Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File: Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier: AaX8rnMFXpBATC/nRAsMz18GnHx98Nyitn8LkXDy4JY=
Subject key identifier: 47:40:B2:21:42:EF:E9:59:7D:AD:19:63:D5:A8:6C:BB:15:77:82:DD
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer: /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial: 01988EEC24D5E517AD9217723F820A4F4112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number: 0C2A
Signing time: Sat 09 Aug 2025 13:01:37 +0000
Manifest this update: Sat 09 Aug 2025 13:01:37 +0000
Manifest next update: Sun 10 Aug 2025 13:01:37 +0000
Files and hashes: 1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: 3GdcZdZ8Cg+m3AlJbW61kedZeAJQS0xa14FcITIn1SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:24:d5:e5:17:ad:92:17:72:3f:82:0a:4f:41:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Validity
Not Before: Aug 9 13:01:37 2025 GMT
Not After : Aug 10 13:01:37 2025 GMT
Subject: CN=4740b22142efe9597dad1963d5a86cbb157782dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:ca:2f:c9:10:7b:ff:d7:b9:4c:2d:46:ef:
b7:0e:01:e8:8d:01:ef:1b:1b:cb:0b:da:fa:30:c7:
58:38:4d:0b:ef:88:99:2f:1c:ee:7e:cb:c8:bd:78:
d7:30:a8:1a:c4:32:f8:a8:8c:85:7f:73:44:0f:6c:
6b:78:06:2f:5e:ab:af:f8:ab:b3:9c:b3:c5:c2:58:
33:05:d4:02:e8:0e:dd:ed:a1:16:34:aa:1d:ee:0c:
0d:3a:98:a3:57:98:be:53:35:b1:51:73:e5:73:cf:
55:9b:de:ff:17:db:5a:c1:36:76:03:7c:3f:c8:d2:
ce:87:1d:19:56:25:47:b3:27:d7:d9:68:bc:9d:d2:
3d:9c:54:57:d4:a9:65:ce:53:be:ab:7e:4c:6d:d6:
0e:16:6b:84:a1:71:dd:69:be:24:bb:67:5c:bc:26:
dc:a8:2e:a2:c2:ee:2b:41:d6:27:6e:c9:25:c8:7a:
ac:f6:a9:40:01:b4:29:33:c3:15:bc:e8:15:a6:31:
93:f6:5b:02:07:e1:7c:64:f2:db:1c:68:7d:07:8b:
99:b7:97:d1:36:f7:6b:48:54:1b:8b:20:63:46:9a:
cf:dd:fe:c9:67:bb:34:9d:bb:c9:fa:98:a1:33:42:
fa:3a:0c:1a:e8:fa:0f:80:a3:a1:f0:81:5c:91:ff:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:B2:21:42:EF:E9:59:7D:AD:19:63:D5:A8:6C:BB:15:77:82:DD
X509v3 Authority Key Identifier:
keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9b:67:7f:89:9d:04:08:79:8b:15:7b:12:11:a0:e7:9d:ad:
eb:7c:3b:96:a5:51:59:d5:56:6b:ff:fd:5c:53:8b:03:66:10:
de:cb:dc:f7:54:45:18:15:5f:74:90:fa:79:94:7f:8d:63:3d:
f8:48:48:40:14:14:76:5e:24:88:40:03:bc:01:44:f2:d5:68:
c4:0b:12:72:43:e0:ef:6f:6f:ce:e4:66:6e:bd:bb:f9:d5:98:
63:6e:c8:48:1e:24:d7:80:5e:9f:a1:34:73:5d:d2:71:8e:9c:
c6:1b:c4:cf:44:a0:b8:ba:5e:fe:50:4c:aa:45:4d:11:cf:41:
1c:d5:fe:2f:40:41:7f:7a:41:85:0e:06:4d:db:25:ae:b9:25:
5e:f6:90:f8:6d:71:d3:ee:93:1e:31:15:89:20:92:7f:3d:07:
24:c2:49:54:d9:45:ef:80:e7:06:56:33:67:46:54:91:6e:e8:
c6:5a:d6:76:a5:e6:4f:ed:ff:38:65:8e:18:6d:b8:4e:69:46:
c4:01:a7:3c:bf:e1:f5:86:59:40:30:b5:96:9a:02:b5:4e:4c:
5a:19:2a:84:09:46:58:71:79:1e:55:78:8f:fd:59:3a:f7:85:
69:19:62:d3:0e:08:52:80:10:82:63:d8:5f:09:6f:41:e2:6c:
a6:4c:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:08 2025 by rpki-client