Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: 7jJzBeHiy71dm0T5A0L2HU60BF0/Uf5C55aEPQAbsnY=
Subject key identifier: 3C:6C:15:7C:8A:DB:F0:D5:08:0C:F6:2F:16:56:B3:C7:79:16:8A:11
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 01984889C89E045B69E71DCB40C678E2EB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 128D
Signing time: Sat 26 Jul 2025 21:00:45 +0000
Manifest this update: Sat 26 Jul 2025 21:00:45 +0000
Manifest next update: Sun 27 Jul 2025 21:00:45 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: IERYXCPu3P/YMC9cDxfj2BdU/t3L/16RfXy20QzKVQ4=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:c8:9e:04:5b:69:e7:1d:cb:40:c6:78:e2:eb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Jul 26 21:00:45 2025 GMT
Not After : Jul 27 21:00:45 2025 GMT
Subject: CN=3c6c157c8adbf0d5080cf62f1656b3c779168a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:d8:6b:64:b8:83:74:18:75:fd:20:62:b2:
e5:7f:f2:06:e9:d0:05:1a:79:5d:5f:bb:97:39:1e:
0a:ed:46:94:ad:ed:04:10:0d:aa:f6:c5:01:25:3b:
21:2b:64:bb:9b:9f:5e:da:ba:23:9f:2b:fe:5b:22:
7d:dd:a4:28:ee:26:79:77:a5:26:ff:ec:f3:b0:96:
de:9f:1e:d4:be:4f:2e:8c:40:28:9a:45:8c:40:53:
01:e5:6d:f4:d0:73:94:b3:23:40:51:a2:eb:20:3b:
fc:f7:2e:65:90:6b:66:bd:db:39:38:b1:65:9d:48:
e5:19:df:cb:e6:d8:57:d3:b2:7e:87:01:e6:08:da:
de:12:9d:11:70:30:2e:b8:45:09:31:e5:e1:e3:f0:
cb:f2:08:b1:a2:c7:6c:0c:1c:f6:c4:42:00:8e:89:
89:15:27:7d:11:79:e6:e9:82:54:58:fb:a4:c6:43:
47:e0:28:61:39:bf:73:49:14:38:18:c0:1f:fe:42:
d8:02:5c:22:2c:f3:dd:c9:2a:23:d7:23:4e:34:44:
e5:7a:3a:b0:57:9a:8e:9a:29:6e:f7:e1:ec:9c:a2:
a9:76:81:b9:3e:8a:a0:1a:eb:51:fa:88:b4:f6:01:
b3:fb:68:ca:04:dd:1e:e4:f8:98:4b:68:0e:cc:db:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6C:15:7C:8A:DB:F0:D5:08:0C:F6:2F:16:56:B3:C7:79:16:8A:11
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fb:a6:8a:39:41:d5:16:51:3d:d2:1b:5f:c7:ab:40:1c:f5:
7f:06:21:a6:13:e2:7e:47:8b:97:33:b6:4b:76:89:f3:32:d7:
89:68:f2:8a:26:5c:ee:cf:95:2a:60:53:f2:df:ef:4a:1a:cd:
47:ba:b7:b2:d1:f8:74:f1:89:a6:c4:a9:2f:86:de:1e:bc:77:
57:99:af:39:3c:ed:c2:a7:d2:d2:75:16:73:06:72:01:82:92:
25:d9:12:28:92:a5:f9:92:28:11:73:b3:e5:a8:13:9c:ff:37:
ce:e5:c5:e0:6d:a0:86:d3:1a:cc:0d:f6:77:bf:3d:40:02:e7:
1b:56:f6:9e:0e:a6:d9:fa:c1:c4:72:79:3d:08:ac:a7:07:6e:
73:45:26:6b:e3:8a:d3:c5:e5:cb:7f:1a:d0:56:54:11:9f:36:
96:88:87:74:02:ee:2f:c1:85:45:12:f0:c7:61:a5:61:6e:ea:
30:a6:52:2b:28:99:74:db:fa:14:51:d8:6d:50:bf:f0:9c:6b:
18:49:09:4b:f0:4f:be:00:3d:ef:9a:22:65:72:b9:82:99:31:
7e:53:6d:f9:7b:2e:dd:57:21:77:74:fe:1d:15:d9:32:aa:f1:
84:94:3f:9d:b2:5b:d4:4f:17:1c:ef:b8:5e:45:5c:ec:00:18:
69:af:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:21 2025 by rpki-client