
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
File: HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft (raw, json)
Hash identifier: g05b9W1ervbvfqZ3apL0kzbXU804GS9Ycs7xP+FmGJU=
Subject key identifier: 54:88:FC:EE:40:74:D7:2F:3C:EF:98:3C:AE:C3:77:AD:29:8B:5D:3C
Authority key identifier: 1C:53:53:A8:6A:BD:33:B1:A2:36:E4:07:CE:46:92:61:D0:63:61:50
Certificate issuer: /CN=1c5353a86abd33b1a236e407ce469261d0636150
Certificate serial: 01987C775EB0973F74AF455026BDB9E2B861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
Manifest number: 08A0
Signing time: Tue 05 Aug 2025 23:00:54 +0000
Manifest this update: Tue 05 Aug 2025 23:00:54 +0000
Manifest next update: Wed 06 Aug 2025 23:00:54 +0000
Files and hashes: 1: HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl (hash: 8lHtpLvMbpGEDeV46uOVWy9qfwG99eym+LvymQfV9EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:5e:b0:97:3f:74:af:45:50:26:bd:b9:e2:b8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5353a86abd33b1a236e407ce469261d0636150
Validity
Not Before: Aug 5 23:00:54 2025 GMT
Not After : Aug 6 23:00:54 2025 GMT
Subject: CN=5488fcee4074d72f3cef983caec377ad298b5d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:f8:77:33:0a:e3:84:47:28:cb:8c:f6:7f:
d8:a2:1f:3e:7f:96:bb:a5:2b:54:ae:a3:1e:01:be:
96:f9:0f:ad:3d:63:01:9d:d0:11:94:9d:8c:aa:2e:
85:9c:38:fa:8b:5b:cd:14:28:44:c3:96:e3:ef:2d:
8b:46:c5:bb:22:03:31:2a:cb:31:f9:eb:b8:e3:b7:
1f:19:03:be:a9:8a:32:15:bd:be:e8:19:26:ce:99:
6d:d8:e0:d9:a9:1a:43:22:31:23:2f:dd:a4:68:bd:
d9:3b:de:27:fb:da:75:d2:2e:da:41:25:e3:ae:06:
ef:ce:8f:e7:a2:56:f4:8c:e4:45:4a:76:dc:08:e5:
2e:6f:d7:a2:9f:e9:3b:97:12:28:9e:e3:e3:6e:6c:
fb:93:7b:d2:5f:dc:11:87:c8:ef:0c:ed:ad:65:bc:
2e:9c:01:03:42:9c:28:b9:af:8f:ad:84:be:f3:2e:
97:b7:64:a3:73:28:6d:6d:dc:8a:90:65:ab:a8:2b:
9b:34:4d:48:6f:2d:c2:58:fe:3e:db:58:72:00:9b:
01:c9:a0:08:08:79:eb:dd:d1:b4:dd:af:27:a0:e1:
ac:a1:fb:8d:e9:85:2b:98:35:e9:87:e3:97:fc:cd:
37:a1:d0:03:8c:f4:a2:d4:c2:6a:4d:9b:4a:5f:80:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:FC:EE:40:74:D7:2F:3C:EF:98:3C:AE:C3:77:AD:29:8B:5D:3C
X509v3 Authority Key Identifier:
keyid:1C:53:53:A8:6A:BD:33:B1:A2:36:E4:07:CE:46:92:61:D0:63:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f8:c9:1a:18:c0:a8:35:24:74:0c:87:ec:76:65:8d:8e:e9:
fc:76:51:5c:b5:8a:0c:da:f1:6a:da:f7:6d:89:b0:9e:89:e0:
61:28:89:96:bf:1b:8a:71:c2:e0:17:ee:3d:f9:82:63:e3:07:
fd:69:99:3b:46:75:b6:03:4d:d3:43:a7:55:56:3c:a4:97:70:
da:50:be:8a:1a:bb:8f:ac:24:c6:4e:d6:51:45:4d:33:96:d9:
b4:32:19:25:10:07:37:61:2a:82:81:c3:eb:56:a9:10:8a:20:
59:5d:e5:49:48:14:08:b5:a5:ca:cc:a3:8a:db:73:64:f3:6e:
19:ba:45:d4:72:f2:f3:b3:6b:6a:99:3b:33:99:17:94:8c:54:
da:23:7d:41:a3:e2:86:59:e8:1d:ee:3c:38:13:e8:9e:cf:fe:
78:ac:fa:c4:d5:03:28:87:96:0d:96:a4:f6:73:4e:76:02:df:
6f:eb:06:fc:8b:17:87:97:ad:11:22:2f:35:19:5a:f0:3f:7c:
72:8c:ad:1c:65:77:c1:dd:0e:d8:8d:cb:2d:29:69:20:4c:97:
d6:d9:fe:af:99:75:79:4e:60:d4:5d:85:28:53:a9:9b:49:58:
f1:52:f9:03:60:a1:14:e4:ee:0f:a1:e7:e6:de:5c:c9:88:68:
2b:fb:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:46:29 2025 by rpki-client