
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: rtWCI2i1azmq9RjYbCxBfTBcj8OhQl6Bc7GWAST5yD8=
Subject key identifier: DA:D5:C5:3B:5A:8E:BB:FE:FB:04:71:48:FA:0C:6E:09:0C:A2:A7:2F
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 01988BEA30E480A454ED9E32FA730F073B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 0ACD
Signing time: Fri 08 Aug 2025 23:00:37 +0000
Manifest this update: Fri 08 Aug 2025 23:00:37 +0000
Manifest next update: Sat 09 Aug 2025 23:00:37 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: MO8tG3l2w/mD7NRHICe80tHq/BOG6Q6SkAPlPDaPsMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:30:e4:80:a4:54:ed:9e:32:fa:73:0f:07:3b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Aug 8 23:00:37 2025 GMT
Not After : Aug 9 23:00:37 2025 GMT
Subject: CN=dad5c53b5a8ebbfefb047148fa0c6e090ca2a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:d2:f6:72:43:45:fc:bd:c4:0a:1d:a9:7a:
8a:93:ed:ea:80:98:fb:41:81:0a:af:76:e1:82:f1:
93:31:83:18:3e:4f:01:ea:97:db:cb:cf:c1:7b:9c:
8e:1d:b3:89:3e:c1:a9:f1:64:a9:63:da:76:66:58:
26:f9:04:cd:7a:f5:a0:f3:5b:d8:e8:e6:35:8d:7d:
ce:1c:34:29:3e:21:57:26:e5:89:90:90:7d:3a:17:
45:10:13:18:c4:10:31:78:bf:21:2f:ec:f2:59:cd:
9c:0e:19:47:31:3a:44:0a:33:30:ab:9a:ac:32:be:
27:6e:4e:06:77:6f:a5:fa:7f:bd:1a:4f:7c:f7:ee:
82:91:d4:93:fa:4c:dd:53:ec:13:40:1e:db:fc:65:
05:af:88:bf:27:14:6c:a9:53:2d:7f:6e:7d:38:d5:
15:06:10:10:a2:cd:36:5f:ca:83:ef:12:a5:a8:e2:
da:aa:e1:81:0d:8a:7d:c9:4a:af:a0:55:e0:cb:b2:
b7:8e:6a:c1:70:d3:22:b7:10:54:82:29:db:ac:23:
b6:e5:2c:8e:61:32:ce:e9:c5:07:58:f9:3f:e1:c0:
75:79:d5:38:1d:07:3d:b8:9c:f7:20:90:ef:d3:96:
f2:25:ea:9d:b7:f6:d8:b6:9c:9e:1c:04:29:67:55:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D5:C5:3B:5A:8E:BB:FE:FB:04:71:48:FA:0C:6E:09:0C:A2:A7:2F
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ba:42:48:39:54:f1:c0:c1:40:3f:b7:5f:45:0d:13:a9:68:
82:77:d9:0b:0d:12:71:52:fd:3c:82:19:2d:86:a4:d6:54:94:
8d:dc:58:7e:fe:95:6d:da:de:a3:76:07:a4:5a:7d:82:19:7f:
4c:64:0e:ee:91:be:eb:bf:39:63:81:18:32:2d:55:af:30:10:
e5:c5:37:5c:b3:73:50:b6:46:02:6e:e4:e8:9c:1c:40:45:73:
06:86:47:94:e6:db:01:dd:49:9b:3b:ce:aa:91:45:81:d8:24:
3e:b0:51:3b:35:ce:48:3e:4a:2f:eb:25:a4:01:d7:d2:73:43:
dd:fc:e2:f6:c2:5b:d1:7e:6e:5f:a4:66:ac:e7:ba:c2:86:ee:
d4:89:c1:87:d2:b1:ef:6d:a0:62:f7:74:4c:70:a4:4f:8c:df:
da:3f:be:47:7d:93:ac:e7:0d:75:dc:d7:1b:ee:0b:c0:5e:b5:
a4:f8:28:12:0a:74:d2:9d:54:61:40:dc:70:3a:1e:d9:b1:95:
73:c6:78:42:07:9f:64:85:2f:dc:ea:a7:5e:36:75:b9:c6:d8:
8b:ba:7b:2b:ac:ec:62:d0:e1:9d:71:7f:91:a1:78:88:82:1e:
34:d6:c2:5d:12:48:64:84:35:47:f1:ef:91:ad:2e:d1:24:96:
bc:cc:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:56 2025 by rpki-client