Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier: bu2w3gIaO2i4E0MatCVFL6UYCI+1zFvErT+Oz1KdXFE=
Subject key identifier: 8F:C0:C9:BD:60:C3:EA:B7:DE:5B:42:57:62:35:42:50:5C:8D:3D:A5
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 0198D583A8D5443437C3C2DE6BB82286997B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number: 0CEA
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: PezE+i5/MuP+gkuGjDTi7tQo+5gsKB46QO/j3W4JFKk=)
2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a8:d5:44:34:37:c3:c2:de:6b:b8:22:86:99:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=8fc0c9bd60c3eab7de5b4257623542505c8d3da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:14:10:30:37:9a:7a:69:2a:ca:a1:de:ff:
0d:85:10:3e:ca:93:3a:62:ad:97:2e:f8:4e:01:24:
6d:db:ab:30:ae:77:af:02:50:35:99:c8:e6:0c:72:
31:70:99:cc:52:ce:0e:a6:61:95:59:7d:6e:a2:14:
19:c4:37:3e:c4:5e:68:d7:7a:36:16:43:59:a9:4f:
29:7d:95:a4:93:55:05:e1:ea:e1:45:ff:53:e7:5e:
22:52:53:05:22:7f:16:2e:e2:20:86:4b:54:f5:fe:
c0:24:f3:2a:db:d8:ad:25:f2:17:40:5d:64:1a:21:
e8:53:21:7c:60:8b:d5:42:f3:fa:0f:36:ac:67:12:
d9:4f:f8:4c:3e:33:e2:44:ae:a3:77:cf:47:ed:e9:
2c:21:d8:e4:57:df:14:ce:51:3a:1e:1e:36:5e:de:
0c:31:97:cb:1e:47:6b:2c:91:24:11:a3:26:ba:f3:
0b:e4:e0:4b:38:7a:d3:94:db:3d:21:96:cc:a4:9f:
12:e3:9e:7a:f4:28:0f:73:2b:7e:b7:c3:28:86:8e:
9b:b2:88:80:b7:ba:a0:4b:88:17:32:a7:4c:03:8c:
4e:2f:cb:05:63:83:7b:ee:95:97:9b:e8:be:76:52:
ec:e7:5e:92:64:90:47:05:35:bc:08:58:9b:4c:1a:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C0:C9:BD:60:C3:EA:B7:DE:5B:42:57:62:35:42:50:5C:8D:3D:A5
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5a:59:d8:bc:be:e5:89:c3:12:2f:f6:f7:45:51:d9:93:1f:
c4:98:ec:a4:88:d8:45:0a:79:e9:d7:dc:09:ff:0f:a2:fd:3e:
48:6d:67:b0:17:d7:df:86:ad:c1:0d:f4:c4:37:fb:e0:3e:63:
05:eb:6b:0a:b9:4b:4a:76:7b:36:8e:30:8c:72:5c:70:e2:4b:
22:80:e2:09:76:e0:fa:df:7e:70:a1:9c:07:69:54:44:1c:68:
9f:fd:81:38:1a:e4:5e:e7:e0:38:0f:28:76:4a:94:85:bc:af:
5a:28:30:01:a7:e6:dd:c7:c8:7a:19:e6:5f:da:55:3b:11:b2:
c3:58:16:00:0f:ca:09:eb:00:28:d5:f1:55:5a:91:09:3f:bb:
2c:66:0e:e7:66:c5:a5:dc:b5:55:0b:dc:59:11:db:75:5f:b5:
92:ec:1c:49:2e:56:ec:e4:bc:82:a2:50:32:79:be:b6:a9:45:
1b:a2:b4:f1:4d:d3:29:aa:06:ee:ec:78:8a:84:23:5e:9f:7c:
8a:b2:01:8a:16:31:5e:c7:53:8a:02:0c:35:1d:00:54:ac:21:
3a:1d:aa:bd:ec:8d:bb:50:37:a4:21:0c:09:52:82:65:5a:2c:
57:b5:0b:76:32:11:5f:c7:77:71:75:60:e8:a5:a8:da:88:61:
d9:9c:3d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:55 2025 by rpki-client