Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: kvtkuCNrgSGCNC5oskuWF32EElRj3dxk+fAcY6sMnuU=
Subject key identifier: AE:94:A3:CB:62:8F:6A:09:1D:88:1A:A6:5D:74:0A:A6:E2:F7:A9:8D
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 019923A09A1F15CBA41F2F3AFD7D5B732595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 15CC
Signing time: Sun 07 Sep 2025 10:02:31 +0000
Manifest this update: Sun 07 Sep 2025 10:02:31 +0000
Manifest next update: Mon 08 Sep 2025 10:02:31 +0000
Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: /JQrlQ4FOmW7fLr+9HlSsmHW0RzcPRq2bHOSKMgxQao=)
2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:9a:1f:15:cb:a4:1f:2f:3a:fd:7d:5b:73:25:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Sep 7 10:02:31 2025 GMT
Not After : Sep 8 10:02:31 2025 GMT
Subject: CN=ae94a3cb628f6a091d881aa65d740aa6e2f7a98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:3c:b8:74:09:b4:44:fc:1d:7a:b1:11:fa:
eb:8b:5d:e7:3b:8e:a8:18:25:7f:8f:ca:8c:ba:b3:
a1:c1:b8:f9:7a:8a:15:44:65:40:fa:c0:41:98:d1:
a4:f7:d9:da:e3:da:8a:88:a5:69:42:07:2d:63:95:
e8:8c:60:09:4a:25:8a:50:8a:65:6f:9b:47:53:aa:
8b:57:10:51:04:3c:9d:1f:80:87:f6:58:ae:70:bf:
62:7f:05:65:15:22:23:ea:f0:1a:5d:62:8d:20:94:
58:a0:e0:eb:6d:34:77:a8:1d:d7:87:42:e9:74:b4:
c5:37:78:dd:bb:94:17:2c:98:63:79:ef:35:99:f5:
c4:6e:a4:43:ce:be:d8:d3:0c:5e:e9:40:49:fe:98:
6b:c3:2a:66:12:e2:2e:e9:cb:cf:53:23:e9:13:f9:
c5:8f:ba:bc:bf:79:aa:1d:10:a9:c6:57:5d:ee:55:
67:61:3a:63:19:46:7e:b4:cb:5a:3f:c1:89:3d:66:
66:34:aa:39:1f:b2:2c:e1:0f:51:fb:c6:dd:3e:7f:
1e:23:a4:77:f4:69:10:ad:6d:4b:40:a5:24:38:0b:
62:e8:36:41:b1:10:bd:b2:e0:6e:2a:e8:3c:ab:61:
08:35:71:4f:f6:21:7c:d6:96:ba:32:b7:26:5d:cf:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:A3:CB:62:8F:6A:09:1D:88:1A:A6:5D:74:0A:A6:E2:F7:A9:8D
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c9:09:a6:04:92:57:a3:50:a4:f0:a8:48:19:c1:69:b1:ed:
32:f4:90:8a:30:f7:0b:38:b5:ae:25:be:b2:99:a1:74:4c:50:
78:bd:ac:80:36:e2:2a:b2:74:4d:ea:6c:3d:92:56:7d:52:19:
e2:22:c1:ef:fe:65:74:cb:94:04:8b:4c:9a:3e:0d:39:bd:3c:
8e:68:0b:f8:f1:4c:c4:72:39:77:da:19:36:7f:cf:34:4d:8b:
9e:b9:03:c0:41:26:8f:24:1d:b9:09:9c:fa:8a:ab:e6:5e:09:
aa:69:5b:fd:9a:57:04:c8:8a:29:ea:17:fe:14:8b:a6:49:5b:
4b:fa:d3:6f:69:a8:ab:bb:bf:8d:50:84:f5:b1:7a:34:39:a3:
b7:09:1d:bc:6a:82:fb:7b:9d:cd:6c:a3:9e:3d:38:fd:16:be:
65:7d:61:73:81:e3:1b:5d:c6:62:62:22:2f:df:0b:ec:db:a0:
5e:30:8b:c5:76:d5:5e:cb:d2:1c:22:a7:ac:45:9f:dd:10:f5:
87:57:b2:87:5a:2a:de:56:7c:8b:8b:c9:13:13:ae:d2:d6:a8:
d8:dd:27:35:64:e4:a4:60:e7:8c:4b:53:c1:f0:17:44:e6:78:
ee:44:06:5c:ab:0d:f6:1d:4b:b8:e8:03:7e:97:d9:5b:91:a0:
fe:6f:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:42 2025 by rpki-client