Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
File: hkl2gukwfEaHk1AIFzFH0TKijGQ.mft (raw, json)
Hash identifier: IqHbpepfWck09BnLjIEFZMQ4oTBLLInSnKhwMZdYVAk=
Subject key identifier: 36:26:95:57:46:01:10:CC:5A:87:C9:07:B8:E2:DE:C6:95:0B:AD:EF
Authority key identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
Certificate issuer: /CN=86497682e9307c4687935008173147d132a28c64
Certificate serial: 01988DA200ABE59F500F2DC79A23D97A4EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
Manifest number: 11F1
Signing time: Sat 09 Aug 2025 07:01:00 +0000
Manifest this update: Sat 09 Aug 2025 07:01:00 +0000
Manifest next update: Sun 10 Aug 2025 07:01:00 +0000
Files and hashes: 1: BO3NQSZ4VV4Ik2Xgm0m98xsd8Po.roa (hash: zwimVc6fdY5wMVCx/Pfq1/VebJPothW3yZi++5QRFE0=)
2: hkl2gukwfEaHk1AIFzFH0TKijGQ.crl (hash: 7FML+xtLS3T3IZ98mGoBuyPkotkc/zMgEf4xyH7xTx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:00:ab:e5:9f:50:0f:2d:c7:9a:23:d9:7a:4e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86497682e9307c4687935008173147d132a28c64
Validity
Not Before: Aug 9 07:01:00 2025 GMT
Not After : Aug 10 07:01:00 2025 GMT
Subject: CN=36269557460110cc5a87c907b8e2dec6950badef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:24:45:31:a5:42:b2:1f:c6:ca:ff:93:2b:
35:35:e8:a0:31:eb:07:3d:08:2a:f9:33:fa:df:6c:
10:cf:c2:53:49:95:1b:1e:93:3c:4b:a3:19:b8:aa:
8d:29:b5:54:d8:33:d5:b6:00:02:b4:34:79:a8:cd:
de:f9:4c:d9:28:19:10:3b:86:ad:33:1f:e4:81:ea:
76:30:bb:52:4f:14:00:62:38:de:9a:5b:cb:8b:b7:
91:bc:36:9e:53:0f:52:6a:16:08:13:e1:1f:de:d5:
96:0e:c0:a5:d3:47:3f:50:65:84:4c:10:36:5a:51:
40:92:df:6b:b1:88:2e:70:12:fe:e1:49:b5:d0:14:
ac:9e:91:ae:56:53:a2:ea:47:f7:b1:57:8c:ef:ab:
49:36:77:c5:45:c7:56:df:31:ec:ae:1d:a7:1e:e5:
7f:14:ce:91:89:22:cb:e4:e0:ee:e9:0e:80:bd:ca:
45:33:13:0f:61:76:88:8e:8b:c2:ba:02:81:57:66:
31:6f:ef:fb:e0:22:ac:fd:b1:46:f1:63:6d:80:db:
65:9c:23:2e:2c:49:41:55:cc:6e:da:c3:91:6b:db:
b6:23:92:42:e4:de:2e:e6:e3:3a:d6:8e:1e:43:ba:
8d:f6:3f:ce:ab:10:7e:86:52:1e:21:77:ee:2a:69:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:95:57:46:01:10:CC:5A:87:C9:07:B8:E2:DE:C6:95:0B:AD:EF
X509v3 Authority Key Identifier:
keyid:86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:13:ee:ec:30:86:22:13:20:bb:9e:85:00:e9:77:d8:c3:76:
9f:2a:4f:af:09:ee:43:aa:5f:4c:ac:70:79:e0:aa:ce:94:82:
f1:43:82:8e:80:f9:f8:dc:60:9e:77:35:29:28:9c:a0:54:b1:
bb:50:6a:c4:7d:bb:49:c9:39:80:fb:0d:24:de:6b:6e:3d:64:
e9:83:e0:32:7e:f8:c9:30:c9:7e:aa:c0:d1:89:c4:24:0a:ee:
31:fe:84:4c:27:10:d0:6b:50:49:9e:43:f1:00:ec:79:5e:a8:
43:9a:e2:2b:26:5f:5a:2d:08:72:43:98:3b:58:3b:8c:e4:8a:
7d:6c:2f:bd:63:17:18:b5:45:3d:b2:14:94:f2:d8:3b:1b:4b:
4f:7e:be:d2:05:03:6e:75:9b:9e:70:54:d8:5d:c5:6d:fe:dd:
1d:95:5d:d8:ab:c7:45:a3:c8:42:6e:59:fc:54:e4:ff:e7:c9:
46:0c:82:cc:74:99:76:60:83:4a:79:2a:cd:5d:0d:84:4d:e3:
08:62:85:33:cc:f8:81:04:4d:8d:10:8b:a4:89:d0:47:59:62:
3e:83:86:e7:7b:fc:90:b7:b4:68:ad:ae:ad:ec:e8:8f:cc:58:
2d:a7:50:82:2e:6c:0d:ff:2d:a1:de:2a:0c:c6:61:d5:e5:db:
b4:45:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:44 2025 by rpki-client