
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: wS7LzV6IjSP+TFWAgm92LF8U26sVsLbTyaBwi2BYqDg=
Subject key identifier: 36:CF:B7:1B:23:49:78:38:53:2F:01:73:80:E8:E5:CF:11:3A:A7:78
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 0198793F7BE30FD394C74B7F66E6368F3264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 1620
Signing time: Tue 05 Aug 2025 08:01:00 +0000
Manifest this update: Tue 05 Aug 2025 08:01:00 +0000
Manifest next update: Wed 06 Aug 2025 08:01:00 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: FO9kf+I6qmJx5Fc4uI6zLaQcVG/iK3CY/OvRXTV5xHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:7b:e3:0f:d3:94:c7:4b:7f:66:e6:36:8f:32:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Aug 5 08:01:00 2025 GMT
Not After : Aug 6 08:01:00 2025 GMT
Subject: CN=36cfb71b23497838532f017380e8e5cf113aa778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:8c:f6:4b:51:ca:f2:10:13:db:63:f3:71:
a5:cb:26:90:8b:16:28:f2:a8:74:14:27:40:d9:91:
a9:b7:dd:e5:cc:11:c0:af:39:cb:c1:18:0f:cf:0c:
e3:2c:d9:a5:3f:98:6e:e3:b5:cb:78:57:8c:12:4a:
e4:af:f2:76:4c:7d:b8:c0:10:72:45:ba:5a:f2:9e:
6e:d0:d3:27:94:70:e6:ee:14:38:6b:ba:19:16:c8:
7e:e2:7e:91:50:5e:32:a4:7b:7d:60:f2:33:1b:19:
5c:39:a8:b7:6c:e1:75:b2:3e:8c:32:07:74:29:57:
53:bf:90:9a:2c:b8:8d:fa:d6:85:08:c9:2d:2f:66:
ae:98:cc:f7:df:c4:fc:b3:9d:ad:85:80:cf:0c:05:
fe:cc:94:55:1e:90:41:47:47:ad:45:fd:c2:5e:18:
a0:a1:eb:56:9e:98:61:69:fc:57:3a:fd:82:71:3d:
53:f0:da:cc:7b:0d:ec:e3:11:1f:b8:d8:e7:49:8b:
d5:f2:8d:bb:51:4e:25:5d:1f:ac:37:24:bb:9d:2c:
39:6a:02:ab:c2:d6:d9:41:d9:61:12:a5:d5:3b:4f:
4e:69:e9:98:cb:24:8c:0e:b5:64:d6:03:25:68:80:
5a:de:00:ca:a0:9d:ed:60:3b:70:a3:e6:b8:47:83:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:B7:1B:23:49:78:38:53:2F:01:73:80:E8:E5:CF:11:3A:A7:78
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5e:f0:49:03:16:00:b4:af:ab:6b:c1:c9:e1:24:b4:29:21:
bd:af:33:9c:ad:e5:27:7b:37:1a:f6:10:98:94:08:b8:dc:b6:
20:10:af:8b:bc:54:f5:ff:dd:e9:d9:26:3e:bc:5b:0f:4e:50:
e2:5b:ba:02:30:da:c9:f9:25:58:85:93:a6:55:9f:af:86:3e:
82:ef:8e:1b:63:1f:78:f6:59:98:61:31:a3:f7:7b:fc:f6:4e:
b7:ce:57:f1:27:f8:48:8c:0f:1e:a2:4e:60:40:e6:7c:3a:d7:
e6:b0:b8:ca:56:0e:f6:ee:10:56:91:42:27:24:4b:22:ff:99:
02:5e:01:74:86:40:e6:a7:89:9f:43:37:2f:69:e2:9f:27:61:
9e:48:91:09:98:05:84:a3:05:e0:e3:4f:62:35:6d:b8:07:20:
e5:cf:a0:c4:a4:56:0a:09:c5:23:47:1e:2c:0c:07:52:71:16:
20:75:7d:c2:93:fa:b6:dc:de:8d:a9:3e:e2:1a:93:7f:89:0e:
7b:56:b4:52:71:ea:cc:d3:4b:d9:29:b2:83:f5:3a:9c:d8:ea:
01:38:b8:40:58:da:7b:dc:36:77:65:78:22:a1:77:a3:d7:eb:
31:55:4e:8e:a9:5f:07:39:51:c8:ee:ee:42:7f:b2:ae:06:0a:
c4:f0:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:36 2025 by rpki-client