Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier: 56ojmLThC1uNqasyevoEs5luI8XAtnaOoADFUoobVl0=
Subject key identifier: 8B:0E:FB:5F:57:1D:73:BF:46:DF:26:B0:10:10:BB:13:9B:9D:CF:D1
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 0198D583B3664E9D74E2D86327E1D2B899A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number: 0D3F
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (hash: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=)
2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: UVT5lhbNZFSxY4NLP4TcCAXGgZWtBDl7rzva/SbxSu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b3:66:4e:9d:74:e2:d8:63:27:e1:d2:b8:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=8b0efb5f571d73bf46df26b01010bb139b9dcfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:26:86:a1:d0:f4:1b:71:6b:93:60:2a:ed:
91:23:57:58:e3:29:69:b9:47:65:52:58:e7:1b:ac:
41:fa:d6:f6:76:85:4d:4c:84:23:8d:64:c2:3e:a8:
dd:18:0b:2a:7e:b3:fc:6b:ed:99:1b:9d:0a:10:8c:
aa:97:4f:f6:47:1f:bc:d4:86:11:34:31:36:d8:97:
d9:00:36:96:c1:77:2e:3f:6c:c7:ce:2a:4d:c1:f5:
9f:19:5d:49:51:d8:80:bf:86:71:71:b2:a5:ec:56:
84:92:3d:1d:fc:01:19:ad:28:f5:d6:ce:62:f6:80:
18:6f:37:ce:a7:51:34:3b:77:22:01:1e:e2:bc:26:
3a:f7:2d:4b:a9:74:b6:c3:4a:ed:8e:ff:e5:8e:a2:
db:b1:f6:41:5e:b2:2e:2a:0c:f6:e7:fa:ed:f7:c2:
c6:bd:e8:05:77:d3:3f:59:59:28:cc:3a:57:99:6a:
da:0e:00:b8:69:6b:6c:af:34:03:98:2f:a0:9e:09:
22:91:44:e9:92:ff:4c:e6:2d:b4:94:6f:13:a1:50:
4c:86:25:c4:83:5e:e4:bb:b8:f8:81:1a:af:5a:f1:
c4:a9:f2:6a:f9:60:1e:7c:e0:7d:58:93:c0:c9:1e:
fe:fe:76:e4:b6:25:63:35:39:46:8b:95:15:ef:48:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:FB:5F:57:1D:73:BF:46:DF:26:B0:10:10:BB:13:9B:9D:CF:D1
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b3:1c:38:81:30:e8:86:44:d3:00:f6:9c:2b:9a:01:e4:f7:
7b:45:48:b7:e1:aa:50:dd:fb:b6:1c:38:0b:bc:6b:fa:f5:92:
f1:9b:9b:11:a5:6c:af:65:d2:7b:bd:49:9b:f2:e4:93:00:89:
31:04:70:95:7e:67:02:1e:0a:f4:46:06:72:55:2f:f6:ae:97:
91:61:f6:de:e9:0b:91:5f:2d:c3:56:a2:5c:21:ca:59:ae:1f:
77:bd:94:b2:11:b3:c6:7d:bf:a0:8e:67:dc:3b:0d:3a:80:12:
64:5e:65:c5:57:72:c3:7b:f4:c0:b5:46:3a:04:89:35:c4:7e:
4d:a7:98:1b:e6:74:14:11:c2:c2:30:3d:68:84:65:1f:8d:48:
8a:7c:77:a9:21:09:33:54:bb:3e:ae:11:2f:6b:fb:b8:68:5e:
89:e5:ca:b1:24:ee:e3:26:76:7e:27:a1:56:c8:3b:44:e4:90:
9d:01:eb:cc:e6:8c:f3:86:e8:8f:8b:2b:33:c5:e7:10:89:8b:
e6:b2:b6:13:07:fb:30:f5:1f:3b:af:33:04:da:c8:6f:73:b9:
76:ff:3b:3b:4e:bd:ea:2b:7c:7b:a0:8d:ed:77:ac:56:21:37:
a0:61:cc:cf:37:d9:41:a0:5e:d6:15:5d:e2:18:45:6d:3c:37:
e6:78:da:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:45 2025 by rpki-client