Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: hf181rCvOxaWvQYmXbeoZysjec9I5ylmsed//aWxOFo=
Subject key identifier: 5D:F8:00:E0:0C:81:73:50:10:A3:7A:42:4E:91:74:72:DB:3B:C4:EA
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 0198D660E216210236BA4463B31C76DDEF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 1579
Signing time: Sat 23 Aug 2025 10:02:10 +0000
Manifest this update: Sat 23 Aug 2025 10:02:10 +0000
Manifest next update: Sun 24 Aug 2025 10:02:10 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: VIcHUd70KEryCndUDwApLIZdCGDu5wzFmS1AV5dbGR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e2:16:21:02:36:ba:44:63:b3:1c:76:dd:ef:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Aug 23 10:02:10 2025 GMT
Not After : Aug 24 10:02:10 2025 GMT
Subject: CN=5df800e00c81735010a37a424e917472db3bc4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:8c:a8:1e:ed:ec:b5:9a:7f:d2:38:c3:e7:
bd:97:70:f0:b9:35:ea:9f:90:cb:7c:a7:5b:91:9d:
8a:3d:bc:2b:0a:11:bb:84:4d:ad:42:ab:ed:b9:d3:
1f:cd:a0:6f:b4:fe:fe:fb:06:52:1d:04:87:60:98:
26:33:89:2f:a4:df:fe:a8:75:30:54:9d:29:26:3a:
4e:6c:e1:1a:f1:19:c3:58:ed:59:81:dc:b5:81:9b:
4e:11:58:be:6e:63:33:39:b9:f8:07:93:04:fb:d4:
4b:27:d1:e3:06:de:ab:e3:6f:fd:b3:1f:cd:84:b4:
90:fd:2d:95:d8:04:0b:d7:03:ae:05:e4:56:b4:99:
3b:ab:a4:cd:51:7a:8e:cc:07:60:e5:05:42:40:f6:
14:1c:b1:8c:d0:3f:7f:29:73:f3:ad:b2:fe:d1:9e:
e6:c4:50:e5:5f:e5:18:2d:59:50:1f:df:be:9c:03:
d1:63:4e:84:a9:09:6a:38:26:35:59:01:73:e6:69:
62:dd:0d:b9:4f:cc:bc:df:16:59:b3:26:43:61:6e:
a0:f1:1c:a6:b7:e3:38:73:c0:2c:43:7d:6d:9a:87:
5a:c0:9c:10:0c:29:99:a3:7e:59:2d:d1:ab:f4:46:
14:bf:0a:f0:f3:bf:47:2b:2a:3d:e3:b7:51:ed:aa:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F8:00:E0:0C:81:73:50:10:A3:7A:42:4E:91:74:72:DB:3B:C4:EA
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:eb:66:00:5e:1f:03:14:74:c0:b2:20:a3:a6:17:90:3b:9d:
c0:60:cd:8e:6f:a5:d4:95:69:d7:17:c9:d9:49:e6:99:45:f7:
2e:fe:17:7b:f5:06:de:ca:c3:90:43:98:19:4a:fd:2c:d4:b6:
3a:f4:71:f0:13:1a:1e:9d:f3:22:98:01:66:ee:6e:b5:1e:e9:
54:2c:04:44:2a:9c:50:a2:f2:a3:e7:1f:92:e9:ab:7e:d0:e8:
9e:35:d6:65:4c:ec:7d:17:8b:b1:79:2b:da:32:fb:90:bc:b5:
18:6b:b1:51:71:7a:ae:2b:99:a6:f5:01:84:57:8a:ff:9b:83:
4e:2d:ba:2b:a4:db:9d:0f:84:22:c1:0b:6b:77:a3:a2:92:f2:
15:2d:8a:c0:20:02:24:c8:c9:fb:3c:17:c6:fd:dd:8a:e5:1a:
18:06:ae:ad:14:72:e3:6a:75:f5:42:dc:e6:10:2a:fc:b0:ed:
37:26:f1:98:9e:b2:f1:c7:26:cb:04:96:83:2d:9a:62:de:ca:
7e:31:ea:88:e6:fd:5b:a0:e3:1d:06:5b:8b:cd:7a:78:fb:02:
11:de:4a:70:1c:c8:cb:ae:1f:54:cc:a9:11:7a:b1:a7:9e:e5:
e5:65:ba:da:02:b6:96:44:e3:a2:7f:6f:ba:d2:05:f3:42:42:
d2:5c:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:01 2025 by rpki-client