
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: eJd2W+PvJHBXb0U5BhItfMGehBjqSF7yv7jMRm4uW6g=
Subject key identifier: A6:83:52:62:96:C8:5D:08:F7:D8:6F:92:5C:42:9E:B0:E4:95:3C:BF
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 0198D66087301110048DC131B17637932FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: b60j4sFpcnuFykoGcWPdeiio0tnN56ZqciMe3MDvCq4=)
2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:87:30:11:10:04:8d:c1:31:b1:76:37:93:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=a683526296c85d08f7d86f925c429eb0e4953cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:d2:0a:6b:b8:54:77:cc:73:40:55:fb:a7:
03:c9:40:73:09:f6:6d:e3:98:cc:b0:6c:f8:4b:06:
2e:8c:59:32:c8:ab:2f:9e:80:d6:ed:52:02:76:30:
d4:6e:c0:de:cb:a0:5a:7b:9e:23:f9:45:2a:66:23:
87:48:0f:d1:77:a2:a8:4b:a5:b3:fe:ce:48:a1:0b:
87:bc:eb:5d:92:66:36:d1:10:11:70:01:73:dd:12:
04:7f:7b:6f:da:d9:e4:84:34:7f:e7:5a:bc:0c:55:
d8:6b:d4:0d:4b:cd:b3:b0:7d:ba:8b:52:b6:ee:11:
9f:fb:51:df:a1:59:45:0d:c2:d5:58:5a:84:8d:71:
71:ad:7e:73:0a:03:05:86:70:22:be:63:60:82:6d:
0d:3c:bc:78:f0:72:a1:7f:08:e3:04:e2:3c:33:fd:
76:d8:2e:bb:c2:bb:ff:f0:3f:d4:c5:dd:5f:0d:3e:
76:f2:1b:b8:33:43:71:25:00:c4:e2:c2:0a:99:0d:
75:66:12:a4:17:58:8e:c4:6d:8f:de:00:9c:b5:92:
ef:65:a8:cd:49:35:24:ad:f6:ae:ac:38:29:74:ef:
2d:7e:7c:0a:ce:cd:bd:fd:b7:b2:19:49:8c:38:1e:
db:f3:07:da:54:53:f7:ea:5f:6b:70:17:97:25:a7:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:83:52:62:96:C8:5D:08:F7:D8:6F:92:5C:42:9E:B0:E4:95:3C:BF
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:12:5d:71:51:ef:3e:1e:75:16:74:3e:6d:2d:97:75:a9:53:
18:af:e8:15:6f:26:a0:3e:f8:25:e6:e6:04:7a:0f:3c:32:fa:
7b:80:bb:f9:c5:0f:24:14:b4:ed:24:09:93:20:15:4f:96:ae:
7e:81:02:b8:0c:5b:fe:8c:81:ac:b3:70:7e:01:ab:c0:f8:30:
a0:1c:f1:9e:64:c8:a0:88:09:50:9e:35:37:58:bd:08:c4:7e:
4d:3f:7d:82:a4:fb:d9:7c:fd:23:5a:a2:2e:a3:9a:57:11:62:
ec:9b:42:55:2e:02:a9:8e:fa:1a:52:4b:ce:b3:2a:21:40:34:
ac:dc:2b:18:5d:f4:6c:e9:b0:3d:26:e8:21:a1:30:1f:e6:cf:
a1:dd:f3:b2:5d:52:e9:97:a7:62:2a:2e:ce:5c:5a:e7:38:c8:
8b:8c:cb:63:2e:1c:39:a9:cf:f6:6a:45:5a:fa:56:87:98:1a:
0e:e5:ff:3d:4f:0d:d6:10:7d:28:87:ce:83:01:38:21:e2:bb:
6e:a4:7e:b9:94:c0:99:07:96:d1:99:7e:44:46:1a:0c:63:9e:
5d:6d:08:9a:57:f8:e2:74:4e:29:25:2d:9d:21:4c:9b:7b:38:
d5:a0:67:42:7e:d8:ce:4c:75:c0:28:47:e0:0b:b4:ac:36:52:
97:32:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:02 2025 by rpki-client