Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier: 4D3eJWkoKLMq6FAx+KF+Nxid4Um+mNAfsYj/SU6M68Y=
Subject key identifier: B4:31:78:A3:DF:A2:D3:B8:C7:DE:A3:A2:72:A3:05:57:1D:1A:6A:0E
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 0198D6609085DB6110DE6D871985643AEE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number: 0981
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: WKeLI2Sykevl64thhI+XVJBL9TJ/lIj+hUumVkwS5RE=)
2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:90:85:db:61:10:de:6d:87:19:85:64:3a:ee:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=b43178a3dfa2d3b8c7dea3a272a305571d1a6a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:c7:6a:1c:e6:f7:2c:74:14:e0:db:55:95:
ee:d8:91:c7:f1:5f:14:04:74:84:42:69:5a:2f:21:
f9:89:bf:c2:18:02:d9:a1:db:07:49:8e:cd:db:a5:
6a:df:86:1a:7a:59:0d:2f:9f:58:01:5b:ef:bf:d9:
83:b8:5d:7a:97:d6:e1:c2:c0:d9:d9:5f:53:a3:85:
39:e0:14:5d:ec:75:3e:48:b6:f7:89:a2:24:8b:60:
91:a5:c7:8c:ae:6b:5e:26:61:c6:2d:12:66:c9:16:
aa:d8:0b:cf:3c:d8:86:0c:e3:fa:86:54:f9:73:70:
17:a4:8d:f7:2a:3b:da:d6:de:a0:d4:ff:11:ad:f1:
3d:0e:92:44:fe:c1:f2:1c:a3:f6:63:39:cb:d3:a1:
b9:03:d4:f4:60:4a:7c:f5:e5:5e:0c:64:cc:84:18:
ef:a2:c7:74:39:b8:0d:d2:7a:b1:b7:d3:b4:8a:7a:
3b:85:38:37:77:25:32:78:be:72:a0:09:9c:09:3e:
a1:ff:fd:97:2c:a8:b2:8b:1b:89:64:96:74:bb:68:
9b:91:7e:2c:bc:47:ed:3a:91:a3:ac:64:48:a9:7b:
84:7b:2a:0f:3f:59:82:28:25:f8:2d:68:b6:e5:3d:
46:0b:64:af:22:4f:ca:82:34:be:fc:a9:ec:07:29:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:31:78:A3:DF:A2:D3:B8:C7:DE:A3:A2:72:A3:05:57:1D:1A:6A:0E
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:42:61:de:da:41:3d:00:98:e7:43:ab:1e:65:23:ba:9d:28:
74:ed:9b:a7:be:68:43:d3:ad:78:fa:9e:f4:1d:8e:ce:fd:41:
6d:84:f3:9d:a7:93:e3:61:83:a8:3f:72:ee:3a:87:4f:84:6e:
67:99:35:b7:88:0f:d1:ac:9c:91:c6:c4:b2:0e:68:23:57:d5:
f0:e2:ff:9f:8f:1e:80:6c:6b:cf:44:92:12:58:d7:8e:9a:c3:
37:ba:4c:5c:10:8b:c4:cc:53:4f:4b:02:69:fb:ca:88:41:e1:
fa:b2:fb:d0:f5:f9:33:81:99:35:0a:84:73:17:08:ab:72:c4:
c9:2a:f2:e2:e5:51:a7:ec:c2:b2:65:c6:af:23:96:67:78:ad:
61:97:58:83:15:d1:c2:82:1c:ce:dc:2a:bd:03:56:fc:07:78:
0a:4a:b0:5f:10:0a:44:45:e0:db:7d:e2:4d:c5:78:58:d8:cd:
e2:cb:fa:0f:34:40:f6:c3:d9:79:0a:38:29:ea:65:7d:b4:de:
ed:50:29:6e:08:00:ea:e7:cf:f3:06:48:93:b0:6c:5b:68:d2:
ed:87:2b:39:63:19:1b:66:9c:8a:0c:1a:eb:5e:62:96:c8:30:
af:12:b2:a3:dd:2f:57:94:60:7a:b8:db:5f:ef:8e:78:07:81:
cb:f3:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:46 2025 by rpki-client