Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier: bpfBYM5Szog0VD8xzWE9plRxEoN8BSJTtnApeheaIvQ=
Subject key identifier: 21:66:5D:D5:A7:14:A4:EC:45:84:0D:51:57:98:49:5B:D0:98:AC:E5
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 0198D6988EC0E1A43F274844703A857EBE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:58 +0000
Manifest this update: Sat 23 Aug 2025 11:02:58 +0000
Manifest next update: Sun 24 Aug 2025 11:02:58 +0000
Files and hashes: 1: Fxxp-LRkqvfLrMmhXHpze09Zypk.roa (hash: VeSras0PkAsQ1iWlGxVtQbCw1RAH/pLCo7L2bleBamo=)
2: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: tQhIaaUqse1pnHhHD6hRQHGaT7kKk/1nLXhLB47UlqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8e:c0:e1:a4:3f:27:48:44:70:3a:85:7e:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Aug 23 11:02:58 2025 GMT
Not After : Aug 24 11:02:58 2025 GMT
Subject: CN=21665dd5a714a4ec45840d515798495bd098ace5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:3f:e9:7f:d3:b2:ad:09:27:16:a0:e7:f0:
22:5e:01:32:db:df:28:a0:a4:ca:a0:1f:53:06:fb:
8e:28:57:e3:86:aa:7a:f7:59:d1:61:77:c6:df:99:
06:82:3c:4a:a9:fa:12:e9:c0:d3:1e:06:d1:12:ab:
9d:05:c1:dd:c2:08:b2:c3:6c:c5:63:be:81:67:ab:
25:df:21:d5:2c:3c:25:d8:8c:29:27:4f:41:4b:21:
35:71:70:b3:99:43:2a:70:1f:7d:10:61:2a:d5:d7:
ca:35:cf:f4:2c:b7:94:21:64:f3:1c:f5:41:39:79:
9b:f9:1b:c1:13:17:2e:5a:18:24:37:7f:d6:e0:71:
26:65:ad:b4:fe:fd:18:4d:4e:86:49:f0:ee:cf:cc:
67:ab:27:13:bc:6a:30:27:f1:e7:cb:ba:e3:3d:2b:
72:4e:6f:dd:fc:0e:fd:9d:07:e8:07:32:d9:24:9a:
4a:62:54:bf:81:79:1e:7a:ca:58:02:1c:de:0d:a6:
dc:53:06:a9:73:59:80:ef:ea:cc:33:ce:39:2c:f9:
bd:bd:96:a0:f3:ed:ee:89:a9:da:78:c6:60:61:9a:
12:f9:e8:9b:60:9e:8a:d5:5b:5a:36:da:8b:d2:16:
2c:18:16:39:4e:4a:03:19:19:00:83:62:59:c7:f7:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:66:5D:D5:A7:14:A4:EC:45:84:0D:51:57:98:49:5B:D0:98:AC:E5
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ef:85:4d:4f:22:03:d0:34:a9:92:6b:bc:c4:55:3b:91:8e:
81:70:1d:95:a9:1b:8a:42:4a:cf:1e:cb:f9:95:26:9d:52:b5:
b1:0d:c7:11:58:59:d0:9d:a8:54:f2:c2:de:44:3c:98:36:a7:
9a:d2:43:1e:57:8d:2b:88:5b:2b:cf:ee:2a:26:f8:8c:63:c6:
d2:c8:fd:87:b2:9e:da:3f:6e:71:2b:38:39:10:7e:69:59:e2:
01:17:7a:40:91:42:21:51:e0:61:fe:39:79:55:22:ca:cc:87:
32:58:5e:9b:f5:71:0b:81:f3:4a:e0:ec:b6:f5:4a:f2:97:a2:
b6:37:c3:e1:22:be:1e:45:e4:59:69:ac:ab:d2:f1:e8:87:c0:
d0:c5:6d:2b:e2:99:c2:5f:e6:f4:3a:5f:32:69:f8:95:ec:50:
c5:6c:29:17:91:1d:61:28:f5:66:1b:51:1e:cc:44:bc:93:03:
d8:72:da:86:54:5e:3f:2d:20:7d:b7:51:cd:1b:0e:99:70:74:
39:4c:94:33:b8:2b:3b:e8:8e:55:74:f8:29:bb:4c:86:60:20:
83:9b:cc:87:42:05:eb:67:18:6e:68:f4:32:59:1a:12:3f:38:
1e:38:e8:21:67:ea:c8:61:6b:a6:5b:93:0e:62:b3:52:38:62:
a6:38:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:24:49 2025 by rpki-client