Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: rHvpE47b8+/t2J2GjbEpG9IibDavVwTbHYtTKGFxI7w=
Subject key identifier: 94:B6:07:62:ED:65:21:6D:2A:6B:C2:E0:09:A0:59:0A:CE:84:94:EE
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 0198D4E02A77FD175741C5A813665F945B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 0609
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: jXXBMox/Hq5kdNWEkLR/b4Vgj5YdSXWOKDNH57QtYjI=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2a:77:fd:17:57:41:c5:a8:13:66:5f:94:5b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=94b60762ed65216d2a6bc2e009a0590ace8494ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:dc:a5:e5:ea:81:1f:26:23:a9:c1:66:39:
7f:a0:ec:77:f8:58:6f:8e:f4:69:20:9d:40:7f:c3:
9d:5c:f6:a6:02:50:d3:21:5d:c7:3a:16:bc:29:08:
93:e7:90:44:e8:38:c6:10:bc:93:7f:0c:36:5a:12:
5d:4b:dd:19:7d:8d:88:dc:56:95:92:d4:49:18:b4:
fc:8a:7a:72:45:4e:5c:8e:dd:ef:d7:96:be:b0:3a:
9d:eb:1d:8d:30:64:35:86:fa:ea:cf:17:e2:3e:13:
2b:82:bf:81:2f:b9:72:30:55:4a:7b:24:79:d0:a7:
b2:b9:58:e6:cf:53:7b:6f:75:7b:bc:d5:88:1f:6c:
20:c2:dd:0f:12:a0:b9:ab:8d:42:08:08:ad:fb:3f:
99:db:15:1b:f6:c4:93:66:12:fb:2c:bb:b3:6f:0f:
de:54:b8:9a:f6:41:f4:c7:4f:1a:5a:52:37:f8:9c:
54:90:04:49:f9:66:77:27:2e:8f:4b:e3:40:8c:16:
fe:49:a5:03:cb:d7:4c:e7:c3:d7:cb:da:c6:9c:62:
7b:dc:66:f4:e3:fd:3a:77:58:6f:e9:7e:15:f7:74:
41:8b:12:25:e5:c7:9c:f0:c3:d9:66:e3:ab:2c:77:
63:0e:13:1b:92:32:da:be:b9:d9:be:9e:51:b6:3e:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B6:07:62:ED:65:21:6D:2A:6B:C2:E0:09:A0:59:0A:CE:84:94:EE
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:81:49:bf:7c:e5:08:dd:ed:b5:72:89:9b:db:6b:ae:98:1f:
d5:e2:92:3e:fc:e4:3f:8b:dd:e2:01:d8:8a:0f:b9:9d:fc:98:
8f:b2:05:f4:37:9e:40:dd:52:03:2a:c1:c2:67:5b:6a:ce:cb:
18:05:a2:34:75:e8:17:02:0e:b5:69:0d:ee:d5:f6:74:32:e0:
46:f7:84:f3:14:76:70:dc:ba:82:94:07:31:44:6a:53:7e:d0:
84:97:11:33:df:ae:24:e0:1e:68:b3:c4:fc:d9:53:53:f8:e6:
e3:7a:f9:73:dc:23:f2:14:e0:1e:c3:38:bc:12:0d:47:5d:75:
eb:91:1e:ce:de:d7:da:04:66:cf:25:b8:1f:33:74:c5:7b:63:
d0:e2:2e:d5:af:83:46:c1:a1:7d:30:1a:d2:fe:9b:68:4c:fe:
9c:9a:0c:0c:27:bc:cf:63:64:2e:1a:7c:38:15:34:ab:0f:00:
3d:78:12:7f:af:c3:e0:ad:dc:f3:28:00:65:ef:9e:3b:f1:3a:
b6:be:b1:6f:20:83:50:79:ef:52:4f:d0:c6:b8:28:e1:39:fb:
a2:1c:dd:10:3b:9e:41:e8:56:f7:9b:6b:f9:dc:98:60:5e:2c:
0a:16:b3:35:af:88:e0:b0:51:ce:bd:6a:cf:85:32:43:ff:f0:
22:39:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:02 2025 by rpki-client