Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: lAUJ1PWpTy18Ew0orVPhwZlFmKGG7McQnlNKlqTMRiM=
Subject key identifier: 31:5B:51:FB:A3:01:1D:70:B3:A7:2D:A1:40:B9:D8:16:B3:75:7B:C2
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 0198D4E059D191CB1F5A0EFBBFD315E8C54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 016F
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: 0Ai9U12mBfKyiWOFnwxyJgomY7A.roa (hash: w93SlMAnXeNUWu2aTB2M64qmn0qVbSFDgVMubrcribE=)
2: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: Ij2RTTS7AhamzU1P7dcBsoHKXucl6+jAlTcDG9RMA8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:59:d1:91:cb:1f:5a:0e:fb:bf:d3:15:e8:c5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=315b51fba3011d70b3a72da140b9d816b3757bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:1e:af:d2:f6:32:e8:9b:e0:6b:87:1e:35:
22:78:a3:b5:75:84:d5:7d:1f:39:21:56:04:1a:6f:
90:84:b4:22:aa:ef:ed:d7:87:3a:fe:7a:01:63:40:
fe:76:a5:76:22:d4:03:cb:b5:af:41:f4:e8:40:b2:
a6:e6:a6:34:de:6b:89:b5:39:4e:93:f2:c2:88:30:
55:32:0b:84:e9:32:ef:f5:cb:d2:8c:14:35:ca:ec:
5c:79:9d:4f:90:9d:19:c7:12:dd:a2:5c:7a:29:a7:
a2:93:4d:7d:02:cb:8b:62:12:d4:cf:fd:ea:e8:f0:
cf:75:4c:c2:99:af:a0:cd:1a:d7:5d:d3:26:85:5e:
c6:f6:06:9c:d5:2b:6f:63:55:35:07:ea:17:a3:e0:
89:05:41:1e:6b:36:5d:cd:1f:89:92:11:e2:c4:e3:
44:b1:3d:0f:26:71:e9:64:c9:08:c7:86:48:60:f0:
41:7e:6d:5e:a3:e8:2d:74:5b:64:13:1e:03:3b:6a:
cf:76:fe:07:fd:6f:fb:8d:7b:00:7d:03:ca:94:53:
f6:d5:1a:64:d0:e9:2a:c9:ea:b6:6f:21:2d:31:53:
b7:e5:27:83:d7:fb:95:20:40:69:45:50:d4:09:29:
08:4b:f5:16:1a:3c:4d:44:ef:3e:11:d2:d7:9f:0a:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:51:FB:A3:01:1D:70:B3:A7:2D:A1:40:B9:D8:16:B3:75:7B:C2
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:92:2c:2b:21:a6:ad:92:29:19:de:8d:9f:52:75:61:a8:c3:
7a:d1:57:dc:c6:fe:5a:ae:c7:3d:c4:5a:47:44:cf:83:39:3e:
5d:97:3e:08:19:5f:1d:59:80:5c:79:48:fe:0a:8a:41:c7:97:
c4:e0:18:24:b5:24:12:76:12:95:42:28:22:cf:ca:75:e4:9b:
d9:67:73:b2:ae:3f:e6:0c:da:ca:71:bd:e3:b0:de:09:25:20:
a9:e0:fa:f4:1b:45:54:4e:aa:a3:e4:a3:38:a6:cf:2e:17:b5:
3d:cf:28:68:51:35:cd:57:9e:c2:43:d2:93:ab:9e:96:be:f6:
99:72:b2:1d:e4:9e:10:33:1e:06:32:79:c5:0e:9e:80:b1:f0:
02:32:fd:45:65:10:df:fd:2b:21:ef:ca:54:d6:cd:1f:85:de:
4c:23:fd:1b:06:9c:b8:df:d6:5f:3a:b9:6e:90:a9:a6:65:6e:
d7:99:4b:47:5a:7f:58:ce:23:cc:27:63:f6:18:50:8e:1c:e6:
f2:75:b2:5b:27:a9:ba:95:26:ec:6d:a3:17:50:97:77:f5:3d:
5e:97:86:8b:3d:d0:6b:c2:de:d3:34:e4:f2:da:e0:94:83:41:
4b:00:10:73:76:0a:69:73:15:f8:9a:f9:35:8b:03:09:a5:6c:
f6:6a:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:46 2025 by rpki-client