Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
File: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft (raw, json)
Hash identifier: 4ZM9x6l2MpMA9SlGaD/kXj06hr/NspFOny/+FdhjKg4=
Subject key identifier: E4:02:7C:2C:8B:2B:8E:C2:37:3A:16:32:B1:30:11:81:7C:7A:BF:30
Authority key identifier: 86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
Certificate issuer: /CN=86c62c6962ea33029b480260989e1851c3252171
Certificate serial: 019894ED6E161BA599FC8BF8621DAB83322A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
Manifest number: 01B8
Signing time: Sun 10 Aug 2025 17:00:44 +0000
Manifest this update: Sun 10 Aug 2025 17:00:44 +0000
Manifest next update: Mon 11 Aug 2025 17:00:44 +0000
Files and hashes: 1: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl (hash: 853ImKYQQPwCkiq+0w1ryOTFmRgnGcLtpIB+UlcDquM=)
2: is7DkK81PMh7JZG7-MMXvu0KAJc.roa (hash: 5AryV0mRq30AxQOgSKEEzO83i7o3Dx9gPE05wVnrsnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:6e:16:1b:a5:99:fc:8b:f8:62:1d:ab:83:32:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c62c6962ea33029b480260989e1851c3252171
Validity
Not Before: Aug 10 17:00:44 2025 GMT
Not After : Aug 11 17:00:44 2025 GMT
Subject: CN=e4027c2c8b2b8ec2373a1632b13011817c7abf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:90:d6:1f:25:98:e5:9a:c5:07:05:78:e3:
08:9f:b3:fb:db:37:8f:77:80:8e:c3:ec:21:37:f9:
70:da:4f:e7:a2:75:17:fa:e7:9b:b7:2c:91:ad:4f:
88:04:08:3a:61:3a:c5:81:f3:15:f8:24:49:61:ae:
a2:5f:df:28:41:fc:78:ac:e0:07:e0:6d:37:ac:a3:
f0:e0:a7:b5:52:df:5c:8f:08:47:24:1d:88:03:ed:
3e:11:41:ed:13:a4:60:28:a3:e3:37:63:03:1a:0b:
14:a4:8b:e5:eb:60:fe:51:52:1d:cc:4f:30:35:62:
ec:89:3a:9c:52:68:85:e8:60:08:f3:3e:c6:b0:b7:
74:6c:91:1d:ce:fd:11:dd:c2:01:13:19:5f:54:7b:
25:19:e7:2e:54:9c:cd:65:63:9d:a7:19:2a:21:af:
25:fc:05:c9:8e:ba:de:93:43:de:40:0b:11:3c:40:
7d:28:50:ab:d2:85:f0:bf:bc:8b:9e:15:f5:9a:9f:
64:02:09:0d:d8:9d:72:b2:22:d0:2f:cb:9a:93:8c:
1d:94:c5:39:bc:bd:f4:73:4a:89:d3:2e:e6:f3:f8:
7e:f7:61:f5:a4:e0:27:21:4f:8a:8a:f1:8f:5c:01:
cb:7f:03:91:5a:c0:27:5f:ee:12:f1:80:cb:8f:1b:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:02:7C:2C:8B:2B:8E:C2:37:3A:16:32:B1:30:11:81:7C:7A:BF:30
X509v3 Authority Key Identifier:
keyid:86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d6:cc:c9:b9:6a:14:bc:8e:f6:0f:a5:d1:f5:d6:5f:4c:4a:
00:30:e6:b9:7d:99:88:b6:11:c6:e3:d6:3b:0d:e1:ad:08:68:
21:6c:62:2b:48:cd:b5:c9:9d:a8:9a:5e:41:5a:62:2f:e5:80:
fb:2b:bd:86:d3:6d:44:13:0b:4c:52:9f:b7:d3:da:67:46:8d:
03:c2:d9:0e:2f:62:ce:10:46:79:83:2f:97:54:db:ef:fc:d8:
b3:b2:ad:87:82:a2:f7:3f:db:6b:6c:c1:ad:df:cd:71:a0:63:
55:50:ed:31:83:be:e0:24:1c:f5:9d:44:c8:ae:a2:f9:0d:e0:
f9:8f:1a:93:9c:96:45:f5:3a:9c:be:2e:a9:49:7d:03:15:aa:
13:04:a5:7c:1b:a1:d1:1f:a3:9e:9b:de:ac:9e:c0:cf:c2:88:
69:7a:c9:81:44:99:6d:44:40:38:c3:e7:ac:b8:ff:6b:16:3f:
1b:c2:12:2b:98:f3:25:e5:b8:51:cc:38:56:6c:3d:73:2f:97:
7f:de:5c:a5:59:93:a8:84:99:02:4a:13:c5:b1:10:f0:7c:2a:
58:4d:e7:80:e7:fd:60:b2:16:e4:e6:97:82:1c:90:6e:aa:e6:
30:e6:8b:60:95:10:19:61:14:a8:48:d2:95:7e:90:3b:f5:09:
66:27:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:10 2025 by rpki-client