
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
File: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft (raw, json)
Hash identifier: 0ICHxdyBh7kQgvOS0eVMbBPkN8l6Rg801I9bP1ejZz4=
Subject key identifier: 9D:A8:D3:B9:5C:26:3D:72:86:AB:4D:91:45:8B:62:F3:0C:DC:C4:07
Authority key identifier: 1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26
Certificate issuer: /CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
Certificate serial: 01988167C32A531EFFD06222955BEC351B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 22:01:57 +0000
Manifest this update: Wed 06 Aug 2025 22:01:57 +0000
Manifest next update: Thu 07 Aug 2025 22:01:57 +0000
Files and hashes: 1: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl (hash: 17y9fgUvKPaWUvOjgJ28PHiNeHBcvGeNjFb1ZYWvy9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:c3:2a:53:1e:ff:d0:62:22:95:5b:ec:35:1b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
Validity
Not Before: Aug 6 22:01:57 2025 GMT
Not After : Aug 7 22:01:57 2025 GMT
Subject: CN=9da8d3b95c263d7286ab4d91458b62f30cdcc407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:86:58:c4:23:c6:2b:26:7b:76:32:f0:7c:
4d:8d:f2:67:25:fb:c7:e1:eb:5c:b7:52:97:47:03:
66:4c:1e:24:f1:f8:f2:cf:c7:15:9e:49:55:8c:0e:
68:d0:00:3e:c7:93:1d:90:dd:34:29:48:84:bf:74:
ad:b3:a9:19:5f:f0:7c:b9:fd:86:0b:4a:20:ff:e1:
d4:c0:73:85:17:e7:c3:10:9f:a5:32:d3:3d:85:fa:
50:cc:b6:ba:60:f6:f3:13:f8:20:7f:66:f8:4d:a1:
66:c4:8c:c9:8a:55:83:b9:2c:d0:ca:1e:07:b2:a4:
56:58:da:a6:ab:ed:23:91:bc:9f:8e:fb:7e:9a:bb:
50:62:2e:fb:d3:d3:6f:7b:53:84:0e:3d:d5:d0:ff:
84:fa:41:6d:3a:01:19:46:cd:00:e7:53:f6:48:91:
3c:a0:93:fb:22:e9:7f:03:02:7e:5a:c1:68:23:31:
b3:22:60:d7:e0:fb:79:cc:c3:40:8d:ba:cf:8b:b4:
e6:98:e5:6f:e7:cd:c8:10:9a:f6:82:06:34:4a:73:
44:90:98:72:41:96:f2:c6:47:56:0d:2e:d6:43:b1:
b5:7e:6e:85:5f:22:9a:d2:83:64:15:35:9a:cf:a1:
b8:ed:b2:ab:77:64:b6:f9:bf:9b:a3:b3:4d:f1:18:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:D3:B9:5C:26:3D:72:86:AB:4D:91:45:8B:62:F3:0C:DC:C4:07
X509v3 Authority Key Identifier:
keyid:1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:23:9f:71:23:cd:23:2d:73:3f:ed:db:6a:c9:3f:24:c3:a1:
37:aa:04:a1:cc:55:5d:3d:e5:26:1e:b6:ba:77:3b:23:9c:4a:
11:1f:9a:aa:bf:87:53:45:78:5e:01:02:82:1b:73:80:5a:77:
49:13:bd:ca:d2:16:93:6d:88:8b:fe:fb:e0:46:8c:e5:e1:5f:
fc:07:32:5f:10:4a:0d:e6:aa:eb:7f:7a:11:c4:88:ff:a5:77:
d8:9c:1a:bd:e5:33:52:09:d8:29:08:69:70:ea:da:31:4b:0d:
06:27:f9:0a:49:23:9a:6e:0d:71:7e:84:45:d5:e1:97:53:05:
f3:93:0b:fc:c6:05:6f:b1:67:d5:4c:ef:e8:93:55:b9:18:c7:
3f:d5:57:f8:e8:9a:73:89:0b:32:02:67:3d:a6:e7:cd:49:1c:
7f:1c:27:e4:2a:72:5a:53:29:47:79:01:f3:a8:dc:99:f3:75:
a5:ba:14:03:f7:49:8b:2d:3d:bf:68:df:12:31:b3:13:86:3d:
d4:43:12:fa:f4:ac:1d:6a:97:1a:2e:d1:28:9b:9b:28:90:12:
00:1b:05:54:3f:13:17:ca:d0:cb:02:8c:ec:17:ab:1f:e3:25:
df:35:8b:68:90:fe:2b:85:52:4a:e8:8c:2a:3d:66:2f:a2:97:
cf:37:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:04 2025 by rpki-client