Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: HOlZMCHYIspnZeSl+eL6WpYe+CjCuxiBDTXyj4AAais=
Subject key identifier: FB:85:5E:22:D3:4E:8B:F5:97:AD:D7:7E:3B:E6:72:A4:19:A1:85:7E
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 01988920059643D6F4365F8EBC3FDF212157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 1254
Signing time: Fri 08 Aug 2025 10:00:33 +0000
Manifest this update: Fri 08 Aug 2025 10:00:33 +0000
Manifest next update: Sat 09 Aug 2025 10:00:33 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: yN5lgsrB80DyAf0iw3+ont0Lg1RXm6AaRG/toe8Com8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:05:96:43:d6:f4:36:5f:8e:bc:3f:df:21:21:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Aug 8 10:00:33 2025 GMT
Not After : Aug 9 10:00:33 2025 GMT
Subject: CN=fb855e22d34e8bf597add77e3be672a419a1857e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:c3:d4:42:29:ad:bc:b2:80:28:b4:5c:6d:
00:41:e2:de:51:7b:66:ad:ed:e9:c8:a3:c7:32:67:
db:14:ef:38:84:25:89:f7:95:ee:9b:62:ee:29:0c:
fa:b5:27:88:11:d8:60:28:81:4c:23:0e:fa:1e:c2:
fb:14:59:d9:cb:c4:40:c3:01:84:54:e6:a2:ac:7c:
86:3e:56:b7:81:24:5d:1b:8b:3f:8d:ae:8c:13:f8:
0c:45:12:98:10:e0:20:66:d5:3b:96:25:37:66:4f:
00:57:fd:92:3d:7e:84:a6:14:36:f2:db:06:16:10:
23:35:b8:96:ae:8a:ab:0a:29:c8:42:8c:4c:1f:b5:
ee:f8:b2:35:54:42:3b:9a:ad:0a:63:e8:a8:94:0e:
ca:4f:57:91:7b:0e:16:c5:0a:1d:6e:97:59:31:51:
95:2f:d3:ba:76:65:a5:cd:41:4a:62:dc:33:4e:e8:
a8:65:9c:76:c8:ba:84:55:9c:1a:21:81:4e:54:a6:
66:f6:40:01:02:17:c9:4e:f8:ea:de:e3:13:d1:9d:
25:bf:c5:dd:b2:8b:33:2e:f4:da:04:c1:df:c3:33:
6c:d8:84:ae:08:80:a4:5d:16:73:5f:df:45:ef:4a:
d5:7f:ad:f0:2f:71:4a:b6:a5:98:7c:dd:3b:1a:e5:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:5E:22:D3:4E:8B:F5:97:AD:D7:7E:3B:E6:72:A4:19:A1:85:7E
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f8:9d:ee:03:d6:c5:11:fc:22:e6:17:ab:6c:2e:5f:8d:5a:
7f:96:de:80:e8:70:38:39:56:33:d4:6d:90:77:a7:ca:f1:60:
c4:08:b7:3f:86:90:67:29:e5:9a:dd:87:ea:1b:31:91:f9:69:
f2:9b:7c:97:77:76:a9:7d:49:6d:8e:09:da:17:6f:22:d9:95:
54:e7:2d:8d:01:78:b9:12:8b:41:d5:33:a9:4d:d6:4e:70:ee:
32:9d:27:24:30:79:85:6d:2b:58:ad:3d:56:e4:45:48:82:fd:
cc:ca:5f:7f:d0:3d:90:21:df:10:f6:5a:01:94:98:2a:8c:b4:
09:85:d1:7f:d8:b4:9d:c3:de:61:19:a4:c9:ad:09:57:1c:77:
9f:bb:4d:04:97:3d:be:70:69:35:0e:b1:e5:66:95:c1:fe:21:
c0:1c:4d:de:b7:1e:02:36:78:30:c7:1a:7c:56:c9:a5:58:be:
a2:31:92:9e:ce:33:b4:5a:90:3b:76:92:ee:43:9e:15:65:09:
49:1f:1e:95:c6:eb:d3:f9:f8:fc:63:a2:7c:e3:0a:c7:fe:74:
52:36:a4:f4:cd:8a:67:7a:29:70:38:3e:ed:f1:d9:c3:7c:b3:
d8:d7:4f:1f:0d:94:03:34:9d:ac:32:28:db:c0:bd:5c:61:5b:
52:60:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:13 2025 by rpki-client