Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: YOblYM1M3k6U75xZuU/Ow2SP7J01t0rd5Fbz2qVWjX4=
Subject key identifier: E0:5D:A8:CE:EC:1E:EC:DC:06:65:F7:B5:8F:73:AB:9E:AA:FD:34:DB
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 019923311D9220D884CA2374299DA0A1DE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:00:45 +0000
Manifest this update: Sun 07 Sep 2025 08:00:45 +0000
Manifest next update: Mon 08 Sep 2025 08:00:45 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: JLaF767MDN82xAbFBPbJ+nIv02Cbxx+d1k3Iu6GWXmM=)
2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:1d:92:20:d8:84:ca:23:74:29:9d:a0:a1:de:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Sep 7 08:00:45 2025 GMT
Not After : Sep 8 08:00:45 2025 GMT
Subject: CN=e05da8ceec1eecdc0665f7b58f73ab9eaafd34db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:5e:d8:f8:b8:9e:c4:d2:ec:2c:b4:c8:1e:
9a:e9:24:7f:85:49:fe:e1:fb:0e:57:91:f3:b6:4e:
33:b5:b6:54:ce:9f:0c:18:30:db:36:22:dd:62:0d:
99:d6:6b:05:bf:4a:45:59:15:bb:a0:0f:b7:22:6b:
4c:d8:d7:e2:39:c2:76:5d:ce:4b:67:08:49:43:c3:
f8:9a:87:1c:04:89:bb:6c:19:9a:60:bf:8f:02:5a:
70:21:3d:2d:4f:5e:79:39:ea:de:cc:4c:92:5f:e1:
37:09:13:fd:6a:6e:b9:f3:01:2e:32:fb:b4:fa:6a:
eb:05:f6:9c:44:5b:73:91:43:85:6b:5b:fa:1b:93:
72:aa:9c:10:2c:de:5a:cd:4f:4b:46:f1:40:c0:10:
12:74:d8:21:0a:7b:5a:a9:df:92:19:5c:e2:c1:ba:
ac:0e:1e:c8:e1:a7:b1:ae:03:86:d2:5a:35:b2:4d:
d8:63:a7:65:7f:3b:14:ea:48:e8:29:51:1c:cf:2c:
58:a8:c1:f3:36:72:bd:87:5e:44:bf:71:9d:bb:18:
13:4b:a6:fc:e3:89:db:31:99:39:41:0c:67:73:62:
89:8d:1c:8d:0e:e6:fd:6d:28:4f:52:fd:05:b4:12:
15:47:bd:20:63:c3:cc:8d:76:2f:c5:0c:e8:10:83:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5D:A8:CE:EC:1E:EC:DC:06:65:F7:B5:8F:73:AB:9E:AA:FD:34:DB
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:20:c1:01:f5:a2:c4:a1:bb:5b:04:21:60:9f:c1:8f:3d:32:
40:eb:b1:aa:4d:7f:aa:37:b9:32:f5:22:18:fb:2d:fc:49:3f:
08:45:f3:a8:21:77:68:d7:48:95:9d:9d:42:5d:52:f5:35:b3:
aa:68:90:2c:ab:63:1a:dd:18:2e:4c:12:99:86:c2:72:47:6a:
4f:74:ff:cb:56:11:e3:99:e6:68:52:b8:ea:bf:b0:75:8a:45:
a1:c2:3f:bb:2d:96:ca:10:61:29:ab:23:0b:ca:27:62:85:0b:
79:94:9b:ef:c7:50:93:9f:1f:2f:a4:e2:21:d3:d0:c3:4b:82:
26:8c:26:dc:87:20:8d:49:2a:fd:af:20:0f:53:4f:60:54:b4:
9c:20:b6:56:58:f7:28:b0:ac:4d:8d:d2:56:d2:b3:86:44:5c:
44:32:ca:8d:72:70:45:e3:d9:b4:9c:12:18:fc:83:14:1d:10:
1d:79:6e:09:56:c7:cc:ab:18:0f:4d:41:d8:6c:06:12:ce:7b:
c9:4e:6a:3c:8b:70:6e:89:2f:c7:17:0c:d1:53:a7:28:79:f0:
0d:d8:ba:6a:8d:66:53:c8:18:2f:93:00:23:54:ac:b9:25:a4:
d8:96:3c:88:20:c1:6f:07:d2:17:f8:84:78:d9:f6:01:c2:3e:
4a:cd:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:21 2025 by rpki-client