Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: 2mQwJfwMcfvyqgcIciZoLvs/4CbAYaqFdSLuaxzg0Cs=
Subject key identifier: BC:CD:72:1C:86:F2:18:87:B7:5A:41:69:C3:6D:07:AF:C3:81:C7:DF
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 019892C98B7FD066CB819C2DE7202D1650B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0763
Signing time: Sun 10 Aug 2025 07:02:18 +0000
Manifest this update: Sun 10 Aug 2025 07:02:18 +0000
Manifest next update: Mon 11 Aug 2025 07:02:18 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: JjLO3FmNa5X0E7hqHLG0/ni5rSEsiy14GiuoXSPCVcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:8b:7f:d0:66:cb:81:9c:2d:e7:20:2d:16:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Aug 10 07:02:18 2025 GMT
Not After : Aug 11 07:02:18 2025 GMT
Subject: CN=bccd721c86f21887b75a4169c36d07afc381c7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:27:73:6a:92:25:ae:cd:ce:09:f2:29:43:
15:1b:cc:47:40:10:76:cf:d2:ad:c6:d0:d2:64:dd:
8c:64:24:4a:56:fc:19:ec:85:b6:25:6d:ab:12:a9:
92:b2:28:d1:5d:f5:41:91:5d:1b:71:0a:6b:65:f6:
66:03:4a:21:0f:64:ba:bf:2f:05:63:47:32:29:1a:
8c:67:24:cd:08:3e:53:cb:b6:78:a8:d9:e3:6e:f9:
5c:e7:2d:12:ec:b3:51:2d:88:41:2b:1a:71:25:a8:
d4:67:5c:d7:9b:e1:44:d0:d5:81:62:31:a0:e3:b2:
c3:46:22:c8:1e:d9:29:13:69:5e:4a:0e:d5:3a:26:
83:15:dc:d5:36:7c:2f:7a:de:df:f3:99:62:d9:18:
df:86:c3:dd:f3:bd:80:f3:86:97:bb:eb:1d:96:7b:
fb:6d:66:9a:34:0b:75:45:c0:2e:fb:6c:49:f1:89:
02:da:ab:29:ab:2a:56:09:73:cd:de:c8:43:7e:62:
1b:d5:28:53:1e:35:87:18:3a:ce:24:7d:2c:0b:6c:
a6:32:d7:39:3b:b2:35:e6:23:5c:87:54:f7:b9:25:
97:e6:a4:8f:69:36:1c:74:14:74:93:c4:f3:71:d0:
ea:24:1c:93:73:8b:8c:93:22:09:fe:62:ab:49:53:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:72:1C:86:F2:18:87:B7:5A:41:69:C3:6D:07:AF:C3:81:C7:DF
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:69:e9:db:6d:4c:63:45:1d:86:47:1d:d1:b5:96:bd:90:97:
81:aa:3a:2f:24:44:3b:e0:50:a6:31:b0:94:52:32:07:f7:91:
cf:3d:22:e6:e6:1c:44:de:6c:8c:87:46:85:4e:32:20:01:eb:
bb:4e:48:86:16:d6:07:c5:87:39:bd:0b:bc:73:fb:a8:98:5f:
98:e3:a2:e4:40:a6:07:6c:59:f4:5d:06:bd:78:cd:13:6f:76:
74:d7:d4:05:50:5e:19:f8:1a:11:db:f7:31:f2:04:7c:37:b9:
04:a8:b9:97:e8:8e:9b:65:55:d9:4e:a6:7a:89:c9:e5:c3:06:
58:bb:5b:d3:3d:ce:54:96:3d:c9:48:e0:56:0e:39:c8:f9:84:
2e:d7:87:f9:62:cd:28:8b:d6:7e:5e:e9:9a:28:0c:ad:6a:f6:
e7:af:3c:6e:b8:06:df:32:7d:53:18:4f:1e:98:54:28:ac:c7:
0c:d2:da:63:22:63:11:04:1c:36:72:5c:bd:d0:99:0d:fc:cf:
08:76:56:f1:5e:8a:d6:3e:ae:cd:9e:b5:80:74:79:71:36:52:
ad:89:95:b4:fc:43:6b:09:2b:95:9e:a9:6a:d7:b9:96:f7:f2:
31:7a:f0:ac:c1:b9:52:70:d8:0a:53:39:3e:ce:fb:4d:50:d5:
1f:b5:70:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:48 2025 by rpki-client