Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: OkBvI8uHGiWSu8lJuVSv3RGGRcJqKOGGMofh4/2xHrQ=
Subject key identifier: 39:39:C3:28:2E:35:73:BF:6C:0E:85:32:82:15:1D:76:C9:8A:24:47
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 0198A23C904F705AA1D09FB6906D280DD909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: F4
Signing time: Wed 13 Aug 2025 07:02:14 +0000
Manifest this update: Wed 13 Aug 2025 07:02:14 +0000
Manifest next update: Thu 14 Aug 2025 07:02:14 +0000
Files and hashes: 1: GuJV6tWvMc7hiklHxH5EzaRwm8k.roa (hash: SFtJeLYX3k0Bqhlczs2KFJUiSZerZ8nM1VQXRCJtLKQ=)
2: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: WInc9WfswNGfiY4F99Cv67O+BvvtV+7guWx4sdPDEe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3c:90:4f:70:5a:a1:d0:9f:b6:90:6d:28:0d:d9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Aug 13 07:02:14 2025 GMT
Not After : Aug 14 07:02:14 2025 GMT
Subject: CN=3939c3282e3573bf6c0e853282151d76c98a2447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:fa:9f:92:14:9c:4e:da:99:35:7e:82:28:
2e:44:c5:57:a8:98:ae:60:db:6f:54:b9:42:d2:1f:
60:87:56:f9:b2:80:59:cd:33:6f:cf:d6:51:af:94:
8d:a1:4a:f4:8f:f1:67:e6:a0:5b:44:dd:69:b3:70:
d6:75:49:35:45:f0:14:9b:6f:6b:60:6c:63:12:5b:
04:88:84:d7:aa:d9:c1:a4:22:43:2e:3a:85:80:63:
df:a7:83:38:60:e8:ec:78:dd:3d:e6:fb:31:0b:fa:
dc:ac:58:cb:df:b9:91:5f:c2:9c:34:c2:02:f6:51:
16:ed:97:f4:eb:23:d3:de:fb:a3:cf:0f:dc:5a:ac:
d7:ff:37:a6:b6:b5:65:a7:99:fe:08:91:06:8c:b9:
3b:f0:cb:2b:d1:48:20:d0:7c:a1:c1:68:47:a5:e4:
46:de:20:db:c4:72:95:11:1e:83:5a:d0:65:00:21:
be:3b:36:bb:61:52:a8:c2:a5:05:d3:45:aa:ff:36:
a9:e6:20:bd:8c:3a:48:28:8b:27:6b:37:ee:e2:11:
f4:9e:04:e9:34:e4:a4:62:18:9e:5c:06:2b:99:23:
52:2a:de:d2:13:1f:64:f6:d7:2e:d8:db:16:6d:22:
eb:ee:1d:6a:13:11:ab:cf:65:f2:72:49:ed:79:69:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:C3:28:2E:35:73:BF:6C:0E:85:32:82:15:1D:76:C9:8A:24:47
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:18:3c:56:22:29:7d:70:e2:e2:8b:b5:98:9d:60:2b:ab:a4:
42:7d:fe:db:13:c9:23:4f:d2:d2:fe:1a:c1:8d:87:6e:67:57:
43:96:65:d8:59:2b:9f:81:a7:c3:ca:7d:23:46:2e:70:a8:d6:
34:c7:56:7a:d7:7e:08:22:57:1a:2f:34:b2:b3:11:3e:f6:89:
a0:0d:40:c1:7b:67:91:cf:2d:c3:d8:31:b2:62:bc:8b:4b:18:
c7:d7:f8:9b:81:b4:74:b8:78:d4:26:1b:a1:87:e4:dd:fd:98:
39:54:18:e7:19:1e:6a:82:2b:c5:42:8c:01:05:6f:df:c8:59:
4f:69:d7:1e:bd:de:94:ad:55:7d:0e:c7:dd:52:cf:fd:28:4f:
e0:68:43:14:cf:d3:6c:46:41:df:4a:fe:7c:68:fd:87:92:4f:
60:35:56:cc:2f:61:c0:a8:46:5d:94:d0:6b:4b:2c:57:50:6b:
cc:e2:88:94:63:4e:11:7b:82:7d:aa:3b:84:3a:29:bf:59:ab:
8c:5e:db:a3:8e:6d:44:ea:b0:80:97:22:16:82:1f:86:d1:b2:
c6:0f:b5:63:b9:1b:83:12:d6:b5:76:a3:27:f7:cd:f8:08:2e:
e4:b1:d8:01:f5:41:d5:2b:09:34:7e:cf:41:0d:8e:a9:d1:50:
56:5e:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:17 2025 by rpki-client