Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: wg48fuDJ/73kCz6E2ilODNeNSWIEfpIPb0DCbQ0o5Z0=
Subject key identifier: 1A:DE:73:4B:F1:6E:DA:9A:A3:B8:EF:C7:33:B7:CD:7C:A3:82:0F:C8
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 0198A04EBF8A6C2DA769CF52341BD3833A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0E90
Signing time: Tue 12 Aug 2025 22:02:52 +0000
Manifest this update: Tue 12 Aug 2025 22:02:52 +0000
Manifest next update: Wed 13 Aug 2025 22:02:52 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: sPF1FvI66Kpo8d8+ex8gRLu0gzl6c8dhitCUI0JTGtw=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:bf:8a:6c:2d:a7:69:cf:52:34:1b:d3:83:3a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Aug 12 22:02:52 2025 GMT
Not After : Aug 13 22:02:52 2025 GMT
Subject: CN=1ade734bf16eda9aa3b8efc733b7cd7ca3820fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:c6:a8:a2:6d:56:3b:69:0d:db:34:30:cb:
3b:b0:82:c6:27:fe:c3:64:e4:21:fa:92:9b:da:13:
e9:a6:5e:dc:ec:84:43:67:75:7b:73:54:24:68:e5:
73:ba:03:20:ad:f7:23:e4:2b:e7:e3:da:b0:89:df:
39:5d:f9:32:80:b3:e0:b5:29:f8:4b:38:76:60:58:
95:21:46:1e:52:be:cf:5c:0f:d9:6c:3b:02:fc:2a:
fc:dc:1d:cc:3f:0b:39:a2:5f:7f:33:8b:dc:fb:68:
ec:f8:a6:c5:96:05:77:8a:49:3c:f0:aa:02:8a:25:
cf:b5:c8:87:0b:7c:ac:79:23:98:0d:c9:fc:e6:b0:
79:01:8b:cc:b6:92:ac:ed:5a:06:65:e2:b1:db:36:
f0:b1:4a:7b:3a:41:7f:19:67:0d:8a:1b:1e:62:84:
9f:69:79:df:47:f8:f5:68:4a:8d:3b:36:fa:ad:b7:
c9:69:c4:28:d5:cf:fc:b5:a3:a9:c7:59:70:51:c9:
19:68:46:95:d9:07:02:af:78:c6:e0:2f:76:3d:7e:
c4:1c:21:03:70:6e:e7:00:ec:2c:00:75:61:0b:87:
71:79:bf:d8:da:a8:b9:b8:ff:95:c8:66:58:b3:4f:
1c:3b:89:7f:4e:c3:a3:ba:9a:c5:e5:38:bd:70:8f:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:73:4B:F1:6E:DA:9A:A3:B8:EF:C7:33:B7:CD:7C:A3:82:0F:C8
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8f:50:77:7e:2f:af:71:03:d0:a9:cf:00:79:87:66:09:f8:
d9:70:e5:3d:77:a8:f3:6d:59:a8:f1:70:48:65:66:2b:39:01:
52:b3:a7:50:87:0c:21:06:51:43:e1:36:19:eb:0f:55:a3:5c:
99:a5:15:ec:7b:78:73:bb:c9:01:18:a9:e3:ac:03:ae:3d:c2:
f8:78:77:33:83:80:e2:e3:7e:ae:4e:1a:d7:9e:2c:ee:b3:b6:
c9:0e:4a:b6:a2:b3:32:23:df:69:86:80:25:13:51:10:b0:76:
f4:ae:69:f6:7c:f0:b2:71:98:a5:14:d9:b6:20:6b:b0:b4:e9:
99:49:b7:1a:b7:15:25:b2:26:f5:a3:7e:7f:7a:fb:59:ec:40:
93:9b:34:d9:23:37:f3:af:aa:42:91:96:0b:84:ec:59:e4:77:
72:ba:ba:bf:30:f5:db:58:0e:9e:a4:fa:1f:24:7f:c4:61:fe:
df:72:35:3e:6a:69:ea:39:fc:d7:9e:9d:36:e7:a2:b5:21:47:
ed:f6:99:e8:d3:a5:3b:51:67:0f:ef:ba:04:5d:32:92:7d:cf:
dd:22:90:55:f4:11:12:46:3d:aa:9a:4a:12:ac:02:13:fa:6a:
82:94:4d:c7:0b:a8:94:82:4f:19:3e:87:6b:da:85:14:6f:c6:
29:23:4f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:15 2025 by rpki-client