Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: 9j4RKJe31lvLQJD0cD5Tgqg1D8hxl+e3kDfOvKXTAZk=
Subject key identifier: 04:3E:E0:9F:8F:F0:A8:26:56:96:C6:45:D7:13:22:12:0D:33:48:2B
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 0198D5BC3A5E4834866A323B41805ACFDDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 01FE
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: jlWQ3FBHtCJl9u9ru7qpxOuoAeH93KkDr0IX5qNFLng=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3a:5e:48:34:86:6a:32:3b:41:80:5a:cf:dd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=043ee09f8ff0a8265696c645d71322120d33482b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:9b:6d:d3:1a:04:b3:b9:19:dc:52:fb:79:
68:1a:cf:c1:75:82:6c:04:56:cf:67:81:bf:4c:fd:
cc:45:e8:1c:fa:9f:94:ad:31:f6:5e:a9:56:ed:b3:
40:bc:c5:7c:2d:7c:31:3f:66:f0:02:44:0b:de:92:
84:8c:8e:16:6c:0f:21:e7:41:37:0d:0c:f2:20:96:
7a:40:3c:01:28:80:bd:90:98:30:18:70:3d:e6:95:
1c:ac:96:3a:7a:16:43:1e:60:a2:e4:e9:d0:2a:b2:
d8:bd:68:95:42:5a:ed:e4:c3:3f:e3:2f:bd:0e:e4:
bb:6b:d9:66:68:a6:ff:16:5f:9e:89:40:0c:27:03:
1c:83:14:cd:6a:11:29:2c:e0:15:a5:bc:4b:0d:4c:
bd:e7:7f:ae:5b:80:66:a6:6e:39:5b:d7:c3:8f:da:
a9:08:86:18:f2:5c:3d:18:5f:53:45:d6:f1:2d:ff:
7a:7b:ec:88:c6:2b:b4:d2:89:f9:82:38:00:6e:a9:
47:7b:8d:15:23:29:68:1c:77:65:01:6c:dd:2f:ed:
40:9a:d7:20:dc:fc:19:44:3f:0a:63:1f:c1:2a:52:
56:3e:2f:18:fb:5e:92:fd:52:fc:ef:ee:b0:41:5b:
55:d4:54:44:f3:bf:a5:59:29:d3:24:70:36:78:61:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:E0:9F:8F:F0:A8:26:56:96:C6:45:D7:13:22:12:0D:33:48:2B
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0d:ee:4d:2f:ac:cd:7e:e2:ca:02:b1:4a:a8:dc:5f:2f:08:
95:9f:19:75:11:ce:d7:4e:83:a1:35:6c:c7:bf:2b:95:b4:d2:
50:aa:08:e4:b6:8c:9f:30:ae:80:14:77:77:59:5c:a1:58:98:
d1:b6:52:b5:84:1d:40:22:a6:69:d4:4f:73:56:99:05:bf:e8:
83:20:d6:ba:e4:41:77:e4:ba:ec:c3:cd:a6:9d:8e:fd:06:81:
25:95:b9:43:b5:19:74:b4:e3:2b:77:d6:14:ec:dd:3c:4a:66:
fb:c8:d8:1e:19:f0:2e:c6:f0:a8:fb:98:29:17:a4:d7:bd:3b:
73:12:01:14:cc:ed:70:33:d6:21:16:f9:69:41:8f:6c:2f:06:
a5:5c:e3:5f:fa:88:30:4d:fa:59:62:56:fd:4c:40:fa:cb:c8:
21:ab:3e:fc:ff:71:37:a3:01:1e:ab:a4:ec:57:80:f8:d3:61:
1d:55:12:f2:3d:bf:05:f0:ec:2b:05:c0:5f:56:27:46:be:56:
b4:fb:c5:df:5c:d1:e3:64:2e:10:ee:7a:55:fe:18:71:c0:ef:
9f:84:8f:53:a7:00:65:ec:9e:84:29:ee:2f:de:79:7e:8e:41:
c0:45:36:ab:76:84:94:4b:aa:56:c1:4a:bc:f0:63:c0:02:3c:
a7:af:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:39 2025 by rpki-client