Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: 6EsvjOM0h6zNWkz5893WPJbWBEv618xMHMhIQFwabQU=
Subject key identifier: FB:B3:CD:48:D5:46:B4:98:5A:1F:0B:26:75:45:E8:79:06:96:A9:C7
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 0198D583E433E167689B6CF8D8AF54D99FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 12D6
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: 6WAck7F7sxmlP6+4P5twRBPF1g23ANzSNF8/mioyMb4=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e4:33:e1:67:68:9b:6c:f8:d8:af:54:d9:9f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=fbb3cd48d546b4985a1f0b267545e8790696a9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:c2:11:0e:5b:64:03:ab:b5:fe:d1:2d:79:
74:a0:16:94:4e:92:a1:b9:71:1e:31:72:b6:ce:c7:
d2:a1:33:79:ac:9e:eb:9d:69:9f:28:f9:a0:c8:33:
39:9b:d5:0b:0f:42:72:8d:fd:80:9c:69:02:aa:7b:
11:f9:07:52:1a:fb:e0:f3:af:3f:0d:05:2e:39:0c:
64:6d:ce:5f:49:21:09:4e:9a:44:cc:78:ef:29:6b:
76:ed:f5:c9:f6:10:58:7e:2e:8c:5f:62:d1:8b:60:
01:d6:49:74:67:e6:26:a0:83:00:fe:52:15:94:2c:
26:fc:23:fc:05:61:89:d0:af:f2:e0:93:2f:37:7b:
b7:59:0e:23:18:8b:87:ce:4e:42:3e:4d:c5:a3:86:
e8:3f:b2:99:30:95:da:e9:bb:66:4b:a1:ba:34:89:
b5:ed:14:6b:76:a8:e3:99:8b:fb:0e:c5:5d:13:19:
b5:98:3f:dd:33:35:3b:b9:ad:1a:98:00:56:b7:ce:
1b:09:41:ac:54:4b:0a:64:00:82:fb:e9:62:70:27:
d2:17:c7:bc:f2:48:07:a5:51:17:1a:97:2d:99:a6:
6c:5e:01:c8:e1:62:27:f3:7b:48:fc:10:70:f8:90:
77:14:1c:e7:62:e4:f3:c2:bf:2a:c7:73:03:44:29:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:CD:48:D5:46:B4:98:5A:1F:0B:26:75:45:E8:79:06:96:A9:C7
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:50:cd:e7:cc:0b:5c:81:13:c3:2e:22:d5:46:f8:25:ea:41:
32:f6:28:7d:9e:67:96:f6:8d:0c:90:32:2d:20:d3:a6:91:06:
c8:e5:43:1a:a2:5f:14:84:34:1f:75:77:cb:ca:3a:f7:0f:fc:
f1:fe:ae:44:f6:2b:6c:9d:61:3e:76:60:37:a6:d8:cd:36:24:
e9:06:83:b7:af:96:bf:d7:64:e3:54:f1:3f:95:d8:b7:25:06:
f2:4d:34:ab:f4:32:b0:36:00:66:c1:0a:b9:4e:95:76:03:19:
dc:ba:4f:b3:0b:07:0e:d7:b7:55:7e:7f:f4:ac:e7:e2:63:9d:
b5:8e:ed:8b:20:3f:a2:52:fa:76:03:75:7d:e5:5e:e5:1b:4a:
76:a5:9a:eb:ac:e4:72:84:ac:ff:46:81:ff:e0:d2:d4:86:28:
dd:81:a2:27:85:fb:4a:b9:b6:bf:55:70:9d:d7:cb:9c:c1:4e:
79:16:3a:d9:69:95:cb:fd:a1:f1:be:c6:c5:cf:39:45:70:5c:
51:17:5e:e8:62:4a:8a:da:78:97:0e:19:65:f0:f5:44:eb:af:
d7:61:88:b3:42:78:a5:8c:a2:ea:17:99:a0:76:53:ac:62:5b:
99:8b:d9:4a:56:16:56:91:21:23:e4:df:ae:79:79:3a:c9:6e:
8e:09:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:40 2025 by rpki-client