Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: KnchRjWliBNa0WSkOSjn8wbK7sdQNXvuqNNf0jU2n0Q=
Subject key identifier: D8:A3:E9:B4:57:CE:1D:03:6C:FA:B8:2B:A4:97:70:D6:71:5D:EB:88
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 019916BF0D68EBF695486EF32C40E321A9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 0A6C
Signing time: Thu 04 Sep 2025 22:00:43 +0000
Manifest this update: Thu 04 Sep 2025 22:00:43 +0000
Manifest next update: Fri 05 Sep 2025 22:00:43 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: q0A3eXveHXrrv/e6IVrNAk5uq4BhF6myBqN/YyF30sI=)
2: bS6FP0-RWfuMzsBRZquHdjUbynI.roa (hash: kkw9ceZnHPEpX3rLpD2wmL4u+vt4FdSYPPqT4A+84KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:0d:68:eb:f6:95:48:6e:f3:2c:40:e3:21:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Sep 4 22:00:43 2025 GMT
Not After : Sep 5 22:00:43 2025 GMT
Subject: CN=d8a3e9b457ce1d036cfab82ba49770d6715deb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:64:9a:15:93:78:1e:93:c2:b1:af:e0:5e:
89:a9:67:57:cd:06:16:b5:c8:2c:d4:35:b4:32:b2:
20:38:ca:40:ef:e2:0b:fd:89:0f:45:61:0f:4d:7e:
12:e8:1e:17:78:a7:99:bc:ea:ee:bf:15:11:51:61:
0c:b9:8d:fc:30:97:e6:70:27:33:b1:05:78:21:20:
bf:70:3d:54:21:bf:2c:62:c4:1e:73:41:04:7f:c2:
c6:fa:bb:77:64:a4:af:44:1a:31:d9:e9:a7:92:6d:
24:c7:58:c6:ea:1d:c6:c9:bb:95:bb:87:85:16:2c:
4c:d7:da:31:cf:a0:a8:1a:d3:2a:1d:36:b4:67:32:
21:de:e9:06:ee:b2:d8:bb:f4:73:99:32:c2:f6:98:
e5:cb:62:ab:5e:4a:ad:af:d0:58:78:85:30:29:b6:
62:c0:aa:e0:d5:2b:ba:c7:c8:c4:e8:14:1b:2f:53:
9e:82:96:71:d0:7f:79:4b:61:c3:4c:7c:dc:f4:6e:
c5:a8:17:1c:46:d0:0d:61:16:47:9a:bc:15:8f:58:
8a:b9:c8:d2:ac:4c:91:20:c4:c2:bc:9d:74:14:27:
85:75:c4:42:06:64:4b:59:57:2c:99:e2:0e:a2:e1:
32:0c:af:b8:a5:6a:e3:96:d1:a3:e2:ff:ba:c9:4e:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A3:E9:B4:57:CE:1D:03:6C:FA:B8:2B:A4:97:70:D6:71:5D:EB:88
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:a8:89:a4:a4:10:5e:0b:64:f6:0b:25:12:4b:e2:c8:48:
83:d5:b6:21:d7:13:82:d1:25:3c:34:5b:e2:92:9c:00:4c:14:
9e:ca:a5:e6:ae:75:52:26:a2:d7:1b:ea:94:42:50:15:2f:48:
26:87:37:77:b4:68:aa:d4:45:6e:67:6d:18:12:9c:33:71:51:
43:e5:17:09:04:ed:7f:a5:8c:7e:ea:07:c2:ca:73:03:35:71:
f8:23:e6:3a:2e:e7:8a:c5:e6:b2:c0:d8:76:0c:70:22:26:c2:
76:c6:83:0a:9b:92:3b:36:e6:ac:02:90:a9:3b:de:ec:ef:d9:
ad:6c:b8:c4:91:91:be:43:23:1a:f3:aa:3e:92:94:75:50:cf:
9e:dc:41:f0:1b:07:e2:b8:34:75:6b:d7:d7:f5:78:5f:7d:ed:
5e:93:e3:c1:a2:8e:8d:04:54:f9:58:5f:d0:51:51:27:99:41:
39:f5:79:a9:db:48:5e:71:51:e8:f5:90:15:67:18:38:58:d8:
d8:a7:65:01:cc:3e:34:ac:1a:6e:92:f0:6d:91:43:b0:84:aa:
5c:3e:0f:c8:d5:91:85:c8:90:4a:5d:59:1f:e2:2a:ad:66:57:
46:d2:b6:aa:fd:f6:7c:d2:6a:48:ad:7e:8c:fb:f8:af:31:d8:
20:88:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:12 2025 by rpki-client