Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
File: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft (raw, json)
Hash identifier: BmcN8xW/S7EeW7EiPEI7Hy0o234jP4TBBGkXWtaVkgE=
Subject key identifier: 2E:05:F9:F4:94:5C:93:1E:EA:44:C7:5F:61:A1:B7:3B:FC:86:42:2B
Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Certificate issuer: /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Certificate serial: 019922558463F3531E9567DDAD0EBE40268B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
Manifest number: 1057
Signing time: Sun 07 Sep 2025 04:00:53 +0000
Manifest this update: Sun 07 Sep 2025 04:00:53 +0000
Manifest next update: Mon 08 Sep 2025 04:00:53 +0000
Files and hashes: 1: 86_3LCbOcCp3yM191EWRi4FTvKM.roa (hash: T6YVBcckx9oAAL2sgQLtUYTYtIf9ZyYKJMrHcxK/x/E=)
2: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl (hash: 2cVMCba7mRzBLhRvgnJfU4T7MMtASgn6dF4FiK2wVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:84:63:f3:53:1e:95:67:dd:ad:0e:be:40:26:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Validity
Not Before: Sep 7 04:00:53 2025 GMT
Not After : Sep 8 04:00:53 2025 GMT
Subject: CN=2e05f9f4945c931eea44c75f61a1b73bfc86422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1b:9f:9d:0f:46:c4:c1:fd:a6:dc:16:64:95:
b2:b4:d5:04:38:f6:79:58:89:2a:2d:86:20:82:46:
18:3e:36:c9:4d:fc:d2:7e:26:d8:0d:5e:8e:9f:96:
0c:06:05:0f:98:b3:24:9f:85:5b:e7:10:f5:e3:3c:
f0:d7:32:df:07:7d:d9:a9:11:d6:8c:f3:b1:95:04:
45:12:7e:16:f6:7c:82:3f:3e:af:36:ae:3b:44:c9:
1d:2f:bf:d1:fb:c1:31:37:46:1f:a7:8d:6a:32:28:
90:4a:1c:7c:41:a9:63:01:a2:19:7d:1d:49:47:f0:
98:12:91:e5:96:ca:e7:31:7d:ac:3f:28:1c:92:8b:
8f:fa:86:39:20:6b:e5:3d:ec:80:d2:47:f4:89:4e:
d7:55:c6:0d:1a:c8:0d:91:90:a7:9d:22:17:4d:71:
a8:8d:70:01:8a:31:92:9a:3c:88:0e:5b:e0:46:b6:
4b:2e:a6:65:2c:84:7b:83:3b:57:37:66:e3:75:a5:
99:40:5d:68:94:c6:de:a1:57:b9:b2:43:9a:38:6f:
30:d2:e8:03:4a:28:d0:8d:7a:53:c1:33:8c:41:e2:
be:43:4f:b4:19:3a:a8:9b:9c:cc:e1:95:3e:9a:3b:
ba:c9:ec:e0:62:b2:d0:b9:db:d6:f9:e0:2d:3f:42:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:F9:F4:94:5C:93:1E:EA:44:C7:5F:61:A1:B7:3B:FC:86:42:2B
X509v3 Authority Key Identifier:
keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a6:55:02:29:39:2c:9c:ae:22:28:32:a8:03:59:32:ed:62:
45:dd:8b:c5:18:b9:84:a4:74:9b:56:6c:f7:fa:6e:07:44:82:
89:d1:77:9c:f6:b9:f7:bb:b9:24:45:dd:0d:82:47:af:ca:8a:
9f:dd:b3:18:ac:52:11:03:34:05:80:76:8e:f1:da:9a:6e:ab:
71:82:9d:24:47:8a:d5:0b:4a:4e:70:66:03:b6:b6:d9:ac:c0:
34:5f:8e:13:2d:38:81:97:a0:ef:4b:3f:48:a9:3c:cd:40:91:
bb:76:38:ff:7f:77:e3:c1:f7:4f:76:a7:70:87:35:a9:03:ee:
1a:c6:0e:31:5a:2a:8c:a7:2b:ed:8d:ab:07:0b:06:6e:ed:0e:
bb:c5:a8:01:c3:56:b7:94:56:6b:f7:da:0b:f7:02:2a:72:09:
90:8a:23:ab:3a:b0:a0:0e:0f:b4:f1:a3:50:20:08:f0:e2:d3:
a9:20:e0:eb:06:1a:66:72:8a:17:6b:97:a3:4d:51:38:91:f8:
7e:34:c7:23:06:64:9c:c0:18:54:57:7f:14:92:ca:d8:c4:4d:
76:bb:3a:a9:dc:44:2b:17:47:a7:91:eb:f8:42:66:3a:2d:98:
f9:18:1a:51:e2:69:49:8e:77:03:5c:4f:1a:c4:45:00:45:ac:
16:b8:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:21 2025 by rpki-client