Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: qVMNcuHVJdJLha4JPnapGPGYVueEqRFywh5gc9mhEXc=
Subject key identifier: 1C:4C:D1:6B:13:3A:5C:DC:D6:4B:BF:2F:04:0D:81:30:D3:83:FB:4F
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 0198744FF8D4C94BB707EC9E0885EA5F7B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0278
Signing time: Mon 04 Aug 2025 09:00:54 +0000
Manifest this update: Mon 04 Aug 2025 09:00:54 +0000
Manifest next update: Tue 05 Aug 2025 09:00:54 +0000
Files and hashes: 1: 0tHvPtdsZRMSdECFrWywHEFzjJY.roa (hash: wDxCLikDUetb91mXxU1f33qmz0PqiuAAUobRz5+KIoE=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: 7ZfFAQh/I4UAtxfprqM8TacxjbXnRXrV6WsjsdXeB+Q=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f8:d4:c9:4b:b7:07:ec:9e:08:85:ea:5f:7b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Aug 4 09:00:54 2025 GMT
Not After : Aug 5 09:00:54 2025 GMT
Subject: CN=1c4cd16b133a5cdcd64bbf2f040d8130d383fb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:97:ee:b8:22:03:7a:5e:58:03:4a:ad:28:
35:20:f6:ec:ce:c6:dd:99:fd:c3:f6:f4:b5:bd:b6:
74:2b:31:83:59:e6:7e:4e:47:9a:97:e3:c6:a1:f8:
0e:7e:0c:12:c0:b6:88:82:09:ce:25:67:96:21:08:
64:e4:e1:ee:b9:d7:ae:a3:37:04:22:95:ea:54:21:
e6:ae:3f:1d:d5:82:b0:76:32:2c:c1:32:6d:41:9e:
1e:05:4e:e2:09:92:e1:61:89:c9:84:e6:b9:d1:4e:
af:94:ea:ae:ae:c8:e0:4f:dd:68:fc:3a:07:fc:e3:
2e:7b:2f:91:08:22:f7:27:6c:8a:4f:e4:22:75:24:
9c:73:d3:5e:89:47:96:6e:3d:51:51:d3:3c:5d:8f:
53:7b:3a:ec:52:16:ff:bf:d0:1a:a0:4a:9f:e2:e5:
a8:50:f5:c1:68:c2:ea:3e:5f:0c:b3:6d:47:05:fe:
b7:64:16:12:47:e6:f7:9a:48:8a:8c:83:54:62:39:
4d:4d:51:2b:fb:95:45:09:db:a6:9d:2e:e3:de:40:
6d:e5:4d:23:58:19:0a:2e:2c:f7:2c:0f:05:50:93:
8d:f2:da:ba:8f:eb:e2:12:ea:14:ff:73:b3:c9:44:
83:6f:80:ab:72:5b:e9:6f:48:c9:0d:03:f8:8b:cb:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:D1:6B:13:3A:5C:DC:D6:4B:BF:2F:04:0D:81:30:D3:83:FB:4F
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:72:68:cc:b3:91:81:c2:e9:55:ce:44:da:dc:e8:fa:2e:6f:
88:5f:0e:42:d2:86:92:a6:9e:65:3f:e6:81:3c:ca:1a:3d:01:
0c:9a:f8:2c:9d:2d:0f:fc:cd:66:1c:4d:62:c9:e4:06:e3:8c:
fe:9b:9f:16:18:01:ed:01:49:b1:50:4a:86:68:f8:43:c9:e3:
8e:40:57:93:63:59:8e:b3:5b:fd:68:84:e2:b2:12:9c:b5:b3:
a1:12:87:78:96:37:10:ca:8a:a1:bb:62:58:c2:c9:ba:c4:bf:
e7:c2:0a:72:02:7d:05:62:f8:6d:12:ec:c6:f1:ee:92:a3:38:
cc:de:5e:13:38:57:ad:2c:7e:c9:98:b8:1f:e6:e7:c6:48:79:
8a:f3:bc:3b:1f:af:e2:01:32:72:2b:e1:31:15:ed:8e:75:8a:
eb:3b:c1:be:7e:4c:43:18:d3:4e:cd:1b:01:c3:f3:63:45:33:
d3:3a:f6:3c:1f:51:62:48:04:35:9d:b4:f4:9a:85:1c:a1:93:
97:dc:41:c5:63:c4:aa:be:a6:9d:9a:6c:22:90:c9:4a:e0:58:
06:a5:c3:28:88:28:89:e3:d0:81:01:bd:53:f2:39:47:f0:d0:
22:af:12:9b:c2:5e:f7:1a:47:43:77:5d:e7:05:09:72:34:97:
0f:b1:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:35 2025 by rpki-client