Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
File: hcAE7tTPscJ2cTgiL_wJUooqXIY.mft (raw, json)
Hash identifier: /4BcVdWdBHI1Gv3jHYjPi4+7zmxMvfO4B9NYt5/WZTk=
Subject key identifier: C8:D6:B2:87:9E:E6:45:17:96:BF:9B:89:15:D6:F4:AF:8E:94:F7:3E
Authority key identifier: 85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
Certificate issuer: /CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Certificate serial: 01992255E2538F1F9857A0A82B6842A414CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
Manifest number: 2E
Signing time: Sun 07 Sep 2025 04:01:17 +0000
Manifest this update: Sun 07 Sep 2025 04:01:17 +0000
Manifest next update: Mon 08 Sep 2025 04:01:17 +0000
Files and hashes: 1: 7TL45FNYtrXr6cYEMzlJ0xM19tA.roa (hash: AkAdvmK+KKLZ/hW3c+GoX6JUBJ/Tn/r+Hpuz7kRNXhI=)
2: hcAE7tTPscJ2cTgiL_wJUooqXIY.crl (hash: d7e5dkw5KMOles1OOc8ljVcw1+0AqvIlyDlggJcs7EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e2:53:8f:1f:98:57:a0:a8:2b:68:42:a4:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Validity
Not Before: Sep 7 04:01:17 2025 GMT
Not After : Sep 8 04:01:17 2025 GMT
Subject: CN=c8d6b2879ee6451796bf9b8915d6f4af8e94f73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:70:03:44:88:11:5d:48:63:27:2f:4a:96:
57:01:de:6a:f9:52:42:81:0e:d1:53:9b:4c:a4:15:
0c:61:f0:35:ab:b4:c0:7b:b6:76:32:7f:a4:c1:4c:
d1:ef:bd:e9:2c:a3:71:13:c0:a4:83:ed:47:53:9d:
7a:68:e3:35:c2:4b:fc:fa:d6:e4:38:ba:0f:34:95:
1c:16:9a:1b:69:83:cf:52:80:a3:26:e6:3c:86:c7:
1e:4e:8c:07:fa:43:0e:60:7b:29:1b:b9:df:0f:cb:
37:84:90:f7:d3:89:c2:79:5b:10:d2:84:c5:e7:f2:
ee:1a:47:87:b5:de:b8:0b:d9:bd:aa:b1:91:08:a8:
cd:07:94:54:bf:97:e9:44:ef:fb:d5:79:ca:de:0e:
c9:9e:0d:d9:9e:7b:5c:75:cc:a4:0a:c7:ae:67:1f:
1e:c9:40:69:58:4b:68:e6:a7:bf:ed:c6:15:30:ff:
e2:2d:a9:97:3b:fc:03:b0:68:d3:0c:3a:e6:06:8c:
0c:a7:26:87:64:cd:bb:33:1f:33:9b:a3:71:aa:cc:
13:64:ac:60:9e:22:45:67:d7:54:89:c9:94:23:bf:
3e:5e:f1:23:46:75:c0:1b:1a:00:20:a1:97:b5:26:
ac:a3:da:1b:55:83:c9:39:ea:67:96:ac:06:c9:06:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:B2:87:9E:E6:45:17:96:BF:9B:89:15:D6:F4:AF:8E:94:F7:3E
X509v3 Authority Key Identifier:
keyid:85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fa:0d:27:d1:8b:fe:a2:18:39:e4:fb:ae:12:76:bc:c3:67:
45:71:b4:51:b7:3b:96:03:c1:17:89:a7:63:24:81:c5:6a:d3:
50:27:fe:e1:40:5c:c5:c2:ae:9f:42:a4:48:28:de:a4:29:c9:
ff:47:e0:cd:30:00:83:c8:44:c0:2d:d9:fb:e7:47:8c:9c:d1:
79:ed:e8:c7:f6:cd:ef:48:c2:e2:db:cf:0b:fc:a0:0a:c1:d0:
83:c6:22:91:2b:c4:3b:ef:7f:d8:78:93:e8:93:5f:b4:14:02:
31:2c:b3:8b:d5:37:a5:f7:4f:2f:e2:da:16:9e:a1:51:f1:2f:
47:db:8b:aa:13:73:3f:90:61:9d:6b:a8:55:85:7c:88:3c:33:
3a:3b:a0:d9:3d:d9:46:a3:e6:9f:8a:19:e0:8f:b8:8f:06:01:
fb:0d:c6:49:1d:ee:e5:8b:ba:ee:c2:df:f3:8a:33:4c:3f:57:
e1:e0:0f:fc:6d:f4:e0:c2:7b:02:67:a1:03:89:fc:3d:29:8d:
da:c3:b3:e9:9f:50:f6:86:b1:8f:8d:2a:7b:58:73:9e:b5:01:
17:8b:b4:8f:92:e1:b5:70:90:70:3b:1c:d2:87:d0:3e:60:93:
93:ff:1d:88:16:5c:10:24:04:34:ad:8c:06:6e:9e:b1:83:29:
88:09:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:26 2025 by rpki-client