Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: MLF3s7rsSzvkcdpHuwB9r1iVii7ELDtwfMULHPW1F6E=
Subject key identifier: A7:9C:6D:C7:6D:51:07:73:6C:A4:70:90:E7:FF:E2:C4:9C:1F:CD:E4
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 0197BEC81758395DB4E251461FBE1A7078C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: DF
Signing time: Mon 30 Jun 2025 03:01:13 +0000
Manifest this update: Mon 30 Jun 2025 03:01:13 +0000
Manifest next update: Tue 01 Jul 2025 03:01:13 +0000
Files and hashes: 1: 0Ai9U12mBfKyiWOFnwxyJgomY7A.roa (hash: w93SlMAnXeNUWu2aTB2M64qmn0qVbSFDgVMubrcribE=)
2: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: wEpAcbslMGftJVh153Mt+KUUclvyttKDCPDqetGknW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:c8:17:58:39:5d:b4:e2:51:46:1f:be:1a:70:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Jun 30 03:01:13 2025 GMT
Not After : Jul 1 03:01:13 2025 GMT
Subject: CN=a79c6dc76d5107736ca47090e7ffe2c49c1fcde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:cc:87:f0:b3:a8:bd:84:41:ca:7e:0f:65:
b9:54:82:7f:b6:6b:99:2d:b6:04:be:06:cc:c5:1d:
8a:54:af:cb:57:7f:f6:c2:87:61:9b:a6:c9:ed:71:
81:73:0c:75:0e:ce:2c:1f:b7:27:68:4f:f6:44:03:
60:dc:81:27:df:a9:4c:e5:ce:eb:ae:37:17:ea:78:
d2:83:45:aa:fc:4e:cd:7f:ed:87:a6:58:a0:c8:6d:
67:fa:72:26:62:06:f3:2c:35:e6:e4:87:3d:06:1f:
10:60:6d:09:3f:5d:fa:3e:4d:e3:be:d4:75:ca:65:
97:c7:54:38:c0:8b:a4:0d:15:9f:b4:96:a6:de:bf:
09:b9:3f:48:7e:f6:37:00:54:60:a2:78:ec:2e:7b:
e5:8b:f6:14:9c:69:26:55:c5:f8:ef:ff:66:0c:db:
d6:76:1b:e5:0f:c9:62:7b:59:ad:f0:5f:65:34:9a:
d2:cf:2f:01:e5:fc:f0:d5:bc:53:a1:65:d0:f0:02:
67:38:38:d5:5a:e9:41:b5:dd:56:71:d1:07:19:37:
82:e7:03:a8:44:6e:45:e4:0c:0a:0b:45:2d:2d:67:
ed:31:c0:ec:71:f8:31:67:dd:fb:ec:63:e2:20:b7:
40:fd:c6:9c:d5:ae:e0:7a:be:8c:52:ee:97:92:4d:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:6D:C7:6D:51:07:73:6C:A4:70:90:E7:FF:E2:C4:9C:1F:CD:E4
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2e:d7:17:d6:3a:a6:fd:50:eb:79:df:e6:94:4b:97:c4:4b:
28:1f:8c:eb:6b:1f:01:1e:45:2c:6c:52:d9:a8:ca:aa:6c:84:
de:e8:56:c1:d1:34:40:e4:cd:ed:8e:e2:c0:f5:af:a8:bb:1b:
02:13:b6:0d:f4:2e:2c:67:80:0e:0f:eb:a9:0e:bf:a3:f0:ca:
02:26:67:57:92:e8:69:8b:44:41:a8:59:6e:ef:40:76:f0:5e:
ce:99:f2:04:ff:2b:c0:0e:68:6a:85:03:1c:b7:dc:ef:6d:2e:
9d:d4:d1:d8:d6:47:cf:f8:ee:f9:55:ed:b0:c5:e7:e1:9c:58:
58:65:e9:ff:2a:22:6e:cd:05:20:ef:27:4e:05:de:c3:e1:04:
9a:00:00:fa:d7:36:cf:cd:ec:7b:69:86:a5:31:69:8c:d5:ba:
5a:5e:0a:d4:f8:e9:cc:0f:a4:f3:28:d8:67:f3:a9:f7:bf:ea:
e9:13:e8:47:29:6f:9d:7c:44:bf:60:cf:07:22:5d:9d:3f:a9:
25:f5:2b:36:46:45:d3:b9:c4:0f:94:36:14:90:12:72:72:90:
e6:6a:cf:0d:dd:62:3b:a4:0d:cf:7e:e6:56:28:88:fc:b6:81:
95:c8:71:8a:ff:b0:21:77:9e:56:1c:a1:6e:44:0d:48:fb:80:
50:9b:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:44:47 2025 by rpki-client