Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json)
Hash identifier: lIODcdawmspLEG//jqGCkwxbJWwS9BuDvftYYetBp/o=
Subject key identifier: 04:E8:83:9F:54:F3:9E:60:AB:E1:12:75:4E:EC:3A:93:2C:BA:30:8E
Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Certificate serial: 0198A015958A535E5F711DDD3AE63B6B3BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
Manifest number: 60
Signing time: Tue 12 Aug 2025 21:00:25 +0000
Manifest this update: Tue 12 Aug 2025 21:00:25 +0000
Manifest next update: Wed 13 Aug 2025 21:00:25 +0000
Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: dPyEGEqdoEFYvZDepR89W8A6w2kJfRf8lwdEDogmiVg=)
2: fj04IAgRtLyt8FxauXRHzCCY2dM.roa (hash: RQPUjLROTiuPGUSBn8RZIchppB8l2w9Yk7LM8XCFoI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:15:95:8a:53:5e:5f:71:1d:dd:3a:e6:3b:6b:3b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Validity
Not Before: Aug 12 21:00:25 2025 GMT
Not After : Aug 13 21:00:25 2025 GMT
Subject: CN=04e8839f54f39e60abe112754eec3a932cba308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:78:ec:45:2e:7e:9f:25:85:d3:f2:0e:9f:
5e:83:1f:00:0a:99:ac:05:d0:c9:0f:a8:93:57:d0:
88:8d:a5:43:21:c7:ba:36:47:e0:8b:0f:fb:b9:59:
38:be:af:ea:a8:ab:ee:e3:cc:88:93:8c:56:c3:4a:
4c:33:e9:02:44:26:27:b9:33:05:33:4d:eb:9a:5e:
1f:92:cb:94:63:b4:6c:34:8d:ff:ae:b2:53:16:46:
f6:d3:c2:e3:5c:04:cf:86:2c:b9:a9:53:ef:bf:84:
99:77:74:c4:0c:ce:2d:e5:86:5f:33:f2:19:a9:72:
17:67:e9:1c:8b:f4:95:18:d8:a4:79:2f:18:8a:ba:
8a:c9:94:b8:71:83:ee:e8:b9:cd:ed:c4:0f:bc:77:
61:fc:95:a3:31:57:a5:f1:60:e9:d5:c7:43:0f:03:
3f:cc:5b:a2:2d:7f:ef:2a:d8:c1:b0:df:0c:19:75:
45:b0:bf:40:6c:45:36:5a:03:ae:37:ae:d2:a0:ea:
5c:b4:10:59:3e:5a:b8:2a:f8:45:df:f9:56:a0:e8:
82:29:8d:8c:74:23:e0:66:42:e2:fb:bb:8a:39:46:
5d:4d:40:ba:90:80:5f:a8:7a:04:df:34:05:60:f7:
77:a2:95:ba:6f:e2:ee:a1:e8:ed:74:e8:11:0a:5f:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E8:83:9F:54:F3:9E:60:AB:E1:12:75:4E:EC:3A:93:2C:BA:30:8E
X509v3 Authority Key Identifier:
keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:24:5b:2b:aa:95:24:f5:10:d1:91:bf:a5:ac:36:11:6f:84:
03:70:0c:f4:b0:5f:cc:a7:30:6e:19:f3:36:e5:a2:30:cc:c3:
f4:ea:a4:62:b9:0f:77:f7:4d:f5:49:41:57:96:f0:7b:1d:f5:
d6:f7:93:1f:ba:15:7d:3b:36:3a:1a:25:72:7f:b6:33:3e:80:
0e:84:ab:b7:f0:f2:a6:bf:60:44:4e:7d:b8:98:55:ae:3a:bb:
37:d1:88:df:5e:5d:79:b3:30:8b:e4:66:b8:1e:37:21:b3:19:
48:31:0e:5e:9c:6a:0d:4a:ee:d4:3e:b0:54:59:a3:b2:45:aa:
73:10:26:dc:c2:9b:d0:41:f3:86:71:0b:52:33:dd:f2:37:06:
76:e5:8d:d6:2f:79:70:08:c5:29:06:ab:9c:da:11:dc:3c:f0:
e5:ea:d2:1e:13:b5:1e:da:b6:ae:ca:98:57:8d:76:e3:62:f9:
3c:c8:29:51:f3:2a:1f:b1:0b:b2:f3:a3:bd:d1:05:3f:1c:94:
40:71:75:b3:e4:a8:fd:eb:b7:0f:10:96:63:ef:35:8e:05:73:
04:bb:9b:04:72:f5:7e:41:86:e4:0f:7c:83:21:7a:15:7c:fb:
f5:d4:1e:79:6d:ff:0b:6b:9d:cb:73:e2:c0:9a:63:cc:9e:17:
66:32:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:57:52 2025 by rpki-client