Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: +NQticdVrIsg1XEtO6Qkv5VRyMDOpzyx/LAVm7huRc8=
Subject key identifier: BC:FD:CE:A1:6E:E9:D2:91:92:55:CD:8C:DA:40:C6:01:93:41:25:22
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 01984777659703604CEBA4860F7B9CAF9372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: C5
Signing time: Sat 26 Jul 2025 16:01:03 +0000
Manifest this update: Sat 26 Jul 2025 16:01:03 +0000
Manifest next update: Sun 27 Jul 2025 16:01:03 +0000
Files and hashes: 1: GuJV6tWvMc7hiklHxH5EzaRwm8k.roa (hash: SFtJeLYX3k0Bqhlczs2KFJUiSZerZ8nM1VQXRCJtLKQ=)
2: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: t76onW5bAW5tIxwj6NVQdLU5QAh8lhMLQ04tBhzDmQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:65:97:03:60:4c:eb:a4:86:0f:7b:9c:af:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Jul 26 16:01:03 2025 GMT
Not After : Jul 27 16:01:03 2025 GMT
Subject: CN=bcfdcea16ee9d2919255cd8cda40c60193412522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:b2:74:1f:e0:3c:e5:05:a0:be:fc:e5:c3:
32:5e:69:7e:b3:f0:be:d4:ab:c4:5d:2a:0f:66:d3:
e2:e1:d2:e6:96:f1:ad:83:da:06:b1:af:cf:6c:fb:
bc:ce:cf:c2:1d:b7:8d:3d:7d:54:1f:7d:e9:c0:af:
ff:1c:c8:5b:24:31:7b:17:17:59:f8:21:6f:43:d3:
c2:41:78:2c:7d:8a:99:79:bb:f7:21:65:25:69:aa:
ae:62:6e:24:ad:a5:c6:8a:19:d2:5f:e4:33:f1:bf:
1f:9b:d2:ed:1c:a7:7f:03:fb:bd:29:a2:4e:ce:7b:
db:8f:fd:68:d6:1e:fa:2c:ad:a3:ef:74:84:35:4c:
6c:2d:8f:84:28:41:e0:9c:09:7a:83:87:13:35:6a:
0e:c1:da:a2:86:4c:08:95:b5:af:24:ce:25:40:03:
ab:ed:0f:87:35:aa:cb:17:1a:8a:70:fe:ad:15:ce:
12:7d:63:23:cf:82:88:e0:d3:1f:a6:ca:5d:1b:f0:
1a:37:8b:4e:e8:91:45:da:51:69:8a:ac:24:f4:02:
c7:91:f0:09:cc:f3:99:da:51:fa:cc:78:e0:bd:da:
a8:33:0a:4b:98:58:1c:6e:65:33:5b:5b:1d:6c:1d:
46:33:b4:fc:20:94:ad:2a:5d:e0:d1:71:19:37:c6:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:CE:A1:6E:E9:D2:91:92:55:CD:8C:DA:40:C6:01:93:41:25:22
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:29:8a:31:a2:68:bf:63:62:2c:60:70:23:bf:f3:d6:2e:31:
64:88:13:a5:2e:a2:6b:6b:99:0a:e3:44:61:4f:cc:e1:e8:ea:
c2:95:70:0e:9d:3b:bf:bc:4e:32:f2:98:61:d0:7a:25:26:a4:
d3:74:96:00:df:06:24:ee:f8:ae:54:74:24:40:ea:1a:c8:43:
5e:ba:a3:4d:0d:5e:70:46:e7:d6:18:2d:07:d2:36:5d:f8:57:
52:ef:81:8c:56:d1:3b:73:b9:ed:3e:bd:49:ee:0b:de:f3:3e:
f6:94:33:f0:e3:79:05:dc:3e:e8:63:8c:47:b4:1f:ef:56:6b:
dc:86:43:f7:e8:b6:b6:8d:ac:f0:7b:13:05:0d:43:04:3e:26:
97:72:70:91:20:2c:d0:a7:07:43:a0:c4:e4:20:28:d5:a8:9d:
3c:4a:6a:95:58:7b:17:be:23:d7:9e:40:24:c7:6d:7a:c1:dc:
12:b7:24:05:dd:78:68:68:60:08:11:fc:14:6f:7b:76:34:d6:
40:dd:8b:fc:f6:7c:1b:34:2a:56:28:55:e1:ac:08:c8:75:9f:
01:21:cd:f9:0b:dc:69:34:68:49:f6:10:54:da:2c:8c:97:d2:
f1:66:76:36:71:4e:83:e1:b6:46:6d:88:8b:b3:2b:07:9f:53:
48:37:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:54 2025 by rpki-client