Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: pS8dN414guMOh2yyMCq+jG9ROytjawOPoNzN/991OYE=
Subject key identifier: C9:F6:EA:C1:7E:54:C7:4A:BB:88:0F:22:8E:0F:9B:E0:2F:61:6C:90
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 01988A69B2A7D033CC835CFD68FD83F0ABFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 13F6
Signing time: Fri 08 Aug 2025 16:00:39 +0000
Manifest this update: Fri 08 Aug 2025 16:00:39 +0000
Manifest next update: Sat 09 Aug 2025 16:00:39 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: vqdDtHzIs12MkC1dStDLOoT1VYKycXGYYsgEHA41kpU=)
2: OLwYzj-fOtPupeVPjMakvIdCk14.roa (hash: w82sMMgD2hDeR96YGrYPpR7eSx7BTygOkVtPfhR7sSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:b2:a7:d0:33:cc:83:5c:fd:68:fd:83:f0:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Aug 8 16:00:39 2025 GMT
Not After : Aug 9 16:00:39 2025 GMT
Subject: CN=c9f6eac17e54c74abb880f228e0f9be02f616c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:17:9e:3e:14:cb:18:52:74:df:37:20:4e:
0d:59:c2:d6:ee:eb:63:9f:a5:cf:8c:78:15:17:7d:
10:06:b1:05:e5:87:e3:97:f7:47:1b:d3:2a:25:ed:
03:61:27:11:10:21:66:b8:d3:88:5d:81:94:b5:f6:
ed:14:ff:df:62:4d:89:62:25:d6:82:57:96:af:e8:
00:f4:51:ae:43:b5:a2:41:1b:53:1b:2a:bb:67:eb:
26:ae:0b:fb:71:94:1e:68:80:fa:c6:4a:52:27:c4:
05:49:e9:85:de:4a:21:ec:25:62:d5:3a:65:e0:72:
ae:5d:03:a9:79:50:ba:90:3c:46:69:02:20:f3:b1:
ea:cb:a7:5d:5b:bb:2b:3a:2f:d0:9c:0a:6c:d4:4a:
bc:0e:96:02:c5:87:d5:1f:30:0d:73:1e:b2:21:21:
dc:5e:c3:7b:26:3f:f3:25:a0:02:63:a4:a8:89:94:
27:86:07:a3:ff:ee:a1:a7:95:b3:d2:3a:3e:cf:35:
6f:61:61:5d:c7:ca:c5:5e:99:2f:b1:9d:f4:a2:26:
05:23:75:f1:0b:82:6e:a6:01:a3:71:fe:73:fc:78:
3f:04:71:ac:03:8a:16:70:6a:b3:fe:8e:cd:aa:b3:
ba:13:30:bc:4d:62:06:45:e4:32:66:53:cb:b4:ec:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:EA:C1:7E:54:C7:4A:BB:88:0F:22:8E:0F:9B:E0:2F:61:6C:90
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2f:9d:c1:d0:9a:fa:13:75:1d:17:aa:5f:ad:f0:54:9b:f5:
f3:56:55:bb:8f:0c:f2:c9:2a:1a:96:e3:78:49:24:18:30:7f:
fa:f2:ca:65:11:29:27:95:f7:b6:6c:d9:10:f8:e7:ea:76:bb:
27:d5:ec:25:c3:9e:11:e9:51:30:57:d2:e8:a8:df:d5:90:e5:
b8:68:55:e5:b2:5a:4d:09:e0:de:b2:90:3d:07:62:1d:36:8e:
a4:e0:8c:9e:18:30:91:a7:8b:49:18:a2:19:66:a1:54:be:6c:
ab:ee:e1:3a:55:cf:58:cf:69:13:d8:24:f2:b7:0f:bf:f6:83:
80:9b:8a:77:c8:7a:11:42:5f:fd:2d:09:73:90:be:d4:0c:27:
49:48:7d:3b:68:0d:72:d9:34:e0:be:96:07:20:49:1c:aa:6a:
d9:4e:c1:5f:1c:b0:e5:e3:62:ac:c8:33:34:98:0c:f0:0f:db:
07:63:aa:d6:20:dc:8b:72:96:cc:33:25:c7:07:cc:4b:51:f2:
c8:c6:1f:ab:27:ab:38:aa:92:44:42:17:41:80:38:06:56:b9:
ca:aa:ba:13:9a:30:13:ce:11:71:3f:bb:f1:23:dd:e6:0c:31:
de:8c:aa:ca:31:62:cd:1a:4f:f4:a1:df:6b:3d:cc:77:0d:b5:
6a:14:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:58 2025 by rpki-client