Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: 9tKHSpxCUcOFU37hlmNb9w3oPQwJWDXy2jIgFFmpXmk=
Subject key identifier: 45:2F:DA:8D:3F:8A:6C:B8:F1:D7:8E:D5:43:2E:12:47:7D:5F:69:85
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 0198960017E404597B166D19461F12C95789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0B4E
Signing time: Sun 10 Aug 2025 22:00:45 +0000
Manifest this update: Sun 10 Aug 2025 22:00:45 +0000
Manifest next update: Mon 11 Aug 2025 22:00:45 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: WzyL1bC7NwH4z/YNL9qqij22ulSxzYb77RWKktfX7G0=)
2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:17:e4:04:59:7b:16:6d:19:46:1f:12:c9:57:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Aug 10 22:00:45 2025 GMT
Not After : Aug 11 22:00:45 2025 GMT
Subject: CN=452fda8d3f8a6cb8f1d78ed5432e12477d5f6985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:a3:00:27:f7:a6:2c:a9:f2:f5:a1:0e:4b:
91:2f:6f:f8:6d:c3:ac:5f:d7:39:96:a8:a5:ff:9e:
83:46:07:a5:a3:3f:09:cd:09:24:b9:a4:3c:c1:1d:
94:ef:b5:c0:73:ec:d5:5a:91:2b:75:bd:1c:09:90:
d9:a1:f3:e3:6f:ad:f0:2c:30:aa:3f:84:b5:ba:c4:
8c:21:15:79:d3:ec:d5:c8:bd:ed:83:8b:66:86:82:
5a:4f:a4:a6:77:1a:8a:85:6f:61:a5:16:ed:4f:06:
bc:c5:93:c9:b7:4e:24:41:94:c6:fd:26:4c:52:0f:
50:f6:61:25:5a:85:04:96:4c:55:9a:42:18:af:86:
c2:d0:2e:1e:e3:c9:36:e4:9c:84:e0:27:6a:66:26:
fb:5b:e4:e2:19:53:a5:6e:83:2c:dc:28:d5:e6:94:
26:6e:99:1f:15:f5:57:f1:f1:7c:42:22:e1:30:0d:
7a:d8:95:a1:c8:e5:54:a5:61:65:d4:de:80:b0:3b:
c0:87:84:8d:14:e9:cc:16:94:4d:68:27:a0:d3:f6:
74:f3:39:c8:11:a7:82:8c:58:b4:a2:c8:fd:04:d0:
9b:c3:39:63:46:92:0f:d5:6a:be:d2:be:83:3c:c6:
33:d4:e4:dc:dc:37:88:4a:d2:7f:89:4d:24:55:0b:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2F:DA:8D:3F:8A:6C:B8:F1:D7:8E:D5:43:2E:12:47:7D:5F:69:85
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d1:e2:62:b6:65:25:69:3b:f0:21:33:b6:85:90:79:c6:b0:
80:a4:51:e0:7a:fd:b0:1f:cb:8a:34:3f:12:64:72:7a:4a:c7:
8c:5f:85:84:46:54:e3:77:6b:b2:9f:d5:20:f2:b7:30:df:d5:
7a:b6:e4:32:14:54:50:36:d8:7b:ab:f7:a5:94:9f:27:40:cb:
35:5a:24:43:e0:f5:37:2a:61:0b:88:3e:1a:5b:28:27:4d:d9:
79:4e:60:b7:0c:64:72:20:b7:ed:2d:23:0b:ee:30:cd:8c:26:
b9:b3:64:cf:ef:9a:af:d4:b4:8d:60:19:1a:07:c3:5e:51:01:
11:3c:bc:20:d2:0f:dd:3a:7e:81:e0:47:5f:45:ae:1d:77:0f:
40:06:b8:c4:3d:55:e4:3b:be:42:7b:93:55:34:7f:14:a1:be:
a6:19:db:bc:c5:d3:32:41:b4:e3:6e:b9:03:00:a0:eb:a1:4a:
ff:5b:c2:1b:cb:87:87:c4:31:ff:b8:dc:65:35:95:7d:26:47:
5a:2b:f0:95:74:b3:1a:dc:68:4d:df:d2:14:50:40:08:b6:06:
fc:55:63:e2:93:27:8e:f3:bb:7f:e4:8f:33:40:2c:62:6b:24:
05:5c:d0:60:14:12:83:23:7e:1d:bb:d4:9f:30:1d:3b:57:aa:
8a:40:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:52 2025 by rpki-client