Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: w7+hM8lVcdnYLNlD9waQabj6QzgUfXcTZr4EBpw6+5k=
Subject key identifier: 42:79:37:F8:EF:12:EE:A4:E2:73:DD:62:FB:6A:0B:EC:D9:6F:0C:E0
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 0198D5F13B62DFEF909A4BC11C066817D8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 05BA
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: pYa1WsSWuu4pQkrjGWmbLtDAXS4iIpPU4ANb+X6Uf7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3b:62:df:ef:90:9a:4b:c1:1c:06:68:17:d8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=427937f8ef12eea4e273dd62fb6a0becd96f0ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:e0:b1:20:31:b1:a0:a4:d1:25:20:30:14:
b9:49:81:aa:33:c0:c4:02:3c:27:99:74:e5:cf:02:
a4:c5:fc:5f:d5:84:c9:7d:af:34:b2:f9:a2:0e:99:
df:c1:bf:fe:73:8b:18:63:b2:47:ce:0d:52:7c:1f:
cd:66:85:eb:e1:f8:09:c4:ff:12:97:87:f3:7e:91:
f8:65:2e:e1:4f:93:2a:98:a3:c2:b3:13:47:9a:be:
97:f9:1c:33:0f:0d:a9:2a:6f:0c:9d:f0:36:4d:ed:
32:d3:ab:dc:0f:54:8e:e9:08:cd:e8:52:8d:43:70:
b8:04:18:9e:66:92:90:fd:4a:49:e7:9a:24:62:29:
a1:06:ee:c2:d7:83:1b:7f:44:a4:25:0c:64:22:cb:
a7:2a:67:33:0f:b8:9c:50:71:13:d5:07:c6:0e:e9:
92:00:d9:8a:fc:23:e6:a1:e2:4c:4c:8c:44:73:17:
c5:15:67:df:77:03:71:da:2c:d0:63:6f:ac:e7:ec:
c4:10:18:f8:6b:52:2d:03:87:f8:a8:3f:1b:55:b8:
71:a8:72:5e:25:24:82:69:ae:65:c1:2c:b8:f3:1e:
41:76:44:2c:9c:fc:aa:44:c5:1e:11:fe:cd:37:46:
3a:e0:b1:78:2c:7f:6c:61:83:d4:8d:db:d6:37:4e:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:37:F8:EF:12:EE:A4:E2:73:DD:62:FB:6A:0B:EC:D9:6F:0C:E0
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9b:b0:df:b0:1a:73:90:81:2d:ee:7c:13:de:b8:62:ef:74:
db:ee:19:d3:d0:9d:a3:55:dd:48:9c:74:69:3a:12:4d:7b:24:
fa:93:11:ea:d0:9a:40:ce:08:c5:2c:1f:0d:1b:3a:e9:74:c2:
36:58:9d:a5:43:5e:85:a8:7a:61:98:ab:78:d8:fa:c6:3a:60:
6d:9e:dc:eb:8e:48:c3:15:e8:6e:03:dc:10:b3:4b:a2:c9:e3:
63:0b:30:9e:fb:6d:b9:09:23:8a:f3:48:e7:ce:af:33:71:10:
ab:3a:84:6e:8c:a5:93:24:a6:e5:f7:23:66:1e:82:d4:cd:74:
21:7c:61:d1:4f:d4:36:05:ce:e4:41:01:7d:3e:cb:11:ed:79:
92:40:06:9d:24:c0:18:23:5b:87:15:80:65:1f:a1:e2:2a:b3:
76:ff:cc:b4:d2:29:95:4f:7f:f1:3b:74:59:28:d4:1b:6c:4a:
19:d1:6f:67:db:a5:50:21:90:70:88:12:a0:1d:0f:49:08:6e:
f7:47:f0:b4:da:a0:43:13:71:42:fb:bc:56:33:0b:ff:40:bb:
6f:89:89:af:ab:fb:74:30:77:61:91:f5:55:54:33:c1:9f:37:
2d:51:89:c8:b9:d9:af:81:43:0a:34:eb:77:03:5e:c9:bf:00:
35:73:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:20 2025 by rpki-client