Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
File: HK8vo44dGk0OBmCb8pdugcUKrQo.mft (raw, json)
Hash identifier: po1mWmOIqZNP3Ms+D58ihpfk9UWJgOMTqt7c7NQswyI=
Subject key identifier: B9:61:2C:57:54:9B:9E:80:B8:3E:6D:3D:8B:14:39:D6:F8:39:77:BC
Authority key identifier: 1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
Certificate issuer: /CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Certificate serial: 019873E3BED8D4577F776701772831F8EDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
Manifest number: 12CC
Signing time: Mon 04 Aug 2025 07:02:42 +0000
Manifest this update: Mon 04 Aug 2025 07:02:42 +0000
Manifest next update: Tue 05 Aug 2025 07:02:42 +0000
Files and hashes: 1: HK8vo44dGk0OBmCb8pdugcUKrQo.crl (hash: oF0c0EGZYi2AKZF5yffZGJUHavZvWVwv/teYEvc4aBo=)
2: lmgzBptHHcGR1jAKHjpS47zLYEQ.roa (hash: t/2vEU4hMx7G3HXdySNq/pjezwcUhKsGwxxqSv/Bf/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:be:d8:d4:57:7f:77:67:01:77:28:31:f8:ed:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Validity
Not Before: Aug 4 07:02:42 2025 GMT
Not After : Aug 5 07:02:42 2025 GMT
Subject: CN=b9612c57549b9e80b83e6d3d8b1439d6f83977bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:38:d8:3d:8d:8c:89:f0:59:be:8e:12:b3:
b7:b2:d4:f2:25:9a:c8:53:51:9b:e2:78:ca:ab:aa:
dc:0a:1e:f4:96:e0:0b:18:45:37:47:8e:5e:98:38:
a9:f2:ac:ae:9a:48:70:72:76:bd:ae:6f:89:0d:ec:
1b:91:e4:68:51:20:5d:bd:75:d2:48:ad:22:b0:66:
41:63:fe:83:bc:70:d5:38:c8:75:ca:dd:f9:60:b0:
d4:9f:0b:ee:c2:50:06:5d:8c:21:87:76:09:2f:bd:
4a:1c:9d:31:3c:f7:c2:40:d3:e6:10:47:7f:26:8e:
87:fc:68:b1:a9:d8:93:86:dd:32:6d:2d:2d:ea:62:
93:b0:35:6d:7f:af:e7:ac:72:85:43:a2:b7:c8:da:
64:b9:e8:c6:9c:97:36:69:b7:c1:08:46:c0:83:e2:
e6:df:5a:59:e8:b1:c7:3b:cd:2b:6d:49:e5:79:04:
47:d7:30:5e:c5:73:51:46:a2:62:89:bd:e0:4c:aa:
7e:6c:3c:1c:f8:29:d2:ea:06:a8:a1:24:a4:00:f0:
88:43:7d:36:b5:33:81:7f:59:e6:a1:92:8b:9a:84:
be:c3:0c:3c:1c:69:31:5b:58:91:d2:33:7d:0a:7e:
75:63:f3:29:54:ac:bc:96:1a:f1:87:a5:44:18:69:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:2C:57:54:9B:9E:80:B8:3E:6D:3D:8B:14:39:D6:F8:39:77:BC
X509v3 Authority Key Identifier:
keyid:1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8d:cb:6c:12:80:21:66:6b:02:17:da:35:ed:d3:ad:e6:35:
45:fa:fa:32:8e:67:a8:14:15:a7:90:ad:19:5e:83:ed:87:d1:
55:e7:33:1f:72:74:01:d0:31:44:6a:41:2f:0a:74:b8:d8:17:
f6:cb:bf:5a:15:0f:a6:c5:c9:45:30:41:cc:04:fb:c0:76:16:
72:5f:de:6b:51:8d:95:54:fc:aa:2e:31:05:35:2c:8a:bc:01:
c9:61:dc:8e:6e:40:3d:57:46:04:56:47:49:2f:f3:b9:48:b3:
30:88:ab:3f:f6:86:e5:d1:e4:e6:b6:4c:01:3f:d1:6f:bb:5e:
f7:cb:61:6d:a0:d8:da:5c:cf:90:31:23:4d:25:71:ff:84:80:
37:4b:0b:fe:c8:d1:15:96:ff:09:f3:cb:0c:3d:ac:73:ca:36:
5e:5e:f3:80:e6:ac:51:3c:2f:22:da:5d:c9:36:38:fb:75:64:
e3:b7:9e:5c:eb:4f:bb:6f:f0:f2:ba:f8:ae:93:63:77:73:76:
a0:49:b1:c1:5e:d7:12:5a:46:a7:3f:ed:79:ca:49:e4:dd:b0:
62:5f:22:b2:9c:48:d9:20:7c:71:b3:e9:c3:61:2f:89:61:b1:
a7:67:41:42:a5:4f:0f:1a:a1:d1:c8:d0:c2:00:71:6f:90:3e:
cf:ab:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:39 2025 by rpki-client