Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: f/uJiCIusbOSIWfIuBIK+fbiqG5lhK3+FTGNhCyiDIU=
Subject key identifier: 22:86:4B:03:9B:27:61:1E:99:82:CC:98:E2:E9:0D:A6:C8:C4:7B:3D
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 0198D473E1A5A1514A67945C2C0E012ABCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0EAB
Signing time: Sat 23 Aug 2025 01:03:40 +0000
Manifest this update: Sat 23 Aug 2025 01:03:40 +0000
Manifest next update: Sun 24 Aug 2025 01:03:40 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: mMoZA7aWQG2OwhyzDHLIgDMB0Tx1k51fIm1hGP4Zn9c=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e1:a5:a1:51:4a:67:94:5c:2c:0e:01:2a:bc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Aug 23 01:03:40 2025 GMT
Not After : Aug 24 01:03:40 2025 GMT
Subject: CN=22864b039b27611e9982cc98e2e90da6c8c47b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:27:50:71:f0:67:40:2c:a6:cb:8b:81:af:
52:0c:3b:3f:61:95:72:79:4d:6e:c1:a5:dd:44:8e:
ba:06:64:03:94:ba:b8:3e:57:24:36:cb:62:39:d9:
2c:18:41:a4:e1:8c:f0:cf:85:cf:10:ed:fb:69:a5:
3e:36:0f:d6:b4:7a:8f:a4:27:e1:3b:1f:7f:06:58:
d8:5d:44:22:a2:f8:a3:d4:aa:4b:04:22:bb:67:f1:
d6:54:ce:b3:5a:73:08:29:27:95:07:87:03:3c:2e:
8c:d6:8b:99:31:fd:e7:8d:3d:91:d6:a8:fe:65:46:
1d:53:c9:31:b0:9d:7e:47:99:44:01:43:86:31:c2:
27:16:e6:8c:d3:67:10:6d:ed:26:8e:fa:7f:86:e4:
e9:59:06:4a:96:b5:f0:8e:12:34:7f:07:5f:86:9b:
b7:ec:c4:fe:56:7b:23:9d:a3:4d:d9:b5:76:89:48:
2a:72:69:70:68:a0:4b:59:6f:53:5d:d8:b3:2e:b4:
1b:d7:6f:4a:cc:34:f0:85:4c:78:92:09:0a:f8:ec:
71:1f:cb:01:85:ee:44:1d:e8:2b:29:1f:99:e2:b0:
1a:71:00:5a:d3:f1:1d:8b:88:ee:e4:fe:ee:34:63:
48:63:1f:d4:ca:73:41:98:31:30:ed:41:ed:b4:47:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:4B:03:9B:27:61:1E:99:82:CC:98:E2:E9:0D:A6:C8:C4:7B:3D
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:13:05:60:4e:18:27:e1:15:af:0a:b8:03:2f:8e:80:17:37:
76:2f:ae:d9:4d:2d:a4:e2:fe:0c:41:40:2c:f2:4a:97:04:eb:
76:2b:42:f3:b2:e8:7c:06:69:e8:53:0b:fa:85:78:3e:b6:5c:
65:e7:e6:69:f5:2c:99:57:64:a6:dd:be:69:57:e7:dc:e8:40:
98:a7:63:61:61:a8:24:25:d5:58:24:d2:f9:8d:d0:a0:c5:fd:
a2:5f:d0:c7:92:50:1b:83:33:69:9e:1f:5d:60:97:96:aa:e7:
13:b4:6e:50:74:98:a8:35:90:ca:f4:6c:2c:1e:4f:2d:91:c1:
e9:0f:ef:f0:a7:24:1b:40:a2:84:b5:cc:4b:7e:f9:9d:ea:63:
ab:30:55:10:78:92:26:55:dc:76:41:51:b8:49:bd:e3:4e:0b:
7a:26:56:bd:51:43:6b:05:fb:03:ee:d9:e6:48:34:3a:00:a8:
e1:31:6d:96:80:c1:f9:19:6c:92:c7:a1:c7:11:2a:bb:30:90:
66:6a:05:9c:94:1f:9d:2c:b4:f0:a1:05:64:1b:16:76:89:21:
9c:82:de:26:62:56:0c:88:de:b2:8f:84:7e:a4:1c:52:2e:93:
55:dd:57:2f:f2:c7:de:09:57:a6:ce:b1:cf:a2:97:01:2e:eb:
ed:5c:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:27 2025 by rpki-client