Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json)
Hash identifier: WeQ2vNgfCJnqXXpKtrZORbXTJ2UbI/H8AyfuzeKk8IE=
Subject key identifier: CB:A9:C8:73:49:9B:D3:A5:22:FB:D4:6B:C5:5F:01:87:34:1D:46:74
Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Certificate serial: 0198D4E02487B7D4D4D920188EB9AC95BEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
Manifest number: 0C77
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: oo32Gvd532oN6i3KuhgHy2E5BK7WnNOb+bBgX/cOdak=)
2: oaQkn5zr2sFy17og-aVMkuLXdds.roa (hash: VtZ3pTO5W1yzA+ps5HMSQhypm611YNtn0vckyLuCUAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:24:87:b7:d4:d4:d9:20:18:8e:b9:ac:95:be:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=cba9c873499bd3a522fbd46bc55f0187341d4674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:bb:f6:3e:25:a0:9f:4a:e5:0a:d1:b0:af:
ee:5d:f3:82:d1:d9:45:b1:97:d6:48:51:f9:90:8f:
8a:f7:ec:08:60:e6:35:37:82:e6:c5:b8:cb:5e:55:
3d:30:5b:49:72:70:13:47:23:93:9b:74:f6:de:d8:
0e:d8:41:bf:a8:f7:5a:33:0e:e3:4e:69:7b:8d:48:
7c:d0:ba:9c:8b:71:cb:c6:1b:7e:78:cc:43:43:d3:
f6:b3:1b:d3:05:78:03:f1:e1:da:93:93:ff:31:f7:
af:b5:3a:1e:a1:4a:b9:b9:95:7b:a9:e9:13:e3:a9:
cb:a8:ad:d4:ab:e8:0a:96:3b:10:61:5d:ef:ad:be:
aa:eb:c1:8b:a2:da:49:f9:14:8a:30:1d:9b:11:39:
da:86:a1:e9:c0:22:64:7e:62:0c:bc:bf:37:53:27:
ed:5a:33:32:7b:35:06:dc:e3:7b:a4:95:b7:84:53:
da:10:cf:66:42:fc:98:cf:1c:a2:c3:ab:52:73:28:
60:b0:85:ed:3c:ab:a5:47:2f:7e:91:3b:68:75:32:
ff:74:db:cc:c3:3d:2d:0f:2d:3a:7b:c7:d2:5c:e7:
07:ad:25:2f:0d:a2:db:8f:7f:92:b4:1a:1d:a7:d3:
61:da:68:f0:9e:1d:c3:27:04:0e:99:e4:82:09:d3:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:C8:73:49:9B:D3:A5:22:FB:D4:6B:C5:5F:01:87:34:1D:46:74
X509v3 Authority Key Identifier:
keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:02:ea:26:16:e1:a9:51:85:0c:03:fb:5e:57:ce:ad:47:cc:
0c:7c:4f:ed:f7:27:80:14:85:a6:e8:a2:b2:90:3b:db:3b:a8:
12:03:d7:fc:31:72:6a:12:2e:09:1a:5d:ee:12:58:e7:45:07:
03:ca:65:9c:fb:3c:f7:a9:5e:da:cc:0b:b1:da:3a:dc:5c:2a:
e0:a9:d7:c0:13:1a:d5:af:78:61:61:c0:b1:a7:cf:97:8a:cb:
58:b0:89:f0:ba:0e:00:82:8e:a4:a3:7c:79:ab:01:2e:87:fa:
fb:b5:8e:2d:ef:b5:11:bd:6f:c2:d2:9d:82:30:74:08:14:b9:
94:f7:de:10:51:6c:fe:7b:aa:89:33:50:2a:a6:27:bb:a0:ea:
87:e3:0b:27:4f:17:d1:e6:07:c8:33:7c:59:b9:c4:93:28:ea:
4d:1f:d5:9b:41:ae:b8:1f:8c:0c:8c:a2:03:3c:ea:a6:e3:cc:
84:60:51:b2:44:b7:45:05:84:4b:28:d9:94:02:0e:4d:f8:91:
59:12:3b:c3:1b:09:19:fd:72:9b:95:46:5f:6f:8c:06:05:f3:
a2:ad:21:c2:21:24:a3:88:fa:e1:19:68:6c:57:5a:99:78:ff:
3f:b9:5e:b6:85:e8:64:c7:34:2c:bc:4b:fc:c6:b1:4a:66:68:
2f:57:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:05 2025 by rpki-client