Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
File: hUxfKY2BrMVXP9WfsF3YbyCry6g.mft (raw, json)
Hash identifier: 51zJFCHDCblqWkI+01lAY96A1BuFlb/3hARHfXYoJjQ=
Subject key identifier: C9:45:96:8E:98:49:A9:BC:DB:B6:26:94:75:84:E9:06:86:2F:A3:42
Authority key identifier: 85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
Certificate issuer: /CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Certificate serial: 0198CEA6FBB9AB8B6CCA382C3BE79148C722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
Manifest number: 10C5
Signing time: Thu 21 Aug 2025 22:01:46 +0000
Manifest this update: Thu 21 Aug 2025 22:01:46 +0000
Manifest next update: Fri 22 Aug 2025 22:01:46 +0000
Files and hashes: 1: CJqITen207ZODHzo1XtCMdI_VBo.roa (hash: f1FWG5pswdJQTpL1NXAace6jGLQD4G1flmSN2+tjCMo=)
2: hUxfKY2BrMVXP9WfsF3YbyCry6g.crl (hash: eTpnbPyjkVg2HXiOy68z1ygEclQQks0IIjIOePJDEwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:a6:fb:b9:ab:8b:6c:ca:38:2c:3b:e7:91:48:c7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Validity
Not Before: Aug 21 22:01:46 2025 GMT
Not After : Aug 22 22:01:46 2025 GMT
Subject: CN=c945968e9849a9bcdbb626947584e906862fa342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:27:02:54:cc:9a:72:bf:6a:d6:a5:fc:fe:
e4:86:e7:4e:00:fe:bc:dd:47:d3:28:d0:87:b6:b6:
43:5b:47:ef:60:e5:76:e7:3e:48:3b:fe:69:a7:99:
7d:5c:f7:43:3a:82:d2:dc:ce:d7:d1:f7:39:ad:6f:
c4:25:e5:bf:30:bb:6f:9f:d0:97:51:ff:9f:dc:52:
63:b6:1c:55:b7:d7:06:a9:ae:21:56:82:b1:48:f2:
5e:01:25:5c:43:c3:98:c0:c2:3a:8e:5a:31:4d:9d:
eb:e1:fb:92:6f:ca:d0:5b:31:33:98:16:7a:ef:2f:
19:6c:fa:98:c4:a2:e1:4b:09:75:1f:2e:d3:a0:72:
43:0d:82:62:a2:10:20:de:a2:07:b1:54:39:36:ea:
73:f0:32:87:51:17:b2:09:aa:a0:cf:34:08:d2:cd:
7c:13:14:23:3b:16:3f:0e:e5:1b:4a:c8:a7:0f:3a:
58:21:b1:37:4d:74:ec:ba:26:fb:12:7e:00:3f:d0:
c6:ab:33:0a:62:de:5d:e6:6a:53:0c:40:89:94:46:
ba:fb:26:31:03:3a:de:e9:bf:78:4a:f7:83:bb:ba:
bc:e4:cb:07:aa:57:ba:e3:b2:c9:1a:b3:86:88:f5:
78:66:af:d2:f9:e7:2b:48:17:01:6d:b4:b6:8b:49:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:96:8E:98:49:A9:BC:DB:B6:26:94:75:84:E9:06:86:2F:A3:42
X509v3 Authority Key Identifier:
keyid:85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7d:76:fb:68:8f:20:4a:ab:42:1c:67:da:f5:f0:2e:ae:d8:
9c:3c:7c:9d:13:99:e8:29:5c:6e:56:c6:cb:ed:8a:fd:7f:f2:
29:13:d8:16:0d:be:15:e2:16:6a:8b:51:58:18:95:7d:7e:ac:
ec:6b:91:39:5d:de:c2:14:63:d9:97:c7:04:78:7c:74:88:b1:
63:d5:82:18:26:cd:30:e3:23:18:bb:3c:7d:65:1a:d3:17:1f:
f8:91:93:00:3d:9d:23:d3:52:b9:53:4c:f8:8e:2e:cf:4d:28:
42:ec:87:c1:c6:ee:b2:80:03:48:13:76:3f:c3:8b:f8:fd:05:
1b:9c:ac:e8:60:ff:70:74:81:0f:37:f8:87:15:11:cf:3d:0f:
95:31:f8:be:53:22:1b:94:3c:56:52:94:f9:ff:f9:cb:84:2e:
19:36:b8:0f:3d:5d:70:93:15:5e:6c:14:e6:ad:07:ee:23:09:
46:37:71:18:6c:31:70:a7:f2:85:53:62:96:c7:b0:af:03:0c:
f8:0a:43:6a:99:19:77:fc:a4:82:8d:f2:85:09:34:be:6f:b7:
56:f1:63:63:0d:bd:89:72:51:0e:a8:a9:46:fd:fd:89:38:c7:
ae:35:43:0a:22:a5:03:68:3a:f6:0a:b7:1f:66:3b:6b:b6:e5:
e7:36:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 01:10:04 2025 by rpki-client