Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
File: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft (raw, json)
Hash identifier: Y4mx/UK9oP287WAmFmb+PwUKqHsyTfm+Gy2tejdsiek=
Subject key identifier: E1:33:85:7A:19:EA:CB:78:50:78:76:51:E4:73:AA:25:37:0D:0F:C2
Authority key identifier: 86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
Certificate issuer: /CN=86c62c6962ea33029b480260989e1851c3252171
Certificate serial: 0198D4A7CE67573F07B65E4A4949947DEC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
Manifest number: 01D9
Signing time: Sat 23 Aug 2025 02:00:23 +0000
Manifest this update: Sat 23 Aug 2025 02:00:23 +0000
Manifest next update: Sun 24 Aug 2025 02:00:23 +0000
Files and hashes: 1: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl (hash: I5J3RbHQO46soku9gqwitOBNGunavur+b+aEO4PYW/U=)
2: is7DkK81PMh7JZG7-MMXvu0KAJc.roa (hash: 5AryV0mRq30AxQOgSKEEzO83i7o3Dx9gPE05wVnrsnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ce:67:57:3f:07:b6:5e:4a:49:49:94:7d:ec:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c62c6962ea33029b480260989e1851c3252171
Validity
Not Before: Aug 23 02:00:23 2025 GMT
Not After : Aug 24 02:00:23 2025 GMT
Subject: CN=e133857a19eacb7850787651e473aa25370d0fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:bb:8e:cb:cb:28:5b:1d:88:15:ec:51:d6:
f0:2f:87:9f:64:e7:32:e0:a8:0b:8d:81:1b:c3:49:
45:f7:c1:25:1a:9f:2b:0e:19:cf:ff:b8:28:a7:5b:
6a:10:17:97:ff:6a:a8:b4:8e:42:15:29:a8:d7:a8:
d8:ef:d9:36:41:49:c1:00:51:10:25:25:f9:76:4e:
0c:92:79:ae:e3:b3:8d:cb:33:37:eb:b2:c7:33:7f:
97:e7:6d:2e:e6:00:08:21:d2:5f:41:18:0c:26:0b:
52:c4:2d:ef:bd:0d:42:3c:85:4c:5d:89:a9:d7:4f:
4b:23:bd:4f:bd:83:53:86:2c:a9:05:86:77:04:fc:
d7:ad:ba:a9:b3:0d:7e:f6:80:91:13:f3:7a:44:fa:
b5:e4:7f:dc:eb:a7:24:19:5c:bf:b2:72:dc:cd:a9:
1d:2d:1d:4b:88:1d:45:07:a4:8b:d0:43:b4:33:c8:
cc:ab:49:c4:70:13:5c:f6:03:71:a2:ce:fe:7d:0e:
f7:22:49:7a:a5:2a:2f:70:b7:e9:21:cf:3e:d0:4c:
ec:b3:72:53:4b:6d:01:3a:3b:58:9a:9f:fe:27:61:
37:52:40:c5:f3:8f:c5:42:da:a8:30:9f:7a:cc:fc:
61:f7:a2:62:3e:a5:9a:82:2d:71:28:35:b8:ad:d3:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:33:85:7A:19:EA:CB:78:50:78:76:51:E4:73:AA:25:37:0D:0F:C2
X509v3 Authority Key Identifier:
keyid:86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ad:8a:79:71:73:fd:5b:a4:5c:1e:57:bf:4d:dd:76:b2:a2:
40:29:dd:05:ce:2c:cf:e7:df:3c:ae:b2:81:c6:fb:98:4c:0d:
38:25:d0:bc:9b:2d:e2:16:08:fd:07:a7:ab:aa:fe:0f:8a:b2:
51:b9:2e:ba:ff:8b:ed:a9:a1:c0:d2:f9:8e:c6:7e:97:ec:39:
f3:37:22:15:c9:cc:b4:bf:2d:5f:d0:a7:94:59:c6:af:9d:59:
d1:96:56:10:3b:fe:52:82:9a:07:31:85:33:74:b0:72:a0:e7:
bc:ad:1b:8b:b7:01:7b:5e:6e:7f:81:29:e5:58:ac:52:9f:63:
f3:0b:e2:3d:1e:8d:41:39:e4:a3:cd:73:15:0d:93:4c:5a:20:
39:b6:99:47:f2:ea:57:ff:9a:74:5b:12:ec:7e:de:ac:17:6e:
9c:34:98:46:b1:07:af:de:f6:84:4c:02:11:eb:3f:65:b9:e0:
43:56:55:78:96:04:26:43:28:e9:ef:27:d3:f9:e3:e2:93:f3:
de:e7:c8:1d:1c:7b:2e:61:66:c3:01:bd:3b:3c:fe:5d:e6:58:
5e:77:7e:3a:4c:77:06:57:a4:8f:e4:64:24:e3:66:bb:03:55:
51:dc:c3:e2:54:4d:01:68:38:37:40:7b:d2:f4:ab:1c:78:21:
25:7f:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:17 2025 by rpki-client