Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: ndf3ZTrsawByWvrDvs/2ZOKo0HV2D6Dz+0PhqGwAsng=
Subject key identifier: 7F:E6:79:7F:78:63:A5:93:1D:FE:C3:10:1A:40:A3:56:F4:2F:F5:05
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 0198518D52D05F7B5BC4BB9456827F2EC025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 012B
Signing time: Mon 28 Jul 2025 15:01:12 +0000
Manifest this update: Mon 28 Jul 2025 15:01:12 +0000
Manifest next update: Tue 29 Jul 2025 15:01:12 +0000
Files and hashes: 1: 0Ai9U12mBfKyiWOFnwxyJgomY7A.roa (hash: w93SlMAnXeNUWu2aTB2M64qmn0qVbSFDgVMubrcribE=)
2: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: 7NSJq0nKAVHSnHh9pUqibrlm6xbmB0vKlF6657G68jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8d:52:d0:5f:7b:5b:c4:bb:94:56:82:7f:2e:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: Jul 28 15:01:12 2025 GMT
Not After : Jul 29 15:01:12 2025 GMT
Subject: CN=7fe6797f7863a5931dfec3101a40a356f42ff505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:3c:99:94:ed:22:c3:22:2d:4a:1e:20:d0:
20:08:05:1a:10:c6:54:dc:72:32:d3:e3:0f:fc:c8:
2b:e7:1f:35:70:31:92:53:7f:10:13:fe:4a:95:00:
6e:b7:f8:59:de:f6:65:3d:85:ef:40:23:1f:9c:a6:
80:61:85:3e:5e:b8:c8:3f:b2:1c:59:a7:90:7a:42:
63:85:16:3d:2f:0a:66:ca:e5:02:00:9e:62:34:f7:
74:47:a3:31:a8:e8:e5:8d:ab:c1:de:8b:f7:c8:49:
e8:75:64:d5:df:9c:a9:d2:8c:48:03:0e:50:0d:82:
9e:55:c8:af:09:c2:97:e3:f9:3c:79:57:2f:d4:42:
0d:3e:85:f5:10:40:41:ec:8f:74:6d:cb:27:c3:e8:
8f:a5:82:7a:fb:b8:8e:08:79:d6:f4:3d:bd:45:9a:
aa:f2:9f:bc:2e:19:dd:fd:4b:70:f3:29:b8:97:46:
c6:55:cf:1b:6b:00:17:08:be:1e:a9:57:a4:dd:d6:
fe:2f:ed:e3:7d:80:d8:a4:58:91:51:80:17:3e:d3:
79:ec:32:50:ff:38:58:c5:12:3e:8e:c8:74:09:06:
18:23:ff:6d:d2:e5:c9:31:cd:19:50:bf:1e:69:c9:
c2:28:62:2b:65:ad:8b:14:24:cb:6e:12:dd:93:6e:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E6:79:7F:78:63:A5:93:1D:FE:C3:10:1A:40:A3:56:F4:2F:F5:05
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bc:c0:4f:c7:43:b4:95:a0:2a:68:e4:5b:6c:51:77:c3:dc:
02:2a:f4:7e:f6:1e:c4:f1:e3:d5:6a:98:69:3f:2a:64:28:9c:
b5:fb:d0:11:66:3a:36:39:cb:d1:56:ac:63:93:17:9c:76:fe:
ae:74:97:d9:5b:d8:67:26:0f:16:03:cd:f3:24:fc:6b:60:d3:
50:db:38:c4:ac:2e:d3:4f:55:43:7d:35:0a:9d:1b:50:27:4d:
cf:a2:8e:ce:f4:fc:68:75:8e:d3:2a:18:2c:79:e3:ed:60:fe:
79:53:ee:87:70:02:31:7f:74:7a:c5:9d:5f:68:57:3a:65:25:
c9:b7:15:16:2e:69:d9:93:ce:ae:63:46:e7:09:c2:4f:ba:f4:
60:21:0a:a8:5f:8a:83:1b:28:2c:ca:8a:d1:eb:fc:02:e0:2f:
64:c9:9a:44:79:0b:e7:d0:b8:3d:13:d6:ba:c2:48:45:73:1f:
6e:b8:f3:8a:ea:b7:f1:e0:b1:1c:0a:ec:33:57:87:bd:0a:44:
81:81:54:3c:73:cc:5a:81:4f:4d:5a:7e:23:9d:99:13:93:ea:
d7:4c:cc:c7:f5:dd:0a:cd:99:fb:2a:c4:04:60:7e:44:e6:5f:
ab:f6:af:66:89:bf:73:20:9a:5a:ab:99:61:01:40:ca:64:f3:
c1:a5:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:07:14 2025 by rpki-client