Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: boPLXbVmkaxg9vpG2HnF6fstuhkrXW8CFrhFcKYQXrM=
Subject key identifier: 5A:ED:33:63:23:5E:08:DE:A8:37:01:77:DA:1C:66:E1:FA:13:43:CB
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 0198D472FE0A4F91C88962BB93B2D4A40CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: 010E
Signing time: Sat 23 Aug 2025 01:02:42 +0000
Manifest this update: Sat 23 Aug 2025 01:02:42 +0000
Manifest next update: Sun 24 Aug 2025 01:02:42 +0000
Files and hashes: 1: GuJV6tWvMc7hiklHxH5EzaRwm8k.roa (hash: SFtJeLYX3k0Bqhlczs2KFJUiSZerZ8nM1VQXRCJtLKQ=)
2: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: 4zZB1c+1dSExBXn7WDSSTaidWArty9TzQy2zzbQTzzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:fe:0a:4f:91:c8:89:62:bb:93:b2:d4:a4:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Aug 23 01:02:42 2025 GMT
Not After : Aug 24 01:02:42 2025 GMT
Subject: CN=5aed3363235e08dea8370177da1c66e1fa1343cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:ab:58:58:c5:c9:41:f5:a1:5a:e9:17:97:
e6:4f:a9:b1:43:87:04:24:0f:05:da:b4:6f:7d:10:
11:96:15:c8:5e:a6:4e:43:96:94:8e:97:5d:bd:2d:
32:a4:c3:93:33:7e:81:93:cd:8e:1a:86:86:d4:44:
50:34:a4:a0:5a:bf:d7:15:5c:58:62:c9:15:d0:08:
72:61:bc:b3:15:76:c8:6f:aa:89:91:2e:0d:bc:01:
fe:b7:5d:83:67:10:e3:2b:b0:33:fe:d1:1b:12:04:
0c:d1:2b:00:12:d1:62:ba:c6:38:cc:bb:72:a9:af:
93:c6:95:52:57:43:2f:01:7a:3d:74:aa:cf:c3:3b:
6a:1c:70:a2:b8:33:8a:43:e4:73:63:b2:9b:79:c3:
ff:12:fe:7a:8b:8e:21:3a:e3:86:ee:0a:76:59:c2:
8b:42:7e:32:66:3f:3d:d3:87:b0:c9:25:88:f6:b6:
ff:30:e7:de:ce:44:22:e0:95:f3:ae:62:5a:9f:aa:
66:ed:17:fe:41:cb:cf:92:f5:69:f3:16:a4:84:1f:
81:df:3d:84:46:25:a4:a4:65:12:9f:da:b0:74:8e:
13:c3:20:b0:a0:42:d6:0e:e3:05:48:8d:75:19:d8:
91:a4:61:79:97:d0:84:6c:69:66:7f:a1:d9:c0:71:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:33:63:23:5E:08:DE:A8:37:01:77:DA:1C:66:E1:FA:13:43:CB
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:8b:d2:63:4f:ba:95:48:a9:a1:21:80:f2:9f:26:13:b7:da:
5e:a2:3d:59:b5:b5:e3:50:da:5e:a0:40:7b:b7:b9:55:d1:b6:
36:f3:0f:4e:f5:56:ab:0d:ce:2f:27:10:49:9e:6f:b4:1c:41:
27:9b:64:9b:f3:b3:c3:71:23:ae:0e:51:b5:38:63:3d:28:1d:
1c:3e:66:2d:5c:71:5f:c3:a7:aa:f2:7a:2d:14:52:bb:d2:be:
72:7d:aa:86:7c:26:05:42:14:10:50:cf:91:55:37:bf:b8:e0:
08:a9:75:28:d7:40:e6:97:30:9c:3e:b8:c5:e3:df:fd:5b:f2:
f9:a6:e7:64:98:3c:ef:f3:04:89:d7:19:cf:8c:58:61:df:b2:
4a:da:c6:a5:67:cb:2c:a5:b9:91:83:71:2d:b8:61:33:98:fa:
06:2e:20:15:b4:ec:53:46:b3:ac:f7:11:97:85:1d:9a:7e:10:
dd:a1:a9:d1:ec:46:4b:1e:9d:95:c1:d6:44:b9:29:2f:dc:f9:
30:40:43:05:18:de:fb:4d:32:3a:af:7c:9b:a7:15:d7:38:17:
c3:ae:aa:ef:c8:11:8c:45:44:1f:98:3e:aa:91:3b:2d:be:bd:
51:4f:24:cc:a6:7e:dd:02:fc:ed:c7:2c:98:27:bf:d4:cd:70:
aa:5e:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:22 2025 by rpki-client