Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: +up1+BCcYvj70c8mn+SXegg1xlQ4LqFUHVXi+zqagWI=
Subject key identifier: C9:ED:C1:B3:79:8B:0E:62:20:BD:A5:B1:88:15:E6:F3:7A:3F:C8:9B
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 0198D629893D27741BF5A58152BD8DF722ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 04CD
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: KOsVP5bePK5N3aNgh_Mf2tcpMMI.roa (hash: 7uBjlY68CN9kyBrkClnf/o/c0vAf129ok+umjgiD7ws=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: GzXMxGvP+XYE7xdqDmFepdvHFnBfk2I3vG2VJVi7WNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:89:3d:27:74:1b:f5:a5:81:52:bd:8d:f7:22:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=c9edc1b3798b0e6220bda5b18815e6f37a3fc89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:17:90:6e:b9:02:16:02:e9:33:7c:21:b4:
51:62:20:a0:05:92:29:0c:ff:0e:4d:7f:88:3c:81:
20:b1:46:43:e1:06:a7:d1:a2:9b:27:dc:d2:ef:be:
6d:87:35:6c:cb:60:67:0d:dd:97:f0:ba:31:09:41:
eb:59:68:f6:1b:06:37:11:a2:9a:bf:0e:97:64:99:
7a:55:21:24:b9:8b:b5:2f:78:5d:d6:ad:98:a2:02:
c0:50:65:3a:4c:c1:5a:ca:dc:0b:5d:e4:b6:99:f7:
24:57:f5:93:ad:b5:a2:76:5b:3e:73:ff:fe:13:56:
23:0e:b1:22:79:30:82:4f:0c:42:fb:52:1a:5e:45:
25:cb:fe:29:7f:c5:58:05:42:c0:87:c8:8e:fe:32:
61:43:cd:be:f2:5d:fb:cb:0e:8c:94:fe:8f:81:0a:
b0:0f:0b:e3:cf:87:1f:d6:fe:81:bd:ad:78:9c:8c:
29:22:87:ac:12:b4:0d:3d:48:12:74:a4:3f:b4:b8:
e5:d7:53:14:55:12:e6:1c:ff:80:97:87:0d:3c:b8:
67:a7:f0:18:65:60:7a:ed:67:04:26:8e:33:72:53:
2b:5f:95:f4:5f:8d:a9:9e:92:b0:7e:6f:42:4f:7f:
1e:cd:8d:30:2b:8f:85:72:0f:92:82:37:d3:23:5a:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:C1:B3:79:8B:0E:62:20:BD:A5:B1:88:15:E6:F3:7A:3F:C8:9B
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:db:28:2b:10:89:96:6f:a6:6b:30:25:dd:51:21:74:3e:e4:
f2:b6:3d:8b:8f:ac:1e:e0:f7:bf:f0:90:02:ec:94:0d:fe:90:
20:85:fc:d3:56:3b:24:67:d7:e1:0c:f7:b0:06:18:ed:dc:47:
17:b3:60:06:6d:e5:26:b3:1d:ac:42:95:5d:d4:3c:7f:27:2b:
c7:ab:08:59:02:78:8c:ff:74:c0:d6:8b:b8:02:da:62:65:0d:
8a:e2:b7:fd:b7:8f:80:2b:2b:e6:94:8b:d0:3d:e1:e0:cb:5b:
b6:30:0c:d6:a4:cb:5f:c1:1e:37:5d:36:3b:b9:71:91:f8:2f:
10:40:b0:c1:2b:ba:24:00:b4:90:45:ca:9d:ef:76:48:63:70:
22:8f:ba:0a:89:c5:50:9f:79:9a:47:c9:3f:48:79:cd:12:71:
76:ce:1f:a8:ca:1f:f2:84:2c:53:2d:0d:58:ac:ce:bd:d7:ff:
44:16:73:68:1d:21:9a:ee:75:4b:24:db:ec:5a:4c:ec:4c:0a:
89:b9:e0:c5:42:54:fb:42:e9:fc:50:00:3d:6a:72:1f:8e:0b:
78:41:6e:63:b7:14:67:35:9b:f0:bc:1e:83:f5:85:c7:29:e4:
f9:b2:9a:32:7e:d1:c0:f8:ed:93:ca:28:9a:8b:9e:6e:4b:b3:
9f:34:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:59 2025 by rpki-client