Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json)
Hash identifier: W/KN3JpIkD435IjyLYhI1Qy/9X3sPv0tGOl5dehwnWU=
Subject key identifier: D9:8B:6D:E7:ED:41:BF:30:CF:BB:C9:15:3B:C0:7D:3D:10:87:5B:19
Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Certificate serial: 0198D439A64B8BAB1B4A909B4FD5A71FAED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
Manifest number: 7B
Signing time: Sat 23 Aug 2025 00:00:04 +0000
Manifest this update: Sat 23 Aug 2025 00:00:04 +0000
Manifest next update: Sun 24 Aug 2025 00:00:04 +0000
Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: 5gogElPvQ4mTQ7nDrkqzfZOiJ8/iVMJkMOaLYY7QtAo=)
2: fj04IAgRtLyt8FxauXRHzCCY2dM.roa (hash: RQPUjLROTiuPGUSBn8RZIchppB8l2w9Yk7LM8XCFoI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:a6:4b:8b:ab:1b:4a:90:9b:4f:d5:a7:1f:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Validity
Not Before: Aug 23 00:00:04 2025 GMT
Not After : Aug 24 00:00:04 2025 GMT
Subject: CN=d98b6de7ed41bf30cfbbc9153bc07d3d10875b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:53:d9:10:f3:4d:12:6c:29:d6:9b:84:5f:
2b:9d:c6:06:9a:40:84:56:e5:80:2b:71:27:01:db:
c1:5f:3d:e1:8d:ff:a7:f0:31:1b:8c:46:4d:4b:5f:
75:e3:83:91:14:92:94:39:d7:a8:54:0a:d9:ac:5a:
f3:52:4f:b8:6c:6a:c2:9b:1e:03:16:7d:5a:5f:09:
9f:be:25:be:44:7c:43:fa:90:fe:48:c6:5b:55:2f:
3b:51:f4:00:6c:16:f7:df:aa:b6:6e:ee:ea:35:b2:
2a:4b:db:3f:37:02:5b:93:9f:66:2f:35:59:0b:e6:
cc:91:8b:27:f8:6a:ee:5a:d8:7d:0b:de:c4:98:4e:
9c:65:b5:8d:ae:19:35:9c:bf:25:75:d3:df:25:96:
b2:76:a5:bc:37:2b:13:63:f6:03:07:4c:03:c8:06:
49:dd:cd:03:86:a7:61:63:dd:7b:b4:a0:4a:24:25:
71:76:79:d6:ea:ff:d9:ce:7e:8d:89:05:68:c4:db:
c3:6b:b5:e5:2d:f0:fa:cc:78:3d:f7:93:e2:c0:55:
35:86:0c:6b:b3:c2:fc:c5:5e:16:b2:a1:f1:9d:58:
99:4d:75:22:c7:03:6d:3f:57:4b:3c:ac:ca:16:5b:
e6:0c:25:b7:94:ab:de:ba:00:ff:7f:31:13:6a:51:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8B:6D:E7:ED:41:BF:30:CF:BB:C9:15:3B:C0:7D:3D:10:87:5B:19
X509v3 Authority Key Identifier:
keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3c:33:2e:06:f1:2c:a4:48:ad:5f:9d:2d:94:7c:15:a2:8c:
90:f5:cd:7f:71:50:85:46:9e:78:a4:ed:a7:77:03:bd:a8:d0:
29:18:27:c7:40:4b:af:60:fd:29:a3:d8:a0:86:89:e6:fd:5a:
8c:8a:a2:a8:0a:9b:ab:b3:5b:33:7a:42:4d:b9:0d:c5:5a:4a:
e7:52:f9:66:79:17:8c:57:a4:2a:8e:68:76:18:c5:d5:ec:5b:
bb:eb:48:5e:c2:81:57:2b:ca:44:b4:56:81:b1:f6:e5:34:ba:
e7:d3:de:76:83:f6:94:d4:fe:f3:57:91:d7:22:59:1f:4a:bd:
e2:99:f4:12:ed:74:ae:18:11:1c:fe:0b:06:76:72:58:d0:09:
a4:96:ce:ca:ab:2b:d4:d4:19:6a:fd:40:fd:2a:25:d7:31:4f:
60:f1:3a:b2:da:da:29:24:41:6b:2b:e3:57:4b:ba:d0:ff:f9:
f2:77:ce:be:a0:0e:1a:fc:41:d6:65:2e:f6:64:97:44:fe:86:
da:9d:92:af:92:52:78:55:71:18:3b:1e:1f:5c:8f:68:8f:a6:
ec:81:bd:07:c2:bd:52:c6:7b:0a:f6:14:38:91:a5:31:31:87:
b6:1f:6f:1a:0b:22:ae:16:7c:e0:dc:67:e5:0d:37:0d:f0:80:
33:7d:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:47 2025 by rpki-client