Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: vtjLJaUOqC+sXIhBBTkqgAXk+CsY1OXL9On7BOg/oUA=
Subject key identifier: 31:86:9F:29:12:42:C7:0F:54:D8:EE:B9:8E:D3:A7:B6:5D:32:73:4D
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 0198D515EDF0380DF8E6D34CD8F53CA46D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0DCC
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: fwnQ7pawetbWpYxDDRj8wgUGNV5tjymAnp1p7AqEUzo=)
2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ed:f0:38:0d:f8:e6:d3:4c:d8:f5:3c:a4:6d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=31869f291242c70f54d8eeb98ed3a7b65d32734d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:40:a9:90:34:67:84:89:28:94:b7:02:11:
50:3a:e7:94:e0:95:1d:82:d3:3b:fd:19:28:20:48:
ca:aa:2e:54:60:73:81:f7:56:f7:65:51:e2:d8:03:
ef:50:9e:e2:64:da:10:4e:35:96:54:d9:c0:6e:ee:
0f:7a:ea:52:c4:68:63:58:d9:77:01:41:64:4c:8d:
2a:c3:83:a2:b1:e4:21:39:ff:f4:33:e9:df:d5:28:
42:a9:2e:22:ac:50:d4:08:87:e7:25:1a:ba:70:ec:
7c:a7:9a:ab:ee:63:84:54:d0:0d:41:bf:f2:fc:ec:
6e:4e:f4:ea:94:fa:e2:2c:08:b2:28:5c:30:7c:48:
93:df:31:50:67:75:d7:be:a7:8a:00:ef:ef:29:6a:
2c:81:34:f4:95:6f:74:38:9a:10:03:5c:21:81:14:
c7:51:03:d8:54:39:a1:6e:54:5c:62:52:24:af:97:
c6:12:3e:ac:d9:bc:3a:57:51:59:aa:d0:fd:1d:7b:
4f:d5:6e:db:5f:d6:8c:86:a2:00:50:f3:51:86:4c:
bf:c1:03:18:aa:1e:19:64:9e:a5:d4:5e:7d:40:12:
84:cd:b1:a2:94:8d:ff:20:76:96:bd:21:24:ad:af:
c8:12:e4:10:6f:93:a7:2f:b0:9f:a0:9f:7b:bd:a6:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:9F:29:12:42:C7:0F:54:D8:EE:B9:8E:D3:A7:B6:5D:32:73:4D
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:b9:5f:85:10:f3:b1:29:7a:d0:37:78:27:94:b4:4e:18:
5d:c2:ab:1c:22:11:66:14:a8:52:08:6e:24:ca:09:5d:35:0a:
ec:0f:31:df:c4:d2:4e:11:46:74:a7:cd:5f:75:00:00:98:2f:
45:40:b1:5e:d3:b0:18:57:b7:65:4a:b6:db:2c:4a:b8:c3:74:
49:b8:75:c0:9a:88:7b:e3:44:f4:15:c7:a0:bf:05:34:da:e4:
80:67:37:6f:d9:2f:91:6a:ed:e6:48:c8:71:ac:fb:13:2e:17:
a7:fb:b8:1c:a3:59:97:ca:c3:8c:e9:06:e8:ba:4a:2a:c2:1e:
11:b7:a3:3d:7f:ba:88:ef:9a:07:a5:c8:54:87:71:81:0d:95:
53:3f:2f:56:de:32:04:90:e1:93:d0:3d:b1:6e:41:a9:ee:f5:
eb:b7:26:58:b1:3b:52:44:22:2a:66:e0:aa:a0:6d:22:23:18:
d1:3a:d2:40:54:dc:08:fe:c8:8b:cc:64:69:40:96:ec:cb:ab:
20:63:fd:19:fc:e4:fd:63:1b:a1:46:15:f7:26:9c:42:5f:95:
9e:3e:14:64:06:2f:62:40:1b:c8:12:df:94:0d:52:50:2f:5d:
18:b3:f5:ed:12:e3:a9:9f:2a:5f:40:ac:a5:cd:5e:46:10:29:
d2:84:bc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:08 2025 by rpki-client