Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: iM/4Z6Bew1Ij/OuPHffL4ylcLNhlBcWjz+ndCK1oZko=
Subject key identifier: AE:76:F3:5D:F8:39:76:DC:9F:59:41:06:BE:B6:A3:28:60:07:D9:3C
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019921B21F7B5D6ADF5767D3EC9837727B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 074F
Signing time: Sun 07 Sep 2025 01:02:25 +0000
Manifest this update: Sun 07 Sep 2025 01:02:25 +0000
Manifest next update: Mon 08 Sep 2025 01:02:25 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: ya4h5FJ+0po9YuQqk6i8d0P6VeLkvCtmM/xfOsNW6A0=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:1f:7b:5d:6a:df:57:67:d3:ec:98:37:72:7b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Sep 7 01:02:25 2025 GMT
Not After : Sep 8 01:02:25 2025 GMT
Subject: CN=ae76f35df83976dc9f594106beb6a3286007d93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:dc:67:75:7e:63:0b:48:12:57:01:9d:49:
13:0b:22:e9:77:de:09:1b:03:b9:c8:86:0b:fd:21:
42:c6:ad:c2:9e:cf:70:88:92:4c:1b:7e:d4:80:12:
64:d8:4f:1a:58:3d:97:92:03:5f:2c:a8:27:e1:a6:
3b:f8:ac:51:c5:52:1e:3a:e1:c8:6d:70:73:04:bd:
5c:95:0e:f6:1b:a0:e0:89:e6:ef:e8:3a:f2:2f:eb:
b3:73:6d:c4:cf:e8:b7:8e:ba:a5:22:58:53:e3:23:
c2:a9:23:13:91:50:61:29:8e:85:2e:07:de:73:46:
30:01:dc:9d:21:6d:e2:53:f5:7c:e3:26:20:26:97:
d0:39:58:45:29:53:e8:67:10:7e:4b:ca:39:cf:26:
81:64:73:c4:f1:34:83:b0:00:56:f5:c4:32:60:b8:
6c:06:fd:81:aa:91:a1:c7:ec:bb:4d:90:fe:31:62:
c8:e7:b7:33:64:e7:2b:6a:85:a5:2f:09:4b:3b:24:
27:a4:71:fe:f6:9f:3b:3d:6f:91:2d:97:2c:63:5c:
6a:7f:f0:ca:b3:9b:ec:75:43:28:ef:8b:d9:9f:e0:
85:f4:27:fa:65:70:bb:c3:1c:62:d3:8a:81:cc:ed:
a8:4f:5e:b2:df:ab:36:e3:29:68:93:fc:15:2d:bf:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:F3:5D:F8:39:76:DC:9F:59:41:06:BE:B6:A3:28:60:07:D9:3C
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:99:50:4a:1d:23:21:98:d1:df:d9:9e:8a:98:c5:8d:c1:dd:
85:2d:8b:08:f2:3e:50:22:37:4f:5b:6b:6f:f1:a9:e2:63:7f:
78:4f:fc:24:ac:73:ca:27:44:b8:12:97:fe:f8:ac:79:33:98:
63:79:7d:7a:5a:7f:9c:98:22:69:ba:e8:1b:11:d3:79:87:71:
76:a4:df:49:2a:6e:3f:6a:ff:02:db:5d:66:63:26:89:ec:a0:
ed:a7:86:23:89:f6:cc:16:9d:fd:7c:0f:86:fc:92:d9:fe:dc:
3e:b3:67:be:da:70:41:88:d9:ae:e6:8e:67:82:7b:48:4c:68:
25:d5:e5:e9:40:b5:85:01:db:56:57:36:5e:0a:31:d6:be:77:
26:0b:e5:a2:63:f1:cd:80:de:a6:d4:5e:7a:87:ab:a1:b7:b9:
55:5e:05:27:b0:62:3e:09:14:bc:63:9f:6b:35:90:c7:8d:0c:
ae:8e:c2:74:8f:24:5f:9f:9e:05:12:3f:01:ce:fb:0c:35:f7:
82:7b:08:72:7f:dd:75:66:7b:9c:83:0f:7d:69:2b:84:0c:c3:
6a:0c:bd:8e:76:83:cf:74:21:b5:46:20:f9:a5:33:8a:ab:9c:
92:bd:a3:1d:17:4e:af:b2:ba:ba:7e:cd:74:9d:bc:bc:0f:e3:
43:79:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:45 2025 by rpki-client