Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: ymr4DOtfkCBYH5GNkBfHL1BOnkXE/XyuTpqyOd3A/fU=
Subject key identifier: 02:7D:01:40:3F:64:6F:CC:16:0F:E1:B6:4D:B4:C1:81:57:5A:F9:14
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 0198D65F769D17A8D0FD4BF3AC9503CB73FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 0FD8
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: iMqErF2a8LCEQ/zXlZ5yNLYlbTI43kdPiGOobMEFacE=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:76:9d:17:a8:d0:fd:4b:f3:ac:95:03:cb:73:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=027d01403f646fcc160fe1b64db4c181575af914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:23:9c:58:ea:26:2f:f5:5a:0a:05:c4:d1:
da:c8:62:33:e6:3e:96:b9:45:9f:42:f4:0e:3c:92:
07:9e:31:96:4c:7f:1c:6d:46:48:76:91:e4:33:af:
62:1c:ea:8b:8a:6c:7a:ef:0b:65:0d:54:34:bf:97:
d2:81:1d:20:01:3d:fe:17:27:5b:25:14:b2:4e:32:
e8:e4:a5:11:cf:67:bb:20:40:f7:ed:78:a4:f3:55:
54:5d:d2:58:6b:a0:c5:30:8f:e9:17:93:4b:fb:58:
fc:28:4a:96:3b:22:cd:2d:67:12:ae:23:9f:ae:74:
4b:71:c5:cd:d0:e1:03:67:4d:92:79:cd:6c:c0:c9:
08:34:4e:d6:82:da:b9:b5:fb:21:c9:c5:49:1b:23:
4b:07:2d:f8:c4:31:27:3d:0d:b6:d2:b2:37:38:9b:
fe:f8:e2:c7:48:63:ed:56:f1:ac:21:e2:00:07:99:
8b:8a:e7:c8:31:c9:41:32:55:d5:55:4f:a9:53:9d:
19:f7:ad:ac:d5:73:07:1c:fe:82:57:96:e2:4e:81:
a5:e1:25:01:ca:27:ba:d8:3c:40:29:ba:f4:3c:12:
e3:bf:3f:76:ad:68:1b:7a:61:d0:dc:b9:a1:fa:6f:
08:85:04:f5:81:36:6e:88:b9:e2:33:a0:bf:3a:63:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7D:01:40:3F:64:6F:CC:16:0F:E1:B6:4D:B4:C1:81:57:5A:F9:14
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:12:e0:2b:6e:6d:71:69:ce:2e:f2:8c:b3:62:98:c8:a4:20:
3a:34:c5:0b:bc:d2:de:2b:ab:45:e2:ef:10:3b:ec:e4:85:ee:
b8:6f:29:f0:1b:86:d0:f8:37:d6:92:3d:51:ba:7c:77:a2:ca:
34:a5:e2:bd:3f:47:9a:2f:d2:da:94:3c:a7:15:7b:e7:29:45:
ff:e8:b3:74:96:2d:38:b1:e2:d3:0b:8c:47:e1:07:0c:5d:a1:
2e:6d:60:58:86:9c:d4:d1:bb:03:33:a0:2b:bb:2f:9a:05:f8:
d6:d3:e8:50:09:cb:94:16:32:dd:38:5b:b1:d3:a0:b1:7e:31:
4b:03:3e:c6:43:1c:d0:fd:4e:18:d4:ae:20:6b:d5:8b:ad:ee:
06:28:c7:0b:2e:57:cb:2b:a3:6c:08:ca:97:76:e0:52:3d:d9:
b0:5e:23:f8:94:b7:04:71:57:bb:d7:9b:01:c6:b8:a7:8e:ac:
9f:0c:0c:1b:2b:68:fc:a2:c1:62:d9:d2:61:20:9c:fb:9a:41:
71:7e:db:fe:63:30:87:a2:bd:19:41:91:41:e3:59:dd:15:54:
0b:0a:c0:45:53:50:2a:ba:4f:db:b3:c7:2d:b8:9c:5d:f2:66:
d4:46:4f:e2:d1:55:70:ee:bd:91:3f:77:ab:b9:36:e5:12:75:
76:ef:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:33 2025 by rpki-client