Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: A+DcKp6XUD16Jupr6qFDIdgQ6gyWZ4HqubsL8arMFnY=
Subject key identifier: A9:B4:97:C0:C1:DC:8C:BB:DE:69:BA:CF:B3:3B:73:FD:2B:02:8F:43
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 01987CAE04E2A312F2964495110FCC999B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 0266
Signing time: Wed 06 Aug 2025 00:00:35 +0000
Manifest this update: Wed 06 Aug 2025 00:00:35 +0000
Manifest next update: Thu 07 Aug 2025 00:00:35 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: qQ0W1UL0N9t3C3ARrFDx4bVf4oA9sHzKL9QnkBXl4vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:04:e2:a3:12:f2:96:44:95:11:0f:cc:99:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Aug 6 00:00:35 2025 GMT
Not After : Aug 7 00:00:35 2025 GMT
Subject: CN=a9b497c0c1dc8cbbde69bacfb33b73fd2b028f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:7b:f8:e3:28:73:97:4c:ed:dd:fd:7d:27:
91:a2:21:a7:8f:b4:e5:a3:b8:49:14:b5:ed:2a:a9:
ab:55:c9:e7:23:35:da:7e:16:0f:7c:2d:b0:04:23:
c5:d1:fa:d2:42:a4:d7:fd:0d:b0:2f:d5:67:93:8e:
19:ab:8a:b3:07:23:e1:1d:b7:73:be:ba:90:8f:50:
50:eb:32:92:d6:74:97:6f:e9:4d:51:93:c2:a1:95:
e1:3d:07:e6:28:38:c9:4f:12:c5:ce:42:29:0f:08:
16:93:13:4e:ea:66:10:df:cf:8b:11:07:73:03:a6:
72:56:51:6f:98:f0:26:30:b9:b1:19:4e:ac:6a:3b:
54:96:83:a9:19:c4:15:1a:22:27:4f:6e:e4:f5:c0:
ba:55:85:d4:40:dc:c0:55:b3:09:29:8f:86:53:43:
10:d8:b7:0d:c7:61:f8:c9:85:f5:c5:d6:bf:da:f9:
59:e2:61:b8:4d:e5:27:5c:e4:08:aa:68:b8:7e:e4:
5c:ea:7f:5d:38:b7:b6:1f:c4:06:9d:15:0c:24:51:
f3:0b:b0:4e:0b:be:24:07:1e:31:92:ba:61:e4:e1:
dd:b9:4e:a3:1b:98:3b:7f:95:a8:eb:8d:0c:26:bf:
f3:f3:56:a4:9f:bb:f3:34:29:17:e0:a0:05:bd:b9:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B4:97:C0:C1:DC:8C:BB:DE:69:BA:CF:B3:3B:73:FD:2B:02:8F:43
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d7:14:c1:29:62:4b:7a:23:61:45:0c:fa:70:41:e2:8e:15:
43:af:34:70:22:a1:54:6a:12:3f:bc:e3:c3:dd:b1:db:4e:20:
ea:82:8e:cd:ab:07:ad:71:50:ff:8a:de:45:73:28:98:ce:d2:
71:b6:bd:ff:27:8c:6b:cf:ec:e4:f4:e2:b4:43:3f:67:26:82:
dd:95:08:8a:93:ef:15:d9:58:7c:8a:a4:fa:34:81:9a:55:0e:
5c:51:84:bb:c0:33:74:65:a0:87:50:0e:0e:f0:ae:4a:f1:5f:
8c:b3:35:9a:20:16:14:c1:38:11:82:12:25:8c:13:df:3c:2c:
0b:7f:02:3f:b4:98:9d:14:2a:30:9e:a3:b0:ac:c8:14:7f:8b:
69:c9:f5:bb:92:1f:c9:82:a1:a9:92:fb:7f:89:6b:21:38:d7:
13:93:16:29:fc:56:ef:bb:15:b8:1f:64:55:c9:14:5d:e7:a5:
70:1e:1b:2e:4b:ee:df:3a:4d:d2:1a:41:52:08:43:48:c9:1c:
cf:ee:6e:cf:75:d4:50:84:02:29:9d:7d:1f:db:19:ed:d4:bb:
2f:56:0e:2b:c6:e1:21:97:78:08:84:df:cf:42:8e:88:dc:7b:
40:18:9e:45:3b:c1:da:6b:7f:d8:4f:e1:da:6c:81:0c:07:80:
ce:46:13:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:42 2025 by rpki-client