Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
File: HRAqymzxNRE4UpTnfb4nN2jAoEs.mft (raw, json)
Hash identifier: 4036dSqyNoV0zqgnHW1l5gnlRwL70Vc5lWfLa8fKkoU=
Subject key identifier: 21:D3:57:FF:1B:3F:DA:66:A3:00:8D:68:EC:18:30:00:9D:7E:D3:6A
Authority key identifier: 1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
Certificate issuer: /CN=1d102aca6cf13511385294e77dbe273768c0a04b
Certificate serial: 01988EEBBABF7AE08865E2E7C43A792CC803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
Manifest number: 0B02
Signing time: Sat 09 Aug 2025 13:01:10 +0000
Manifest this update: Sat 09 Aug 2025 13:01:10 +0000
Manifest next update: Sun 10 Aug 2025 13:01:10 +0000
Files and hashes: 1: HRAqymzxNRE4UpTnfb4nN2jAoEs.crl (hash: ZJ+Wb3cFqf2Va+yXTdiIWkCyXRP5o8PZ1lIcK/9e3nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:ba:bf:7a:e0:88:65:e2:e7:c4:3a:79:2c:c8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d102aca6cf13511385294e77dbe273768c0a04b
Validity
Not Before: Aug 9 13:01:10 2025 GMT
Not After : Aug 10 13:01:10 2025 GMT
Subject: CN=21d357ff1b3fda66a3008d68ec1830009d7ed36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:51:92:cb:6e:e0:91:d2:61:c3:a5:9e:b6:
b4:13:8f:d8:7d:0a:b5:90:e9:76:23:4b:d8:76:dc:
b1:67:78:3f:bc:b1:f9:15:d8:4c:11:87:41:2f:59:
18:e5:db:40:16:e4:5f:68:25:e2:b6:88:28:05:82:
b9:c7:f8:b3:ee:c4:27:b8:64:2a:e8:2d:38:85:c1:
c3:ec:52:89:52:e1:1f:fa:bb:2f:f9:a5:bf:86:d1:
74:66:ef:6e:4a:3b:20:c4:dd:d9:96:af:08:bc:4a:
13:70:1a:24:60:e9:2f:e0:ed:09:25:bc:2f:f6:e0:
80:18:6d:2c:bc:ca:3d:bc:ef:90:85:b1:73:cc:2a:
be:59:60:18:24:f9:76:9e:d7:b8:4f:a1:29:15:c4:
e7:1e:bf:e2:f2:dd:69:4e:7e:68:6e:86:8f:1a:30:
58:bb:3b:78:54:0a:30:62:ea:16:cd:8d:22:dc:72:
ba:b2:51:38:c3:ea:2b:a9:6b:9c:da:ac:8c:51:76:
6d:30:ea:af:01:2e:c6:66:7e:00:79:20:95:c8:49:
92:42:6f:bc:be:60:21:7f:7c:79:15:ff:87:e5:25:
ce:5d:9b:bc:2e:a0:89:07:f5:1c:5d:88:3b:44:94:
a4:f2:4f:90:df:32:b1:96:23:d7:f1:e1:82:90:d1:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:57:FF:1B:3F:DA:66:A3:00:8D:68:EC:18:30:00:9D:7E:D3:6A
X509v3 Authority Key Identifier:
keyid:1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:91:65:dd:65:78:2c:79:63:bf:bd:f8:1e:de:2f:14:c8:b5:
c6:ab:1d:08:e3:04:79:53:64:dd:e2:3f:49:28:5e:93:07:a4:
3c:4f:e7:4a:31:43:ce:78:c6:45:58:ea:85:04:fe:ed:3c:37:
dd:3f:1a:3f:9e:cf:2a:d4:bb:c0:e0:23:55:c3:42:ce:fb:20:
ce:36:7d:e1:89:1f:61:ef:fc:df:cb:fd:e3:ca:28:1c:2f:d8:
30:c3:89:b3:3d:f5:4a:0a:4b:ff:08:c5:77:8d:6c:02:ef:a5:
ab:8c:93:4e:4e:2c:08:3e:69:af:ee:8d:93:f7:32:93:c8:e1:
d4:a8:7b:16:a6:66:0b:6d:a8:ec:a2:97:0e:d9:d0:e4:28:07:
da:38:58:62:82:c1:a8:3e:95:03:0c:00:2e:b9:3c:4b:9b:48:
80:6c:3d:71:37:3c:d3:d2:b2:73:72:fc:47:9d:c6:e7:ae:44:
e6:c5:87:5b:25:c4:32:b7:3c:35:b6:6d:71:90:88:ee:f7:34:
2a:aa:35:4b:d3:1b:93:62:de:8f:76:6e:96:bf:d5:1c:6c:26:
a6:65:5f:76:b3:7f:75:04:19:9b:54:14:32:97:ba:29:3d:50:
2e:0d:31:cb:28:1e:18:f6:66:b3:49:49:d6:e3:56:86:b8:24:
82:ff:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:47 2025 by rpki-client