Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: 6lT8/n8IkNTi+5UYD+Gto6PnViO6GENHmRTo1ll/wGM=
Subject key identifier: B8:7E:56:D8:E0:58:6C:4D:60:2C:4C:0C:3E:C1:95:56:B7:8B:DF:D4
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019880F9169271A06B7DDC4C708D768762DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 058E
Signing time: Wed 06 Aug 2025 20:01:04 +0000
Manifest this update: Wed 06 Aug 2025 20:01:04 +0000
Manifest next update: Thu 07 Aug 2025 20:01:04 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: WuS9xTmCcxpnZNY7UE+QxeKEFcjFqPDeI/5BGuwgbkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:16:92:71:a0:6b:7d:dc:4c:70:8d:76:87:62:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Aug 6 20:01:04 2025 GMT
Not After : Aug 7 20:01:04 2025 GMT
Subject: CN=b87e56d8e0586c4d602c4c0c3ec19556b78bdfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:44:2f:2a:21:a3:aa:dd:51:ec:bd:e4:64:
35:0b:22:3c:0c:9c:17:35:f0:9b:f8:5e:6b:03:26:
0f:ba:15:41:16:c1:ac:5b:78:d6:c2:a4:e8:7a:17:
af:12:09:90:e2:bf:63:c8:06:84:62:c0:f2:69:47:
e5:00:e4:79:1d:9d:90:d5:3d:50:82:89:67:26:af:
90:d4:b2:55:c1:76:06:39:c2:b5:7a:d5:dc:2d:19:
1d:e5:22:97:63:1f:f3:ba:52:16:e6:33:08:df:29:
05:da:fc:c4:29:7f:ff:b0:1a:73:c8:86:9b:72:90:
e1:29:2c:f8:85:c0:21:71:37:ca:3c:6d:6b:68:16:
0f:2d:c2:c7:17:10:c3:4f:02:26:ce:05:0f:5b:7d:
f8:fb:9f:ee:3b:7a:05:2a:e7:06:b7:97:28:7a:69:
75:26:94:9d:ce:15:52:91:75:51:03:32:27:46:88:
f2:ef:58:74:bb:10:bc:c9:94:18:26:ba:3f:f8:61:
70:b7:1b:01:18:f6:4f:2d:2f:66:ab:22:ea:9f:9e:
27:4a:b9:5d:3d:22:3d:0f:42:6b:1f:11:3d:af:c4:
4c:49:cd:9a:c4:1c:a2:94:e7:7e:11:50:e8:45:da:
99:87:71:f3:ab:ad:9c:11:8d:32:7e:8b:cd:fa:6a:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7E:56:D8:E0:58:6C:4D:60:2C:4C:0C:3E:C1:95:56:B7:8B:DF:D4
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:68:47:f5:5c:5d:34:35:00:fb:23:a4:cc:37:1f:29:ad:
ca:40:93:98:9a:d9:35:b9:a8:aa:48:93:d9:ca:e7:d0:13:73:
3b:5c:56:39:69:e6:ab:0f:19:1b:bc:0b:f7:0a:62:23:40:3e:
82:36:85:64:32:db:c6:14:ff:00:95:7a:8b:da:72:4c:a3:b1:
51:12:58:52:78:5d:b2:46:3c:f3:a1:7a:df:53:4e:68:53:58:
32:bf:ac:f5:85:d1:fe:9f:0e:5c:bf:ea:b0:57:60:90:52:a3:
42:6a:14:e5:94:e0:ba:66:64:27:da:6e:02:3c:29:66:fb:00:
0a:e6:90:d7:4d:bf:23:56:16:8c:36:f6:c5:7f:85:b7:bf:32:
39:f6:0c:e2:08:be:9a:88:d6:5c:69:e5:ed:25:25:ee:fb:92:
ce:73:37:64:61:ae:76:8f:77:31:d8:11:bb:c8:f3:97:f7:60:
bf:41:8c:6a:bf:71:c2:15:e5:4c:7d:02:96:69:af:b9:68:b5:
f9:fb:2f:02:18:87:68:ac:2b:ea:99:4c:e4:3b:6a:21:3b:eb:
9e:4b:21:b0:7a:bc:ae:c3:ed:cd:ab:15:b8:ab:1f:48:bf:7b:
f3:e1:f1:46:b3:44:79:a3:24:4b:f5:65:5a:0a:97:6a:68:37:
07:93:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:24 2025 by rpki-client