Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: 8pOlad3rAEnSGi9Lcgrf0QlrwDd4t5BkMkyL663vdaU=
Subject key identifier: 66:1D:D0:D2:A4:6F:A1:97:04:BD:7F:0F:09:23:EA:1D:9A:56:77:0B
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 019845BF606B1F096E25A017089D533313C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0E5A
Signing time: Sat 26 Jul 2025 08:00:26 +0000
Manifest this update: Sat 26 Jul 2025 08:00:26 +0000
Manifest next update: Sun 27 Jul 2025 08:00:26 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: VT3zT4bAEBwX+SgpZu5sFeVGRxHfQvN4CKAaUKfJhio=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:60:6b:1f:09:6e:25:a0:17:08:9d:53:33:13:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Jul 26 08:00:26 2025 GMT
Not After : Jul 27 08:00:26 2025 GMT
Subject: CN=661dd0d2a46fa19704bd7f0f0923ea1d9a56770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:51:c0:3a:90:4e:2b:5b:39:7e:3e:30:39:
ef:97:a0:7f:a6:69:67:de:ee:c7:fa:1d:c0:05:94:
1e:ef:83:e6:20:65:67:1f:4d:c9:36:52:84:ff:9f:
dd:07:c7:8f:bf:08:42:9d:5d:e3:3f:ce:14:2e:96:
ea:9b:a8:3b:1d:df:31:2c:16:9e:60:92:36:d3:4b:
7f:fd:53:9b:f0:30:39:4f:f7:66:ad:61:29:2f:9c:
f4:25:52:80:eb:42:27:af:84:47:c8:8a:b4:f3:44:
b3:f9:5d:86:19:57:6f:d9:aa:d3:97:4d:74:5b:3b:
f2:97:9e:31:4c:0d:e8:e9:7e:c3:de:e1:90:95:93:
50:94:a5:9b:aa:4a:3d:a1:95:99:35:b8:81:dd:8a:
e1:10:18:a5:1f:25:b8:49:a2:b9:37:a4:85:10:2f:
d1:9d:67:59:ba:5e:f0:e4:3f:41:d8:b9:de:eb:31:
f9:5a:91:80:41:4d:ee:c5:83:c3:98:97:a7:1e:19:
46:da:26:ac:8b:a4:ce:19:52:30:4c:aa:3a:8b:6a:
ca:eb:ee:4b:7a:7e:bc:9d:6b:6d:ed:d7:3b:7a:9f:
86:f0:d7:d7:a3:f8:98:74:9e:39:31:f0:f7:f2:bd:
26:4f:cc:b2:cc:fb:1d:53:83:45:11:6a:1c:e9:20:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:D0:D2:A4:6F:A1:97:04:BD:7F:0F:09:23:EA:1D:9A:56:77:0B
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0c:2e:ba:21:e0:ec:ec:31:5e:6c:61:a5:ef:df:44:e8:22:
74:b2:99:dd:00:e5:1d:5c:e9:82:06:05:a2:06:44:db:37:f8:
43:a4:61:85:20:33:df:f5:1d:c5:61:a4:d2:07:63:21:c1:52:
b8:03:1d:b7:76:02:69:57:8c:e2:e6:45:b1:ae:40:61:0a:a2:
0f:f5:cb:bf:f3:5a:e2:21:0b:e2:77:19:da:67:27:50:bb:df:
21:89:4d:b8:82:37:41:b6:84:39:94:9d:80:2f:83:2e:a9:72:
b0:f4:ec:38:39:d7:6c:c6:84:83:57:23:be:1f:80:c9:f0:b9:
c1:56:9a:8a:57:8d:4a:95:da:74:bd:ea:54:5f:1d:a7:52:6a:
fe:e1:31:b2:82:df:e0:fa:5e:e0:d3:ff:1f:a6:71:d5:10:1a:
9b:b6:f3:d1:b9:2b:c2:30:93:89:f8:1e:40:26:8c:0d:dd:c6:
d0:da:01:0c:f7:a4:bd:ee:0a:6a:10:de:58:5e:c6:92:15:b6:
5f:cd:34:03:2e:ac:5b:13:aa:20:17:51:b2:99:88:f6:5d:6c:
48:63:0c:5e:03:65:2e:c3:cd:81:49:d5:b7:8b:53:c3:a6:48:
0a:de:5f:bb:60:0e:00:1e:fd:66:76:8c:05:e7:65:fc:e5:04:
fc:e4:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:27 2025 by rpki-client