Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier: T5HYIu9sOOgnk7FgOV9n704zgP3rJknmoG4mnXHgNkw=
Subject key identifier: 53:90:01:71:31:E6:F5:8D:9B:57:DB:1B:16:A0:36:78:D9:10:E3:CB
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 01987E9C808E58342C02B5454E4D32B97705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number: 0D12
Signing time: Wed 06 Aug 2025 09:00:42 +0000
Manifest this update: Wed 06 Aug 2025 09:00:42 +0000
Manifest next update: Thu 07 Aug 2025 09:00:42 +0000
Files and hashes: 1: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (hash: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=)
2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: uPD4/XdIi66aN2dwQZnbWklcLUhTxBwPZWrdGXWFLIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:80:8e:58:34:2c:02:b5:45:4e:4d:32:b9:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: Aug 6 09:00:42 2025 GMT
Not After : Aug 7 09:00:42 2025 GMT
Subject: CN=5390017131e6f58d9b57db1b16a03678d910e3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:aa:79:55:9d:bb:1c:6c:3e:70:fd:9d:af:37:
b7:c1:82:21:be:3b:57:6b:bb:53:90:dc:22:bf:6d:
ef:ae:e2:8b:8c:29:c5:a9:6b:cb:c7:50:69:97:6a:
62:31:d0:72:08:d0:6f:08:03:4d:96:ad:ed:83:01:
6e:73:8e:de:ee:60:ff:c2:eb:8a:c3:37:87:bd:3f:
0c:01:d0:7e:93:35:90:fb:00:99:0b:c6:41:7e:6a:
9a:f3:f8:31:c1:6f:5b:e4:2b:ba:ed:30:e9:ca:1c:
10:ba:18:21:78:64:0e:8c:ad:b8:94:38:62:21:4c:
8f:65:12:db:f2:cc:4f:8d:df:41:d5:6e:ca:73:72:
11:bd:2f:cf:55:1e:1f:6e:c7:36:66:5c:d8:09:6b:
5f:c2:8c:e7:c4:51:84:c3:35:45:ee:fa:33:8b:ab:
22:31:0f:c6:0a:7a:68:c5:09:d8:05:59:d5:24:db:
c7:56:b0:74:80:c7:d8:09:e0:58:f9:11:3e:42:31:
2e:52:4a:6e:d2:86:f6:37:1f:96:57:0e:4b:e4:a7:
40:85:36:ce:d0:c1:29:a1:3d:a5:9f:74:d4:a4:6d:
cb:c9:be:f8:30:a8:8d:f4:60:4c:e0:b8:db:71:ad:
79:27:f9:a0:f7:33:6a:1f:de:44:9f:1f:d7:d7:cd:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:90:01:71:31:E6:F5:8D:9B:57:DB:1B:16:A0:36:78:D9:10:E3:CB
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:84:ce:05:b7:52:36:68:63:f0:d9:c6:ce:7b:a9:05:8f:11:
3d:2f:3e:9b:14:99:4a:87:20:2c:44:1d:4c:5e:a6:5a:c1:a2:
31:5c:00:3c:24:e2:06:51:1c:4f:34:e2:96:96:bd:13:3e:95:
22:b5:8a:df:2e:46:66:f1:5d:0b:ba:34:e3:83:74:34:bd:7d:
65:af:de:4b:f5:95:a6:3b:d7:08:2f:87:49:31:42:bc:29:4e:
e8:22:88:74:3b:a6:a0:67:9d:c3:21:26:4f:65:6d:8e:14:2d:
85:bb:95:d8:0e:32:af:02:26:95:1d:90:92:0d:58:c8:05:93:
38:28:0a:4e:da:32:3d:c8:03:ad:d5:4d:e2:6d:fa:ed:ac:ec:
98:e2:0a:8b:25:b4:76:7d:bb:64:47:8f:21:56:20:55:b8:ff:
eb:39:81:56:c7:54:cb:eb:c9:4f:0a:d0:a9:fa:08:91:6b:9d:
06:32:e3:7a:f4:34:1c:c1:78:b6:00:9e:80:e1:9b:f3:3a:b8:
37:0e:c0:af:22:06:a1:6e:9f:e8:aa:16:7d:8f:32:31:a9:98:
e0:c2:8b:2d:a5:a6:02:8f:fa:73:e2:2a:0f:1f:55:ee:15:a8:
60:88:5b:ba:b9:28:e2:d1:06:ce:26:30:5a:14:84:31:af:34:
c2:ad:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:40 2025 by rpki-client