Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: Gz1Cr5dmGn8q9jtC5DNXG9kJWLmpisR1ol2fnXjaOx8=
Subject key identifier: 8C:01:5C:3E:49:1F:FF:CC:78:6F:E0:15:CE:6B:A2:09:86:4F:90:6F
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019849D2D085CBD044E87F7C5DA9AEDA9EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 05C1
Signing time: Sun 27 Jul 2025 03:00:09 +0000
Manifest this update: Sun 27 Jul 2025 03:00:09 +0000
Manifest next update: Mon 28 Jul 2025 03:00:09 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: aeXeEWZ1aKjettL57JPmouj1dRHuWD4siLgBDLTWA20=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d0:85:cb:d0:44:e8:7f:7c:5d:a9:ae:da:9e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Jul 27 03:00:09 2025 GMT
Not After : Jul 28 03:00:09 2025 GMT
Subject: CN=8c015c3e491fffcc786fe015ce6ba209864f906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:ff:a6:ac:fd:88:cb:a8:a3:34:05:c0:98:
ff:31:df:31:1c:b1:cd:84:10:67:44:e4:ba:b5:92:
3c:58:25:7d:54:bd:c5:2a:93:c0:dc:62:d6:cb:0c:
ea:f1:64:e3:42:a1:a9:05:5f:c4:e4:06:98:21:04:
71:c5:55:81:33:81:98:3b:74:df:e5:a2:48:de:f0:
55:67:b0:67:b3:c7:68:d5:f7:40:16:b5:c8:f3:ed:
36:93:36:78:e3:37:97:5d:cd:a3:af:2b:93:13:20:
f8:42:5f:0a:69:42:ec:96:36:8e:bf:7c:28:65:4f:
b6:b0:8c:51:9c:c6:57:6e:35:22:0d:cb:c8:37:0a:
11:7c:8e:21:f2:b4:5c:4f:6d:26:20:05:aa:0c:c5:
0d:37:6b:61:43:08:21:df:2c:4a:7d:13:dc:e9:1e:
01:64:98:7f:c3:ce:79:82:8d:a5:c6:d4:e1:03:35:
51:49:ae:49:e4:b9:5b:ed:be:ce:4c:13:1f:37:6f:
7e:fa:c9:98:3d:45:29:a3:7c:85:09:70:88:32:ba:
36:bf:1f:79:80:a3:35:59:ab:be:71:a3:c2:52:ab:
0a:63:3a:f4:10:3e:42:78:fd:7e:32:23:7d:48:8b:
2e:a0:4d:4a:f5:76:c2:b3:bf:68:b7:00:08:43:cc:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:5C:3E:49:1F:FF:CC:78:6F:E0:15:CE:6B:A2:09:86:4F:90:6F
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:23:43:24:f0:1c:f1:1e:5b:21:a5:ca:22:f9:4a:68:bc:5c:
26:46:ac:aa:d5:18:bc:1f:f1:2f:07:4b:b1:d8:7b:07:77:2b:
dd:0b:7e:c1:1f:69:78:a3:e3:ef:00:2d:1d:97:84:2a:02:41:
39:a0:4b:41:2e:76:28:cd:2f:46:86:49:9a:fe:90:8e:18:25:
52:c2:d1:0d:37:7e:e3:ec:fe:05:a0:de:2b:0d:25:45:02:11:
65:89:34:bc:37:37:a8:9b:c0:94:6b:49:7c:fa:26:e5:3a:49:
3c:a8:5d:7f:a5:ac:1c:f9:a4:2b:b8:95:09:8a:73:16:3c:cc:
21:7d:3a:70:5e:3d:be:89:a1:6c:9f:b2:8e:da:9b:17:20:c8:
ce:8a:d8:69:d0:e2:d9:f3:e9:32:d7:c1:66:c7:da:6d:e4:18:
4a:36:92:e2:6c:2d:da:e6:4f:76:0a:10:d1:ea:f9:6d:f5:f6:
7d:f9:e6:66:13:ae:8e:1c:52:45:bd:89:6d:49:82:3f:a5:90:
3e:d8:78:e7:db:ca:a2:85:92:2a:5f:fa:d0:43:71:c2:ae:98:
93:40:2d:e1:e2:b7:92:11:21:b7:b4:3f:e8:49:0a:c5:c8:c9:
59:c1:ed:c7:a4:26:45:fe:1b:56:53:e6:ce:0b:70:a2:e9:45:
36:71:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:06:06 2025 by rpki-client