Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
File: hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json)
Hash identifier: XE3NSjIU/bD6wVJ1GWOVyUG5rIhir3gGPqCcJczFpyE=
Subject key identifier: C5:40:65:CE:AA:28:3E:2F:20:FD:3B:D5:AF:A5:EB:68:8D:1E:7B:27
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 0198D473851EEE3DCA11034C61F01D351F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
Manifest number: 11CF
Signing time: Sat 23 Aug 2025 01:03:17 +0000
Manifest this update: Sat 23 Aug 2025 01:03:17 +0000
Manifest next update: Sun 24 Aug 2025 01:03:17 +0000
Files and hashes: 1: AFoF1GuFzHjl8hWS56zz0OT3Bgg.roa (hash: tZKNbZDCtPOdNWQDTedTIFStwLgZ/2vtLmBHU+SWAQk=)
2: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: r2GL7a2o3biZqAqAAQUw0z+fH0+1uW+1RAtDXatd53o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:85:1e:ee:3d:ca:11:03:4c:61:f0:1d:35:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: Aug 23 01:03:17 2025 GMT
Not After : Aug 24 01:03:17 2025 GMT
Subject: CN=c54065ceaa283e2f20fd3bd5afa5eb688d1e7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:2c:ad:02:33:65:24:71:31:53:02:9c:64:
a2:61:01:5a:5b:57:e4:18:98:90:2f:67:15:4c:d5:
61:36:63:28:4c:94:d2:c2:96:34:3c:4a:0f:33:65:
f1:ef:35:19:b3:91:73:fa:62:f2:04:25:b4:12:97:
f1:26:ff:de:cb:f3:91:86:cf:de:2a:99:f6:19:a4:
86:d6:cb:79:60:16:4b:1b:c2:f4:dc:4c:4b:a9:01:
fb:19:2f:39:38:87:94:7b:43:82:88:f7:b5:30:98:
1b:62:93:e8:a9:03:d5:61:50:6c:73:81:e7:fb:ef:
2f:ae:21:78:51:6a:62:29:c1:79:25:89:3c:84:26:
ff:d9:dd:64:95:8f:6b:ad:36:ce:47:5c:aa:e8:63:
44:2c:58:d8:a0:3c:06:2c:b5:47:06:b4:c6:19:bb:
cd:20:ce:33:e7:7a:87:8a:1b:cf:ad:38:c6:1e:75:
9e:4f:12:91:3d:8b:7c:44:14:54:8e:56:4e:e4:ed:
a0:50:8c:59:a9:ea:07:5e:bc:e3:d7:d6:fc:62:93:
a1:96:8b:de:3e:fc:d4:cf:d1:a9:54:dc:5b:79:66:
54:0b:c0:b7:47:83:ba:e8:00:d5:53:12:69:12:92:
79:53:80:22:96:eb:58:80:49:3e:54:19:1e:7b:be:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:40:65:CE:AA:28:3E:2F:20:FD:3B:D5:AF:A5:EB:68:8D:1E:7B:27
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f7:e4:98:4b:8b:4a:52:a8:ce:61:9c:26:07:f0:70:85:a1:
50:78:41:82:f1:a0:50:25:1d:2f:f6:dc:37:e9:f4:65:d4:ac:
7e:77:e4:a4:cc:cf:c5:63:d1:2a:de:e8:db:43:b8:28:c6:0d:
27:e7:77:fc:5c:ef:71:2f:19:cc:4a:44:8b:1c:45:7f:fe:81:
ef:91:0a:13:07:f0:63:2b:46:f9:91:db:0e:18:2c:bc:03:12:
83:bf:8a:4f:a9:70:95:b5:1e:9d:1b:21:a8:62:5e:7e:b6:48:
7b:49:94:60:20:e4:ab:a3:5e:76:e4:6a:19:9a:b3:ba:c0:f8:
cd:59:67:96:29:6a:f0:81:4d:3c:36:5d:26:f5:f4:7a:0a:f8:
10:c8:57:03:9c:02:8b:5a:ca:bf:2b:7a:74:62:5f:28:47:9c:
a7:77:a8:fe:91:53:0e:57:e3:67:a6:2c:34:15:4d:ee:c5:08:
2f:5f:7f:b5:c8:b9:8c:f0:cb:1b:ed:2e:e5:b5:c2:b8:a6:2e:
49:ce:71:c3:27:fd:bd:a4:ab:5b:44:84:34:7f:3e:fa:35:0e:
2e:b8:be:89:d5:f9:47:e4:d4:6e:f7:da:da:8d:c9:8b:a1:b5:
d8:ed:71:2d:28:48:24:b5:e3:cc:ab:82:52:b7:e5:52:9b:0e:
b5:64:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:39 2025 by rpki-client