Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier: Jlc5lBasnBMPI4Vj80ppzMJTNiPBSt+5+s+EUHj4hr4=
Subject key identifier: D3:09:4C:1E:F5:CA:FF:B2:09:E1:91:A6:C1:85:6F:DF:38:6C:06:A5
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 0198D515D1392A3A29CA65795E5A11E4B9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number: 06A7
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=)
2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: v+Dehbnn65sBymA5ITi5jyXFSsSDCaukS0hPgAwiuTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d1:39:2a:3a:29:ca:65:79:5e:5a:11:e4:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=d3094c1ef5caffb209e191a6c1856fdf386c06a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d7:c3:c8:09:4e:a7:e8:af:aa:02:e8:bd:83:
b0:37:bd:80:67:5c:40:3f:bf:83:65:1a:08:4a:6d:
11:23:f7:77:5e:93:4b:fb:da:0e:4e:a3:57:e8:df:
cd:af:81:6a:69:ca:1b:b1:ec:66:7e:6c:4b:3e:af:
98:c9:0f:94:be:cc:03:b4:22:3f:a3:a1:91:2a:11:
70:9e:04:04:e2:3d:76:6d:1e:c3:2b:39:aa:5a:79:
5d:aa:54:69:23:ab:88:2f:3f:7a:6d:46:57:1a:ff:
ba:48:1d:82:23:71:0c:d1:0b:b7:1c:3b:d2:64:43:
aa:85:c7:03:e7:de:fc:0a:58:fd:5c:51:3b:79:e5:
f3:06:51:42:2a:19:1f:2c:39:e4:d1:b1:ec:5e:a8:
4b:ec:be:09:a5:5e:6e:7e:89:c5:0f:1b:39:dd:60:
f1:80:ce:79:bd:14:38:87:b8:98:de:4f:3c:ba:06:
63:5f:87:76:78:43:69:5c:5a:ed:4f:e6:0e:d5:61:
2b:ab:ca:8c:50:8c:fa:92:43:c8:64:fd:3f:9d:e9:
42:87:6b:b3:cc:74:f3:2b:00:b0:cf:86:0c:8a:35:
45:2c:9f:88:8f:f8:80:e6:09:66:c1:14:69:0b:53:
86:39:9a:6f:b1:88:44:1d:6f:43:73:de:be:43:ae:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:4C:1E:F5:CA:FF:B2:09:E1:91:A6:C1:85:6F:DF:38:6C:06:A5
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:aa:ff:cc:a0:88:a7:b3:94:93:85:9f:8a:f5:eb:ab:06:a3:
19:c6:9b:d3:d6:13:e9:8a:1d:13:4f:14:61:3c:85:49:95:32:
35:d5:ba:d0:5a:42:80:13:f6:cb:0d:6a:86:b9:53:13:2b:7f:
79:39:8e:83:ef:64:b3:e2:ae:43:96:64:6b:01:01:c1:6d:3a:
a5:8a:81:5b:d8:06:74:0d:bf:1e:93:69:6d:4d:f5:d5:d9:7e:
ff:40:35:06:dc:bc:c3:90:62:9c:b0:c4:67:41:07:32:b7:d3:
01:7c:e0:5f:7b:4b:b9:64:d7:c7:d2:1e:88:27:75:10:bc:39:
5d:7e:cf:85:6d:5e:5a:7f:02:25:5c:01:86:ad:1a:92:a1:bb:
5d:78:0f:57:45:fd:a5:74:73:c9:ca:86:77:e0:12:fc:d1:3f:
8f:a0:75:37:1a:18:3d:70:08:81:58:e9:e5:3a:ab:68:39:36:
ae:64:3e:f6:98:6d:ff:89:ae:62:1c:47:27:56:7c:73:80:f9:
e7:4c:d3:9f:f4:b9:54:f0:04:45:0b:46:03:ea:d6:79:20:4c:
19:23:cc:de:94:10:6c:c7:f5:bc:f9:84:8a:80:0e:2a:44:4b:
68:92:a9:38:99:e6:bf:17:5b:62:60:8f:ee:70:ad:14:e7:5d:
1b:cb:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:17 2025 by rpki-client