Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: WCiI/Xh1737l/9wAuJZ2gwkkLK4ufOa4c5TKObHPgdw=
Subject key identifier: 2F:DA:66:C0:3B:49:71:06:48:99:CD:C6:E7:B2:2A:06:E6:18:BC:FC
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 01991688E72CB5D98A67DB5D493BC5A8E949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 166A
Signing time: Thu 04 Sep 2025 21:01:34 +0000
Manifest this update: Thu 04 Sep 2025 21:01:34 +0000
Manifest next update: Fri 05 Sep 2025 21:01:34 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: lC8B5MnYWfIP2WQ4bWKChuqp0yf4cRYxcYYuzUaCCAs=)
2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:e7:2c:b5:d9:8a:67:db:5d:49:3b:c5:a8:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Sep 4 21:01:34 2025 GMT
Not After : Sep 5 21:01:34 2025 GMT
Subject: CN=2fda66c03b4971064899cdc6e7b22a06e618bcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:a4:eb:18:58:da:74:39:ad:06:a8:06:d7:
b1:bb:23:92:8c:50:25:99:c8:2e:de:53:01:61:46:
e3:e3:4b:d8:7c:5d:d7:76:b1:2a:14:5b:91:e1:46:
9b:96:16:3d:6c:54:41:a6:75:ad:5a:6d:91:1c:67:
ff:45:0a:85:84:c8:2d:03:07:75:35:08:9e:81:8f:
14:a7:b5:c9:51:71:09:da:99:10:98:53:63:ce:81:
de:23:9b:87:c4:56:7a:63:28:36:ed:1c:16:52:10:
3f:09:cc:e1:71:ee:f0:fa:37:aa:3e:1d:ef:3b:8e:
94:e9:fb:37:55:1c:18:b5:63:5a:75:3f:19:90:c9:
e8:24:52:2f:5a:94:97:df:84:52:4e:2f:c5:45:40:
c8:16:0a:d4:68:5f:c7:a3:7a:1a:57:04:a4:4d:85:
64:ad:cd:77:31:a0:77:01:3d:b6:2b:e3:b0:ae:08:
94:b1:56:5d:3d:a5:cb:79:41:28:71:72:fe:64:39:
ed:ef:6d:79:b7:13:b0:31:7e:1a:c9:a9:65:81:3b:
6d:e2:d5:9d:34:d4:09:e0:ed:29:b3:dc:17:36:5a:
d9:67:7a:62:47:b9:1f:86:92:7c:11:49:bf:48:f8:
1b:b1:b5:6a:de:50:68:4c:ec:a7:cb:17:3e:4f:bd:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:66:C0:3B:49:71:06:48:99:CD:C6:E7:B2:2A:06:E6:18:BC:FC
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7b:93:2e:37:ec:56:9f:4c:57:76:11:7c:4e:cf:90:56:cd:
67:41:e0:f5:94:bb:eb:3a:d6:ad:74:1d:a2:df:c0:31:e3:d4:
7a:dd:3b:16:a0:14:78:ee:41:dd:06:c5:08:5b:f1:70:c9:96:
69:e3:f7:65:af:39:16:bc:f5:5a:7d:22:db:fb:b1:28:b4:02:
5c:73:8e:dd:68:26:7a:3a:b8:a8:8a:28:dd:aa:c4:90:b2:75:
74:ff:5c:af:7d:c9:56:ee:8b:c1:f5:6a:05:44:23:e9:b6:c2:
b0:85:ca:48:83:2e:e9:21:ca:94:16:76:00:b6:7f:6f:90:f9:
57:0a:58:a3:45:83:36:e4:4a:86:3c:e0:3f:04:3d:02:93:d5:
75:eb:19:99:1b:24:e9:5e:45:2b:e4:46:87:c9:db:e2:e0:d7:
93:73:cf:32:72:7c:80:90:c0:b6:8a:dc:13:d7:dd:93:0a:c4:
6b:e4:1b:1e:7a:bf:b4:e7:82:6f:b1:f0:16:f9:21:dd:a8:09:
1d:04:11:4e:23:46:9e:70:4d:9e:05:11:ee:9f:e3:9d:72:b8:
a4:f7:29:24:a0:2b:3c:08:a7:54:bf:02:e4:e5:fa:72:c3:cc:
fc:8c:8f:d7:aa:73:fc:a8:be:f6:85:27:d7:c1:d9:f4:2d:c7:
3d:21:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:27:20 2025 by rpki-client