Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: 6NFumz+dPhRl4GwoylY4TGP3euswpb23hRKSd026DtQ=
Subject key identifier: D8:ED:CD:2F:0B:5A:F9:0F:F8:40:55:C3:D4:F2:A2:81:58:44:45:5F
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 0198D850B0250D91231A11C1F39AF5528B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 19:03:43 +0000
Manifest this update: Sat 23 Aug 2025 19:03:43 +0000
Manifest next update: Sun 24 Aug 2025 19:03:43 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: Fh4iJw9hDwt9oTqANZoLpqioiLkBmVAkzvLBtO7TZPM=)
2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:b0:25:0d:91:23:1a:11:c1:f3:9a:f5:52:8b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Aug 23 19:03:43 2025 GMT
Not After : Aug 24 19:03:43 2025 GMT
Subject: CN=d8edcd2f0b5af90ff84055c3d4f2a2815844455f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:47:4e:32:46:09:90:51:f3:da:67:67:4a:
13:d6:45:f9:fd:94:41:70:48:b5:74:83:77:04:75:
33:40:06:55:e5:91:ec:77:3d:6f:6b:35:fb:51:d2:
49:df:ef:7b:05:cf:46:6f:88:76:d3:18:bf:c1:4e:
64:9c:1e:8b:9e:0b:e6:f6:d2:84:98:57:cf:44:7a:
da:c7:92:73:68:cd:8a:43:0b:e8:c2:f1:19:73:16:
48:a0:0d:6c:e2:ca:b2:33:2b:b9:f3:9a:99:82:69:
e3:0d:fa:1a:85:66:63:1f:7b:b6:a5:dd:56:44:d8:
e6:34:52:88:3d:7e:35:7a:ae:6a:12:74:67:e7:5f:
a1:68:37:94:70:78:3c:2b:22:09:b4:32:30:fb:3e:
4c:f6:f1:54:ff:23:a0:e3:92:1b:24:42:f8:40:25:
c7:bf:51:28:ca:7d:28:9b:41:cc:ed:c8:e3:50:38:
90:e6:e0:ab:b1:0a:c5:04:07:26:95:fd:70:1a:7f:
ed:fc:b4:eb:27:da:12:3f:b7:22:5d:fe:54:ab:72:
49:26:ef:44:78:a4:64:f2:78:97:8f:af:35:7f:d5:
8e:a8:29:ac:9b:29:96:db:55:5b:85:38:b6:9a:33:
63:b9:f7:3e:98:f6:c9:7b:f8:f3:a7:27:d8:df:42:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:ED:CD:2F:0B:5A:F9:0F:F8:40:55:C3:D4:F2:A2:81:58:44:45:5F
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:21:a7:5f:7e:1a:4b:25:d6:4d:84:3e:12:6a:c6:a4:29:
5a:d2:ed:32:91:71:e5:86:4f:41:48:57:20:ca:ef:c0:30:2b:
23:24:c5:ec:e2:00:fb:a2:c4:96:ad:9a:75:5f:25:f9:6c:41:
85:47:e3:59:4a:d1:3c:b8:f1:20:71:2d:e1:b8:6d:21:35:21:
a7:ff:bf:5e:cf:d5:8b:52:e9:44:a5:b6:ae:6e:de:ee:ed:6e:
d6:cc:c6:e1:e9:9e:1e:65:a9:86:89:7c:e4:e6:d7:43:05:37:
d8:58:ee:9f:35:81:a2:7e:a0:ce:82:58:0e:5e:41:d6:e0:02:
47:fe:99:7c:29:9d:59:46:22:7d:81:0e:81:7d:78:33:d4:f5:
bb:0c:04:1f:78:2a:97:52:4b:41:92:85:c1:2a:63:27:37:e3:
c6:77:f9:8b:1c:4d:f8:56:7e:3c:14:1f:33:a0:7e:3e:46:b4:
e2:89:11:00:37:ce:af:df:5f:aa:9d:92:2d:23:29:79:68:3f:
74:06:1f:b5:c0:af:63:e5:ed:23:88:05:b1:0d:02:74:1e:c7:
21:6f:51:8d:f3:c6:9f:5d:07:b2:92:b0:82:3d:41:00:74:8f:
21:ed:ab:09:13:21:7f:09:57:82:ea:40:7f:4e:e7:e0:55:e5:
9c:ed:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:50:36 2025 by rpki-client