Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: cCDiThb8zDxCGzXn1Q16w0McTHlEzN3aFdkNDwzZU5w=
Subject key identifier: 53:71:48:CC:2F:D0:BA:56:44:F8:6C:C1:86:E3:3B:F7:97:A9:66:FF
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 0198D65F1089C23E3646AB45701A94456D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 0500
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: ZdFL5FEpGq8VHGunqiE6wZHoPwrct1DsW/XyM0GC1cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:10:89:c2:3e:36:46:ab:45:70:1a:94:45:6d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=537148cc2fd0ba5644f86cc186e33bf797a966ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:b5:b4:2e:f3:5d:43:4f:4a:c2:07:b8:ea:
5d:82:4a:52:2b:71:2f:d8:1c:94:65:5e:ab:73:e8:
e7:30:ac:cc:83:77:14:38:5c:47:84:2e:95:f6:f6:
10:3e:fd:21:21:87:da:8b:b7:0f:a3:7e:a8:4f:2e:
c7:99:c6:66:b0:8d:ff:54:f5:89:00:f4:62:c9:d0:
a8:29:61:01:35:80:79:94:98:39:e4:d2:01:cc:91:
18:18:db:59:36:31:5b:be:7b:c6:9e:f1:1d:20:e4:
83:c7:80:35:5e:9b:63:e7:24:71:e3:48:64:39:91:
a3:22:a1:ea:eb:87:9b:b8:eb:60:18:6d:5b:1e:42:
95:34:24:5f:29:5d:ea:6b:2e:6b:07:69:ef:ae:95:
43:5c:35:72:4e:dd:12:c2:4b:a9:a8:52:3a:1a:56:
37:e1:77:d2:cf:0c:d3:d7:c7:eb:a6:55:86:f2:e0:
d3:eb:7e:a9:4c:39:4c:12:47:d0:c0:b7:9e:8e:b2:
66:de:50:71:57:10:94:fd:03:2b:bd:9a:2a:7e:b1:
1f:d7:06:45:08:ab:e6:4b:17:af:3c:99:f5:dc:49:
00:03:f0:59:b1:1d:78:3e:3a:f4:8e:dc:f3:46:0a:
57:68:01:51:af:94:81:1b:79:8b:2e:90:0b:d5:2e:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:48:CC:2F:D0:BA:56:44:F8:6C:C1:86:E3:3B:F7:97:A9:66:FF
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:13:a0:a5:3e:f3:16:bd:1b:75:55:77:be:db:7b:f2:66:8c:
d2:a1:50:e3:6b:72:a8:f3:ae:2e:33:20:c0:9b:1f:a6:14:e1:
7a:82:d1:30:1b:f9:2b:68:46:e0:13:f3:e4:20:9a:44:cf:a7:
c5:07:c7:42:fa:bf:77:90:ef:3e:6b:b6:80:9c:63:47:99:03:
e1:cc:ad:5b:ee:4a:30:38:3d:c9:d2:a9:88:e0:6f:bc:0b:36:
0f:66:e0:f1:f2:97:92:dd:7f:b0:58:d0:01:4d:8d:f3:5e:5c:
8c:21:7d:05:9d:08:ec:77:ee:ff:dc:1f:37:01:c6:ba:cd:4a:
28:d0:1c:f4:c4:19:b6:1d:25:b7:87:5b:a3:cb:21:ba:b3:85:
fc:8c:ca:7c:5a:87:bd:d8:07:48:75:14:32:37:0b:75:cc:da:
ef:6d:d6:76:7f:cb:7c:ca:30:1b:3b:e6:4b:a0:98:ea:5d:20:
86:98:ef:61:05:d6:16:47:27:da:72:8b:fa:d5:9c:e7:89:b4:
54:be:90:7a:d2:99:75:7f:d8:fa:b8:1b:39:e5:8b:32:e9:d0:
91:7e:da:79:fb:52:7b:10:be:62:6a:67:90:e7:0e:dd:06:00:
b6:41:94:19:3c:f1:ce:76:a2:33:68:f5:c4:6a:2e:74:5b:6e:
8e:71:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:21 2025 by rpki-client