:
keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:13:2f:71:70:69:da:98:6c:bb:fc:e7:11:6c:69:85:58:2a:
8d:cb:eb:ae:a0:7d:3d:cb:44:8f:6f:fc:8e:c8:fc:87:6b:a6:
f5:57:f9:91:35:bc:18:d8:7e:91:77:ca:8c:df:b8:e3:48:5e:
23:a4:d5:30:bf:48:c8:69:cc:bd:f3:f3:a1:e4:ee:5c:08:8b:
f8:63:dd:91:33:e3:86:98:c9:8b:7e:a5:c6:ce:3a:d0:ff:7d:
01:20:2a:54:4a:9e:b8:7b:81:38:cc:98:4b:f9:2e:b1:be:4f:
7e:38:2a:cd:bf:72:71:44:86:4d:f1:ba:ce:93:59:80:da:c9:
97:ee:94:ce:90:3d:1b:23:71:5f:43:a3:98:98:3e:1e:de:5c:
3e:7a:e4:47:18:53:5a:58:81:e9:85:73:ae:c4:7f:16:42:d2:
20:c0:98:b5:92:c8:86:55:b1:5d:10:ad:58:2d:a6:06:87:dc:
3c:57:9f:f2:24:8d:17:17:4a:46:54:a8:fb:65:a9:08:88:c1:
09:b9:0f:e0:26:73:5c:08:fe:b4:61:2c:48:fa:5d:83:99:7c:
1a:39:a0:c1:fa:ac:d1:03:47:57:85:d3:37:4f:c6:95:06:5a:
ba:6f:06:b2:d3:ac:3c:e3:94:ae:14:26:aa:28:1d:b6:31:c2:
e2:59:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:43 2025 by rpki-client