Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier: 6k9sGksmSpS/wKY+IwJ7yCruWv81+yRdFCOPp7S2OwY=
Subject key identifier: EF:5E:6D:AB:7E:D1:A6:7E:D8:E0:67:84:26:18:9F:0C:49:8D:7A:DF
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial: 01987AF7134E0689120DFA49F02778E2D3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number: 13D0
Signing time: Tue 05 Aug 2025 16:01:09 +0000
Manifest this update: Tue 05 Aug 2025 16:01:09 +0000
Manifest next update: Wed 06 Aug 2025 16:01:09 +0000
Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: IiSu0eAWIx4wMMzQiwnM1v0igkOmUecaWE4baHsQDP8=)
2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:13:4e:06:89:12:0d:fa:49:f0:27:78:e2:d3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Validity
Not Before: Aug 5 16:01:09 2025 GMT
Not After : Aug 6 16:01:09 2025 GMT
Subject: CN=ef5e6dab7ed1a67ed8e0678426189f0c498d7adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:f7:a5:d7:fc:ab:53:a4:5a:b2:fe:b7:1c:
a3:32:66:18:c2:b1:51:8e:6b:65:3e:e5:bd:96:ba:
69:83:e5:f6:ce:22:58:16:2c:6a:15:56:86:87:9e:
51:83:ea:13:98:cf:03:ee:77:53:bc:b3:25:9e:64:
79:99:13:d1:f3:a0:e7:e3:4c:ca:4c:5f:1a:e6:fa:
8e:c6:79:16:70:91:6a:8d:61:0a:bc:78:f2:05:70:
7d:8d:5c:09:13:11:84:7d:d7:60:48:cf:2e:f2:0f:
4c:73:65:00:f7:54:b8:34:6d:b4:f6:d7:81:56:df:
e8:ab:e9:25:fd:e9:3e:3e:65:87:2c:15:13:e6:e7:
3f:6f:f8:63:3e:b9:a8:dd:16:a3:2b:44:cb:6e:76:
9a:40:f6:4f:2a:39:00:de:5e:ff:50:6e:a6:04:56:
7f:17:6a:96:36:bf:30:fd:59:eb:51:bc:e4:11:b6:
30:ad:d7:4b:ed:21:0b:33:fe:06:fb:1c:a5:7d:d8:
96:c8:95:53:93:d3:b1:17:d1:59:8e:82:0f:92:7c:
09:95:ec:9b:c2:47:fa:9c:29:90:98:57:23:10:0c:
be:08:c3:c2:c0:b8:27:24:c4:3d:cb:35:6e:0f:dd:
2d:1f:48:ae:7e:af:b4:f3:81:1c:ef:9c:b4:b6:b4:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5E:6D:AB:7E:D1:A6:7E:D8:E0:67:84:26:18:9F:0C:49:8D:7A:DF
X509v3 Authority Key Identifier:
keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c6:92:e8:99:ae:36:88:9f:42:b7:4f:1c:bd:6c:60:2c:fa:
53:0b:02:f7:c4:e1:c1:1c:b2:06:62:d7:36:9d:e4:d6:13:6a:
e4:e5:25:f3:b9:16:a6:7a:2e:e5:d1:af:56:c3:d0:d5:5c:de:
01:60:78:06:a0:3c:f5:d3:44:4f:88:bd:7d:c8:e1:70:17:63:
25:fd:a2:f7:b0:99:fb:16:e3:ec:82:5f:2e:f8:11:90:c6:57:
e7:d5:bc:48:82:71:71:34:ea:55:e3:6f:7a:74:42:cd:ab:16:
05:d0:13:67:97:d7:2c:db:db:03:75:07:b4:11:fe:6d:2c:9d:
c1:7f:9f:17:c8:09:b0:01:64:5f:8e:4b:81:a8:69:c2:0c:51:
9e:9f:fa:7e:f0:96:57:cc:3c:0b:eb:3b:72:98:6d:b0:fb:38:
c7:b6:c7:0a:9a:2a:0b:44:b8:b4:3a:55:d5:ef:8c:47:45:88:
d8:9d:21:da:42:41:0d:f0:da:2f:8e:b4:b0:7b:29:7b:d3:4a:
81:de:25:02:5e:81:da:0f:4c:c3:cd:6d:3d:f1:57:48:cd:0d:
07:73:71:d7:68:f4:90:8a:d9:05:e4:af:c5:92:2b:04:3b:d9:
45:c3:ee:80:cb:fe:32:1f:62:23:e8:4d:4d:97:da:23:0d:25:
9d:d3:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:14:46 2025 by rpki-client