Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: VXvh6dCEPq/AYpaWr+ykLXZxm5n4VOZsFFxdYPERpfY=
Subject key identifier: 35:C2:44:1B:9A:5D:E9:27:6C:72:3D:A0:C0:B3:53:9D:70:66:54:19
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 0198D47480133D0E9E36A9C8760AA0DF8BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:04:21 +0000
Manifest this update: Sat 23 Aug 2025 01:04:21 +0000
Manifest next update: Sun 24 Aug 2025 01:04:21 +0000
Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: gviPzkC0zuXuROcsDGPqHavw4/KrKJsgkXv2nU/mYaU=)
2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:80:13:3d:0e:9e:36:a9:c8:76:0a:a0:df:8b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Aug 23 01:04:21 2025 GMT
Not After : Aug 24 01:04:21 2025 GMT
Subject: CN=35c2441b9a5de9276c723da0c0b3539d70665419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:0d:e1:0d:88:3b:5b:b7:90:4b:51:21:71:
0b:13:50:16:11:79:5a:e1:b0:9e:28:cd:e3:15:fb:
b7:99:de:ea:19:31:2d:7a:e5:90:6e:42:85:92:69:
ea:47:ab:df:08:21:9f:bd:08:f6:eb:ac:4f:a7:9a:
1a:2b:f3:cb:25:31:a1:ea:ee:00:39:a5:43:51:2d:
56:ef:f0:a5:c1:1a:31:50:29:0c:ee:89:af:51:51:
66:13:9d:4f:47:fb:48:32:6a:7a:7e:76:08:7f:90:
de:78:8f:1f:0f:9e:91:12:77:6d:5b:32:8f:2e:39:
47:b8:cb:ed:1f:5c:b1:6e:f3:11:e4:4d:71:4a:80:
43:f3:3a:e0:8e:ee:ca:80:97:7e:3d:31:3b:14:44:
7e:08:8d:86:49:45:79:12:83:43:82:d2:04:0a:b0:
85:fe:c5:e0:cf:90:9d:7e:0e:01:a4:d0:b0:f9:1c:
ce:87:5b:d5:17:f8:b6:a3:ab:55:2b:00:cb:9a:3c:
26:1f:9d:44:f3:0d:b2:37:15:b0:6b:76:60:8c:d8:
7c:0c:52:ae:21:69:45:64:81:39:37:54:b1:ce:30:
2c:8f:c6:ad:66:35:60:13:41:4b:41:47:72:da:28:
ee:90:cd:e8:42:f9:a5:5e:9e:0a:05:9f:53:fb:91:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C2:44:1B:9A:5D:E9:27:6C:72:3D:A0:C0:B3:53:9D:70:66:54:19
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2a:79:23:47:c2:ec:68:8a:c4:17:2a:f1:47:b0:43:22:b1:
37:f6:de:3a:e6:eb:28:81:82:7a:7c:c0:66:a6:a1:92:fe:7c:
8c:7c:a8:0d:fb:a1:75:cf:c3:15:cf:c0:79:c7:28:26:61:13:
d9:15:fc:1b:34:cf:45:08:62:17:88:23:e4:82:32:22:2b:a0:
a4:68:0f:7e:bb:05:a9:fe:04:c0:12:7f:13:e7:e0:73:06:3a:
c9:7c:88:58:99:3e:35:00:f5:dc:5e:a2:f3:9b:87:a3:c4:95:
1f:27:6f:90:c5:f0:d1:32:e4:46:92:7c:18:4f:1e:95:e7:4f:
6d:d0:24:4b:02:fa:29:80:ae:49:68:8b:83:4d:c5:a5:ab:86:
ed:d3:ea:78:be:ca:1f:d1:06:58:6a:24:43:83:03:e0:d1:96:
f6:18:84:5a:11:be:c9:19:6b:b1:22:40:16:2f:9a:22:fb:c4:
3b:27:c0:98:5f:ff:79:c9:fe:65:ac:e2:24:0f:d8:5f:df:f0:
63:ed:62:7d:cf:60:2e:63:6b:1e:ed:57:96:3d:a7:5a:ae:6f:
85:59:96:1c:e9:3a:6f:82:10:b3:80:6a:22:21:a8:cd:1a:92:
06:3a:3d:df:8c:ec:0a:a6:73:59:e8:88:a2:8b:70:d9:88:f0:
1a:d4:62:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:44 2025 by rpki-client