Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: /6reJu2nGgAcA9FgwvsWVIKtFJCMm1DvbP0kumn8DxM=
Subject key identifier: 21:5E:E2:89:E3:39:38:33:F4:34:C3:93:EE:46:11:3A:AB:D9:04:2D
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 019873746080A4E5AA6C0AE419FBD39350D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 05:01:03 +0000
Manifest this update: Mon 04 Aug 2025 05:01:03 +0000
Manifest next update: Tue 05 Aug 2025 05:01:03 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: hFOEEAlG/TX7V+sO+q0Ca50p5ehQVHXVKjrkzRrxpoo=)
2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:60:80:a4:e5:aa:6c:0a:e4:19:fb:d3:93:50:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Aug 4 05:01:03 2025 GMT
Not After : Aug 5 05:01:03 2025 GMT
Subject: CN=215ee289e3393833f434c393ee46113aabd9042d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:1d:84:95:f4:d5:67:d2:f5:1a:c9:66:02:
bb:09:6c:1d:07:65:eb:9c:d3:71:ee:10:94:d2:1e:
3f:47:4e:db:d8:bc:88:2d:b9:90:e9:51:2a:f2:b1:
bb:cf:09:82:23:f0:5d:1b:f4:26:28:03:10:1b:64:
42:a7:bd:4c:3c:7d:f1:be:bc:8e:e7:57:42:94:14:
81:1d:ca:43:34:83:e8:35:aa:09:b5:f9:57:aa:23:
f5:70:64:48:65:9f:57:fb:6e:55:9c:a2:cb:92:e7:
cb:d8:d3:b1:e1:7a:f2:bc:19:b2:11:8d:5c:fb:fa:
1e:f8:1a:c1:53:5e:3f:7b:f2:04:57:9d:0a:0f:13:
3f:8b:92:0e:2a:11:36:21:69:3b:04:1b:99:d4:a2:
f4:bb:78:10:6c:92:12:66:7c:b0:4b:a4:f8:c8:cc:
35:66:40:f5:7b:0c:3b:ac:48:89:5f:c7:94:09:16:
db:8b:23:98:36:8c:d1:98:57:46:29:bf:7a:bc:0d:
27:b9:b5:8e:8d:da:13:57:7d:e9:9f:13:fa:bb:67:
65:1e:3f:7c:f1:11:db:48:10:7f:55:91:a1:06:2d:
45:19:28:89:58:4a:da:5e:28:0b:ea:43:f6:81:8f:
e3:4f:e6:67:b6:9e:a6:d6:b7:c6:8e:ee:a1:d5:61:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:E2:89:E3:39:38:33:F4:34:C3:93:EE:46:11:3A:AB:D9:04:2D
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:03:24:53:dc:5f:36:05:11:10:11:79:4c:0a:87:c8:52:
e1:96:1a:35:16:b9:c7:b8:b9:cf:e1:43:41:5e:1b:84:b4:0c:
5d:59:d7:18:db:4d:51:93:e8:68:88:a1:8e:fa:f4:91:2d:90:
7a:02:a1:46:84:38:a6:91:5d:77:08:0f:f7:3c:67:4e:c3:11:
a6:2e:34:bc:c8:e2:31:64:d4:d3:b3:09:46:40:34:30:a8:78:
dd:ac:c7:22:40:21:b8:6c:80:bb:3e:4a:1b:40:5e:2e:ab:12:
d8:0a:73:29:41:e2:97:33:2c:03:b4:69:ec:91:ba:8f:a7:e3:
60:74:69:f6:53:de:a9:d4:5a:8a:97:8e:00:19:26:be:20:73:
1b:d0:57:78:03:01:98:b0:72:dd:4a:fc:d6:60:6c:f6:5a:df:
07:8c:95:d6:1d:7b:18:21:ea:06:09:ae:99:2c:22:6d:42:81:
94:3b:18:15:e7:55:74:c0:3c:ea:0b:8d:1e:5b:ef:1a:fe:90:
a0:a7:c2:98:9b:e1:40:6a:03:a4:2e:79:50:d0:86:23:57:08:
ec:06:09:e0:c0:27:c2:ce:48:b4:19:72:c4:4c:d1:b0:74:93:
8f:18:84:dc:fa:d1:95:c6:ee:5f:08:66:16:7c:17:86:d0:c8:
80:db:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:20 2025 by rpki-client