Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: gWbCJWOD93Vs4mFmzOWL56MdGqlbAt0Oa5VJ8biYIO4=
Subject key identifier: 9A:1D:80:AF:A1:82:04:87:6D:2C:BB:05:DB:07:CA:15:12:BD:11:55
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019932A390BB979640EA1A2E303BCE23AC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 0FE6
Signing time: Wed 10 Sep 2025 08:00:04 +0000
Manifest this update: Wed 10 Sep 2025 08:00:04 +0000
Manifest next update: Thu 11 Sep 2025 08:00:04 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: 63aYPlKES/d/UeumliY51Tq1tg3c6SQ2DmsxLUkOG3E=)
2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:90:bb:97:96:40:ea:1a:2e:30:3b:ce:23:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Sep 10 08:00:04 2025 GMT
Not After : Sep 11 08:00:04 2025 GMT
Subject: CN=9a1d80afa18204876d2cbb05db07ca1512bd1155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:41:40:e9:81:50:bf:b3:78:9e:41:89:1d:
3d:bd:64:3b:69:16:01:ef:76:1d:1d:d0:31:91:c6:
21:69:38:1e:23:68:62:2a:01:51:00:7c:e3:4f:69:
3c:0c:16:87:66:73:46:3d:cd:9d:81:5d:eb:1f:65:
62:d5:6a:49:5d:0e:6a:71:d6:32:d7:bb:63:2f:7d:
a5:b5:6f:34:de:4d:e7:1a:52:ab:5c:57:1f:91:cf:
91:53:55:ad:d9:f5:3b:32:43:42:72:e6:2b:9e:f5:
91:53:7d:ed:27:d6:f2:7f:6d:74:52:ae:ad:20:c4:
10:d4:2d:84:c6:3a:4b:41:62:e3:83:21:2d:4d:c0:
c6:6b:bc:5e:c7:29:ba:23:1b:cd:9b:27:8b:74:f6:
e0:74:6c:52:89:cf:fc:e0:85:25:aa:cc:12:3c:42:
68:2a:4b:05:c2:89:d7:3a:9e:37:69:cd:dd:14:fa:
34:cd:01:68:30:17:85:f1:69:6c:d5:89:c9:97:c1:
89:4e:64:f2:dd:0a:e6:70:5d:58:50:eb:bf:20:11:
a3:5e:cc:ed:d4:b6:57:0b:d0:6e:66:45:fa:36:77:
2d:a0:a6:09:84:ae:b6:42:c5:0a:ad:7d:35:98:11:
73:3f:48:b3:42:00:b4:36:7b:7d:c6:78:a5:71:6c:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:80:AF:A1:82:04:87:6D:2C:BB:05:DB:07:CA:15:12:BD:11:55
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b1:6a:24:b5:fc:72:28:83:10:89:b3:3d:94:03:a7:4e:fa:
f2:af:0c:ea:5c:9a:7a:ea:e6:7a:b9:e1:cf:c3:e2:73:d6:23:
bd:d8:03:b9:4d:6e:17:fa:c2:1e:9d:a2:36:25:f1:0b:4e:b2:
0c:dc:79:ac:e9:aa:8f:c9:21:16:0c:49:40:43:55:6b:3a:0c:
47:96:ee:2e:f4:d2:ba:f3:b4:1c:44:d5:cc:f5:d0:97:b8:f3:
d0:e5:ee:07:d7:7d:2c:45:fc:c8:23:69:b9:c2:77:9b:b4:1c:
ee:43:51:b9:24:17:b0:6a:97:0d:e5:67:15:44:31:00:b4:a6:
e7:c9:04:4e:79:31:8b:e6:b4:0d:86:6e:71:c1:c5:53:51:40:
a9:16:d8:3d:91:9b:07:cc:7a:bf:18:d9:64:63:63:3e:26:1f:
72:a5:61:8d:0d:82:d5:c5:15:d1:1a:a9:53:e2:b0:e1:18:5d:
fb:20:08:07:60:3d:bb:2a:6e:9b:8e:7a:7b:bb:82:bd:d9:e0:
21:a3:ac:28:7a:96:d9:e9:76:71:f8:3c:59:d6:4c:68:c3:7d:
c7:5c:54:af:88:b5:44:52:fc:1a:a6:25:f2:02:84:cb:ac:53:
01:3d:37:a1:16:e5:9e:09:1a:9a:69:ba:05:b1:26:f5:6a:47:
89:a4:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:58:14 2025 by rpki-client