Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: zKUU5pL9t6BEwh2ideJd9tSWPlj4zT+mkYUfHYxEN3M=
Subject key identifier: 1C:D0:FE:FB:23:B4:CF:27:8E:F8:84:CA:80:E0:DD:4F:25:34:72:A7
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 01988B103FEC9F9668E973E4D7A0F66C4858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 0FB1
Signing time: Fri 08 Aug 2025 19:02:34 +0000
Manifest this update: Fri 08 Aug 2025 19:02:34 +0000
Manifest next update: Sat 09 Aug 2025 19:02:34 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: 2FfJ+dIhWSAAApC7bLGVSbZjsviHv1ZjjyxrBbN9Oy8=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:3f:ec:9f:96:68:e9:73:e4:d7:a0:f6:6c:48:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Aug 8 19:02:34 2025 GMT
Not After : Aug 9 19:02:34 2025 GMT
Subject: CN=1cd0fefb23b4cf278ef884ca80e0dd4f253472a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:99:31:9a:af:9d:e3:05:b6:2f:4a:fa:2d:
f1:0c:4c:a7:5e:fd:c1:9d:3e:78:f2:6d:e3:76:8e:
25:35:e7:05:c0:c4:fe:95:3e:57:d6:f4:99:53:e7:
d6:b6:de:cf:dc:db:44:a5:39:2b:8f:74:59:3f:98:
89:74:4b:0c:5f:71:79:41:4d:a2:fd:4a:1c:f6:d3:
d3:13:97:33:c7:bc:32:21:03:75:24:38:b3:91:b3:
3b:fd:78:8d:c2:89:1e:78:96:64:11:30:c3:f8:cd:
62:2a:38:a5:bf:fe:54:db:f8:52:ee:1d:31:0a:24:
1e:d7:38:51:51:69:94:d5:2d:dc:a6:f4:47:6e:0e:
95:dc:ee:1c:38:6a:13:d7:05:23:07:14:fb:6d:a3:
8d:90:88:5c:e2:3a:ec:f2:68:99:a5:e6:98:d5:5a:
82:ee:12:0a:39:6e:84:21:6a:ed:bc:45:db:00:4a:
a1:3d:0f:10:cf:f8:5e:58:a7:e6:51:d2:a5:58:dc:
e6:52:a5:bb:fa:b3:46:a0:94:a5:de:1a:b0:7b:c4:
ee:c1:46:47:a8:75:c5:4c:39:25:cd:5f:13:97:6a:
a7:93:ff:56:f3:b7:64:c4:8e:1d:24:03:1f:50:37:
0b:77:b0:12:69:ca:ad:f4:f9:d8:f8:5d:46:f6:49:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:FE:FB:23:B4:CF:27:8E:F8:84:CA:80:E0:DD:4F:25:34:72:A7
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cb:28:8f:9b:b1:c8:70:4e:1b:5a:fe:e2:ec:10:0c:5d:53:
43:25:7b:dc:d4:b7:e3:cd:6c:f0:7b:4c:ca:1e:b9:8f:84:ba:
77:e8:da:0d:75:53:01:43:4a:99:28:29:05:e0:f6:e0:86:a7:
31:b2:b2:f9:0d:00:4b:5e:2e:0d:df:5b:6e:99:cb:68:15:c6:
30:c3:1c:06:71:f6:25:5b:ae:1b:70:a3:4d:93:e4:a6:b7:5c:
48:67:94:06:c3:17:02:ec:04:05:8d:a4:68:c0:c4:81:a7:66:
6c:3a:e9:e7:af:86:05:ea:60:be:5a:b1:68:d8:df:20:7a:34:
3f:17:42:17:ae:0b:6e:91:f0:71:29:53:23:80:46:51:2a:c2:
bc:44:76:7b:64:cd:75:fd:23:e4:6d:f4:e4:b3:4d:d5:05:3f:
e2:3e:fb:f0:be:05:bf:88:57:89:54:58:f1:5a:8b:b2:c2:18:
4e:8a:88:ba:c3:f6:68:4d:21:37:b9:29:d0:a0:44:5b:df:c7:
24:75:bc:44:cb:0e:f5:95:01:22:13:f4:47:2b:aa:e7:c5:53:
b3:29:64:6a:11:00:ab:d5:ea:1d:ad:99:1e:da:14:f7:64:05:
cd:65:98:07:4f:37:0a:43:3d:2e:ae:86:d6:b9:f4:7b:ca:01:
64:e2:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:54 2025 by rpki-client