Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier: XG//WeyJ/fX0a7BnwgnUvRTeL7UsV5FjrCflzo8U588=
Subject key identifier: 3D:AF:95:AC:40:96:94:8B:7C:87:E3:D0:B2:84:27:29:36:AC:67:74
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial: 019872CFA22DD62FE2783443E5AEC0D42665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number: 11A9
Signing time: Mon 04 Aug 2025 02:01:06 +0000
Manifest this update: Mon 04 Aug 2025 02:01:06 +0000
Manifest next update: Tue 05 Aug 2025 02:01:06 +0000
Files and hashes: 1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=)
2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: eB5Yl+XcljAFjCfOTl9VZIWvrwegQbIC0cPfxGq6NAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a2:2d:d6:2f:e2:78:34:43:e5:ae:c0:d4:26:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Validity
Not Before: Aug 4 02:01:06 2025 GMT
Not After : Aug 5 02:01:06 2025 GMT
Subject: CN=3daf95ac4096948b7c87e3d0b284272936ac6774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:d2:94:c6:67:29:8c:8c:3f:90:38:96:c6:
28:a7:55:c1:44:ba:32:dd:c0:b6:8f:28:d9:8e:f9:
14:3e:69:d2:3b:0d:77:40:9c:c2:26:e6:52:0d:5b:
01:d9:64:b8:a5:5c:2c:0b:a8:10:5a:e8:92:de:ce:
5d:41:8b:f5:6e:d4:27:bf:e4:b3:8a:1c:77:db:e4:
6b:13:4c:7e:06:40:e8:81:2a:08:72:56:5a:a9:da:
26:3d:b7:1a:60:5f:6b:95:a2:ae:f5:08:a1:9c:1b:
b8:6a:b6:50:02:25:62:4e:44:ce:97:24:69:33:50:
63:07:6f:c6:a5:4e:d6:ce:ec:40:ed:91:16:5f:9a:
8a:96:c4:e9:c4:50:f5:df:0e:82:f7:b1:f1:69:d8:
75:b4:16:f0:0f:b9:43:cf:03:91:a4:38:0a:5d:3b:
6b:4d:76:d4:fb:92:30:91:1c:63:71:1a:53:99:81:
5f:93:18:e8:36:39:12:1d:64:4a:c8:e6:d8:fc:fb:
fc:f6:ea:90:28:db:9d:a3:f1:98:2e:89:34:84:4c:
32:aa:f1:95:5d:23:b6:bb:94:73:51:d3:55:af:87:
94:f5:01:de:66:aa:0c:5b:ea:e5:fb:4c:f2:39:08:
1d:6f:17:39:4e:4d:a6:3a:5c:20:b8:a2:58:df:b0:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AF:95:AC:40:96:94:8B:7C:87:E3:D0:B2:84:27:29:36:AC:67:74
X509v3 Authority Key Identifier:
keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:21:b6:ac:68:29:ad:53:21:db:0e:ca:2a:06:de:e5:93:
22:80:a1:9c:25:f9:b4:6b:a2:ca:38:51:b9:ec:d9:78:e7:81:
8d:14:66:33:55:8a:20:6c:42:07:c1:84:1f:1d:b2:d1:6e:51:
11:fc:da:6f:ce:b9:a3:b8:3c:d3:e0:8e:52:c9:db:d3:53:f1:
1e:1e:61:c8:bb:9e:2e:ef:b3:11:98:dd:cc:fd:f5:c0:93:02:
fd:aa:27:fc:cb:23:17:4b:fb:ae:13:bc:79:9c:44:43:f2:40:
2f:04:15:5d:94:8e:06:1b:85:e6:ee:4e:43:3d:a9:e0:c5:3e:
21:49:5d:3b:12:aa:a2:1c:4f:ab:ce:ac:22:eb:1d:eb:1a:cb:
df:1d:34:7a:64:40:52:e0:97:9d:8c:ae:31:41:9e:c3:46:d5:
70:69:97:6d:2f:ed:3a:65:21:92:77:48:ed:47:0d:f1:46:64:
85:01:a6:bb:6f:e5:69:b6:95:da:11:e1:25:a3:c5:83:75:67:
1d:65:02:b3:ad:1f:47:03:52:2b:9c:62:15:48:22:41:4d:06:
82:d3:1a:82:3b:0a:14:fd:86:95:10:06:bb:ac:ec:eb:78:e0:
4f:ea:6e:1e:6d:52:10:0d:0b:b7:43:d3:3b:64:56:ec:56:c8:
61:bb:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:05 2025 by rpki-client