Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: oukrFj+V6r40AbAgQrND2wl3NxNN/uBYVrDoWmVt1EI=
Subject key identifier: 77:D4:E8:C8:60:4C:3D:9F:6A:27:35:88:F8:F6:DD:91:DD:44:60:D6
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 0198D5F1330595AC8BC37F405D05C9E03A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: /NsVza6IQMinDc6Wk+vRdd0Eh5If8zuNSdU46rWCkx0=)
2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:33:05:95:ac:8b:c3:7f:40:5d:05:c9:e0:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=77d4e8c8604c3d9f6a273588f8f6dd91dd4460d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:c8:ed:2b:29:83:ed:72:46:90:00:b6:00:
99:78:07:56:4f:77:65:37:b2:22:cb:18:f3:d6:5a:
df:63:f6:9f:7b:16:ad:d8:19:b7:f1:40:fa:9b:e5:
09:df:b4:77:30:93:1d:13:34:b9:5f:dd:3a:dd:5b:
df:5d:20:a7:be:df:02:52:84:e7:64:ad:97:40:f4:
2d:d0:70:14:46:11:ce:c2:96:4e:0a:fe:0f:ad:7a:
f3:01:1c:a8:66:b7:54:76:90:e0:9a:9c:91:10:5a:
03:77:33:6e:4b:ff:ac:1d:8f:5f:da:ae:15:cb:7e:
f3:cf:5f:0a:8f:1e:f9:31:85:87:7e:d7:e4:21:4c:
c6:de:98:c8:bb:c4:5c:d0:3d:36:8d:35:1a:56:c2:
8b:6f:8c:ab:c9:9f:c1:e8:48:e5:8b:6b:ac:30:db:
45:fd:04:8b:2a:3d:d3:0e:f9:ac:57:d1:c8:d1:04:
85:d9:59:83:24:55:eb:6f:11:c8:9f:27:f8:2a:00:
35:e6:18:a5:36:04:26:55:47:16:f7:d0:cb:5c:3a:
f4:3d:69:81:6b:9a:ae:01:31:33:e4:ed:9e:5d:f4:
48:c8:29:af:88:23:22:a4:73:f9:47:ac:c8:45:f8:
df:98:fa:c4:86:78:43:75:dd:71:16:b2:8b:12:e9:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:E8:C8:60:4C:3D:9F:6A:27:35:88:F8:F6:DD:91:DD:44:60:D6
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3d:57:eb:b5:ef:f6:7a:e4:e3:2f:af:ab:ed:2f:83:29:4c:
ff:ef:f4:15:3e:08:a2:d7:eb:bb:be:a3:13:6a:bb:5c:ca:ff:
d8:48:81:b3:49:f8:7f:d7:60:c7:76:26:07:12:38:e4:be:3a:
6f:c7:c0:31:0f:02:43:ca:71:e8:f9:7e:00:6d:79:56:f7:88:
f2:8d:b1:cd:14:c7:d8:46:6d:54:49:25:04:e3:71:35:68:cd:
98:2a:32:2b:ad:c6:8e:e0:8c:22:c6:d4:44:10:e2:14:06:03:
5a:1f:b7:f2:a0:8c:7f:46:24:57:71:01:7c:a2:fb:6f:6a:61:
ca:38:23:f6:02:af:8b:9f:0d:fe:f3:d5:a2:a7:fe:6b:7b:7b:
c7:e0:d5:d1:68:2a:e1:d9:55:64:3e:b3:ce:5f:f4:5b:84:b1:
4d:d0:9a:58:b2:c1:92:f1:81:31:97:d4:e8:bc:2a:25:5f:48:
09:a6:97:14:e3:8d:82:3a:0c:1a:af:6b:14:11:2e:b9:19:52:
d5:aa:04:76:8f:f2:eb:e1:fa:fc:bf:0b:63:8c:fd:ff:89:e7:
d9:75:c4:c6:f0:b4:08:aa:ec:92:a7:64:ac:ce:ee:13:02:0d:
f1:af:be:06:73:93:94:d7:1e:de:c0:11:be:76:fe:8d:77:3b:
2a:ed:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:24 2025 by rpki-client