Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: v6M5EmJSnBRXWAfGpsrj76lswxUOjwFJgBO43mpB7uc=
Subject key identifier: FE:88:DC:D8:0D:E7:7A:67:61:4E:F9:B0:B4:A1:D3:17:2E:F3:41:07
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 0198D5F1498DD6ED57902D30E9937B7EBFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 12CF
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: l/K0j8LL0REeeYZxrUNfYlICgsy9mOcvW7vKg61GX1Q=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:49:8d:d6:ed:57:90:2d:30:e9:93:7b:7e:bf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=fe88dcd80de77a67614ef9b0b4a1d3172ef34107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:1a:8a:da:6a:be:af:d1:0a:04:1b:a8:82:
06:56:9e:0e:00:0f:8f:de:06:6c:00:65:5d:89:b4:
cf:be:04:3c:5d:b4:f9:9f:42:c7:50:7d:f2:a4:c0:
ff:bc:16:dd:c6:50:5d:ee:ca:af:36:d1:eb:49:eb:
47:68:50:16:f9:28:f8:81:87:dc:f5:ab:01:d8:06:
13:a6:90:cd:59:18:e7:fc:23:87:1d:53:ad:c1:77:
0b:99:cb:d4:74:b8:ef:c4:41:14:33:b8:df:5b:39:
ba:c8:e6:68:3c:bb:da:4c:91:45:09:35:7a:b1:79:
3a:c5:fa:b1:1d:62:61:42:c0:7d:27:9f:56:12:98:
f3:4e:03:f0:72:04:41:80:d2:43:d6:36:d1:5b:fc:
6d:67:16:8d:1e:a6:85:f3:e4:f0:36:b9:48:28:95:
0d:81:f9:18:80:f3:e7:a5:5d:32:4c:e6:07:05:a3:
65:79:17:ef:f8:0c:be:0a:45:54:8e:aa:d6:b1:ce:
17:22:37:47:8d:0d:73:31:60:52:b5:31:4f:a1:35:
fc:2a:1e:82:c2:96:bd:b4:0a:44:b6:75:20:d6:10:
26:42:b3:f3:6f:04:f9:4d:ce:5e:4d:07:fc:43:73:
e2:0f:05:67:22:5e:e4:9c:49:c8:de:15:1f:26:cd:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:DC:D8:0D:E7:7A:67:61:4E:F9:B0:B4:A1:D3:17:2E:F3:41:07
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:49:f8:ed:4e:c5:1e:15:9e:4c:72:b0:19:47:e4:47:fc:db:
21:26:f2:c9:c2:4b:08:e2:36:4e:07:df:a3:1e:f2:6f:16:1f:
e3:1d:3d:b6:54:ee:1b:d4:00:18:d8:94:e6:d7:1e:b4:6c:e5:
2a:dd:80:00:80:91:64:34:dc:aa:76:ea:7f:52:77:46:00:13:
e0:45:b0:35:2a:f7:4d:6f:b1:e7:08:b1:68:8a:c0:0d:f8:5f:
b7:8f:2a:13:8e:d2:16:eb:ef:0a:e2:54:e2:fd:bf:e2:10:3b:
65:56:32:65:8e:6e:af:6f:14:a0:85:6c:2c:fe:b8:36:e8:00:
b6:db:38:e0:b2:c4:83:60:6b:8f:0e:07:ce:12:13:3c:a9:20:
7a:6d:3f:d3:9f:d0:41:ee:9e:9a:7e:8a:97:95:30:5f:06:58:
db:2d:3c:de:7a:a0:ad:c5:b1:4d:eb:87:4a:87:9f:29:0b:83:
9d:a4:64:39:36:c2:16:b9:65:51:cf:4c:ba:60:7c:22:34:bc:
04:79:4e:45:d8:56:e9:0c:c2:97:18:d8:8a:f4:31:0b:2a:e8:
b8:d2:a1:fa:ca:2c:69:20:e9:78:d9:e1:d0:b3:41:b9:dc:10:
49:81:cd:4e:62:73:a1:48:4f:76:e6:33:33:89:b2:a6:b6:c2:
ff:c0:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:46 2025 by rpki-client