Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: i0pky7glqCsz7bU8Mw+wyEcSZ9pHYzJBYrJg08sRMq8=
Subject key identifier: B8:0A:A8:EB:BD:51:51:D3:C9:56:34:E4:2C:DD:DE:DB:B8:61:17:A7
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 0198CC4ADB7FA4A7A9358B78504F2900974B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 05B5
Signing time: Thu 21 Aug 2025 11:01:54 +0000
Manifest this update: Thu 21 Aug 2025 11:01:54 +0000
Manifest next update: Fri 22 Aug 2025 11:01:54 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: jWM7adZaQYvHX9vS7EbJXo2Eqh6mwFLR5sUjZFPn6Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:4a:db:7f:a4:a7:a9:35:8b:78:50:4f:29:00:97:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Aug 21 11:01:54 2025 GMT
Not After : Aug 22 11:01:54 2025 GMT
Subject: CN=b80aa8ebbd5151d3c95634e42cdddedbb86117a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:29:12:bc:71:b3:ef:4a:83:91:94:e4:ef:
0d:c4:28:0d:50:fe:e0:e8:03:78:c5:91:a4:0e:5e:
7e:87:3c:30:6c:be:a4:be:92:df:1a:ee:f8:66:34:
52:66:b5:b6:00:f0:78:af:4f:88:df:f9:23:55:ff:
33:9a:3c:f9:3c:80:65:03:3c:1e:7b:a9:9e:be:52:
bc:a3:65:ef:85:68:2c:43:62:41:eb:e6:c5:b2:c5:
65:6d:0c:ba:6d:31:a7:ed:e8:2c:06:18:8d:d3:89:
3b:25:8e:5b:f5:49:87:e7:55:d8:f7:51:4f:ab:0a:
91:71:e1:a6:de:72:62:9d:36:c0:d0:80:e2:c8:4f:
a4:3a:31:07:a6:66:5d:ab:9b:af:dc:3e:98:e8:27:
ec:7f:18:9d:b6:a1:85:b0:81:5c:e9:a9:9a:15:3f:
e0:26:38:9a:28:85:f5:14:b2:b5:b8:78:a0:28:d6:
60:2b:fa:85:de:f6:72:72:b9:ec:8f:ea:d6:fd:90:
ac:9e:ed:cd:27:3e:ec:29:78:6f:63:2e:54:63:4c:
b3:57:e9:f3:96:09:04:6d:ef:30:62:c3:dc:df:d9:
b4:6d:0c:63:16:c5:d3:98:25:f1:aa:ef:5e:6f:34:
92:fa:e9:70:9f:c0:d2:e2:e6:6a:05:54:64:3f:c9:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0A:A8:EB:BD:51:51:D3:C9:56:34:E4:2C:DD:DE:DB:B8:61:17:A7
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f5:cc:29:39:f9:b7:12:67:35:50:c8:b5:e5:6a:16:49:c9:
76:11:26:24:53:6c:44:fb:70:21:cd:84:eb:0b:2f:19:62:cf:
5e:c4:13:72:8d:89:df:2a:3c:2a:ce:c2:91:f2:f9:3e:5e:74:
fe:d8:b8:bb:d5:6c:08:2b:63:a9:ae:71:d1:e3:74:b5:08:4c:
e4:4f:43:10:44:3f:31:f2:b9:b8:31:34:8e:28:bc:24:b6:67:
65:75:db:2c:40:f5:d7:57:29:6d:3d:81:67:54:30:37:51:45:
68:f1:f1:f8:82:94:14:0d:92:96:d8:6b:86:58:01:e3:19:bd:
31:a1:b6:1e:cd:79:dc:8b:ee:23:da:2c:c8:2e:9f:73:ab:24:
1a:e3:a3:f5:a3:0d:81:3a:43:9c:0d:36:c9:d4:61:82:98:42:
95:58:b8:ce:c5:9a:34:21:c7:71:e7:db:dd:84:84:65:a1:f4:
c8:d0:81:88:70:1a:08:d4:bc:d7:1f:41:25:44:bf:88:da:8c:
42:1b:4e:30:4f:58:61:42:b4:9b:6d:f0:21:91:f2:10:03:22:
7f:db:30:40:5d:fe:a0:4a:eb:bf:b6:1a:cd:6c:dd:3f:ab:78:
cf:48:c8:22:d1:c8:4b:8f:7c:1b:66:38:d1:71:54:e8:b5:90:
1f:f4:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 17:43:12 2025 by rpki-client