
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: HMPGoTycGKZmZGEefgIbzFPiZkp33pBbQyZL7XmoHpc=
Subject key identifier: 4F:55:D3:51:AA:74:44:6E:1D:16:E0:C0:FA:F5:D4:51:A9:6E:92:F6
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 0198D5F18AAE2A8945E25538CF02FC2C5042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 13DA
Signing time: Sat 23 Aug 2025 08:00:33 +0000
Manifest this update: Sat 23 Aug 2025 08:00:33 +0000
Manifest next update: Sun 24 Aug 2025 08:00:33 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: fKgrSzK8j6wX/JIksuH6FYuEGdhJ6l12DrF+J2Uo8TQ=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8a:ae:2a:89:45:e2:55:38:cf:02:fc:2c:50:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Aug 23 08:00:33 2025 GMT
Not After : Aug 24 08:00:33 2025 GMT
Subject: CN=4f55d351aa74446e1d16e0c0faf5d451a96e92f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:f6:e1:59:a5:3d:5b:32:2b:06:87:00:58:
b0:e9:a7:2a:36:1f:3a:b8:ba:42:10:73:4f:21:b7:
0b:4f:11:cf:80:3c:18:70:ca:f7:f7:9e:f3:4c:26:
0a:48:a7:de:64:8c:1c:74:19:70:14:e0:cf:4e:23:
a6:6e:0a:35:3a:cc:b8:2a:3d:e7:b9:f6:ca:d4:ea:
e0:5b:ab:4c:df:aa:57:b4:f5:fd:72:7c:59:8f:fb:
e8:8c:19:18:02:70:39:2d:43:52:e7:0a:dc:de:c8:
70:42:2a:cc:84:fd:88:d7:3e:56:3a:9a:52:48:ef:
9c:e1:8e:b6:12:fb:55:ae:bf:b0:3a:6c:44:1f:29:
48:6f:57:91:d6:cd:fa:01:3a:f1:7b:33:7f:71:f1:
ef:0c:2b:5a:47:8a:42:c5:b6:82:6c:b5:18:7d:71:
9a:13:2d:9b:3a:5f:69:cc:fe:73:5c:ad:a5:fa:f7:
ad:cc:aa:11:96:ed:45:df:b7:6e:dd:51:08:35:f2:
ee:97:2e:38:a5:1f:0d:d2:c0:99:75:7b:3c:24:6c:
e4:f1:0c:c0:ba:e9:7e:af:46:e8:b8:7d:ec:65:a1:
e1:a8:ed:c8:62:4a:95:62:c5:76:dc:34:78:48:24:
f6:74:2a:da:81:a2:97:6e:a3:e9:d1:36:37:fb:14:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:55:D3:51:AA:74:44:6E:1D:16:E0:C0:FA:F5:D4:51:A9:6E:92:F6
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c1:da:a9:f5:dd:a2:a4:c3:28:2f:1a:fd:f4:94:d0:e9:5b:
d7:55:ec:f6:88:d3:c6:ca:88:18:0c:4b:f7:95:69:10:25:4b:
d9:46:8e:c1:f0:c2:31:fe:29:89:b6:3f:db:d5:de:1e:12:12:
8e:09:83:4e:63:b6:c8:01:49:44:af:99:ee:ff:9c:e2:14:0c:
77:ed:c9:91:99:36:4c:b5:f8:99:82:bc:ec:a4:c3:e5:fb:83:
26:b7:ee:6f:09:0f:b1:57:21:8d:4d:19:59:33:d3:18:2e:95:
5a:a4:8e:26:0f:29:b8:de:99:56:ce:cf:a8:42:39:3e:b4:07:
59:8a:f0:69:e1:92:7c:48:31:89:37:c0:49:5f:a3:7f:bc:d3:
8b:bc:8e:ba:04:10:68:b0:3b:cc:d8:d1:41:66:44:c7:3a:c0:
2d:61:b2:03:68:a6:b9:49:f6:65:a2:6f:0f:d3:94:69:68:61:
12:92:1e:13:a9:e6:ac:22:b7:de:46:28:e2:df:56:b3:fe:6f:
47:ae:cd:3c:c7:96:f0:83:60:94:de:ef:eb:89:6f:b1:dd:71:
bc:ae:13:58:6c:0e:dc:be:d0:41:24:e0:0b:ba:7d:60:46:52:
9f:89:97:1a:71:1c:0e:4a:69:25:08:cf:89:bb:11:b5:0e:70:
13:4f:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:30 2025 by rpki-client