Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
File: hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft (raw, json)
Hash identifier: T/aijWcUG5IwhcX7YWgYUpJbsqfZkiAUc9+o/YzmISQ=
Subject key identifier: E1:C4:A0:26:BC:B0:89:C1:64:9E:33:69:A3:05:A6:02:7C:1F:A7:B0
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Certificate issuer: /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial: 0198892087CA981FA7FF389B1B3EC484829C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
Manifest number: 093A
Signing time: Fri 08 Aug 2025 10:01:07 +0000
Manifest this update: Fri 08 Aug 2025 10:01:07 +0000
Manifest next update: Sat 09 Aug 2025 10:01:07 +0000
Files and hashes: 1: hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl (hash: 2Kw3z8pTyq6py2Dyu3uK5B0/hy7Oh2Xlbp65j/BL9DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:87:ca:98:1f:a7:ff:38:9b:1b:3e:c4:84:82:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Validity
Not Before: Aug 8 10:01:07 2025 GMT
Not After : Aug 9 10:01:07 2025 GMT
Subject: CN=e1c4a026bcb089c1649e3369a305a6027c1fa7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:b4:1e:b9:cf:83:9e:31:ee:5f:c8:0c:39:
e9:67:bf:25:9b:3b:0f:cb:47:0b:ce:f0:85:d3:d7:
42:68:94:24:54:33:93:a0:87:7d:8c:89:96:3d:ee:
46:39:6b:27:02:0b:e7:f2:0f:bc:44:60:d9:1c:87:
b2:e1:24:45:63:67:d7:82:d8:52:42:c9:43:60:f1:
12:aa:20:0d:fc:f9:69:7b:dd:e3:fa:6b:e1:bd:85:
05:70:23:21:4c:b2:c1:a5:e2:b9:b3:34:3c:1b:99:
d1:64:0f:08:4e:fb:6a:f9:fa:4f:e9:b4:f7:91:ff:
6a:21:a8:a8:05:82:2c:6c:a1:d6:d4:58:15:60:d5:
f9:54:12:48:3d:05:5f:a3:d9:22:b4:cb:c0:53:5a:
d5:ff:14:fa:99:75:1a:f3:4b:86:fb:35:07:8b:c4:
92:ee:d9:bb:6a:84:c7:58:f1:ba:af:e3:68:05:7e:
1d:8c:07:f8:49:46:36:cf:0f:48:8e:6c:79:e8:69:
9a:b0:fe:f8:83:50:7a:62:68:a6:9d:ec:5a:06:01:
74:e4:07:95:66:04:68:a6:ba:22:ce:d4:62:51:5a:
73:17:18:07:12:0b:b2:bf:06:82:ed:3c:c3:c8:d2:
94:49:f1:c8:60:13:52:a9:04:de:66:ee:42:cc:1e:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C4:A0:26:BC:B0:89:C1:64:9E:33:69:A3:05:A6:02:7C:1F:A7:B0
X509v3 Authority Key Identifier:
keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:da:7b:4b:35:f1:4a:c2:02:fb:f3:d1:21:f6:a2:2d:51:dd:
3b:19:90:09:8e:6b:14:e8:59:0a:1f:c9:bf:26:61:f8:7c:18:
b7:64:42:37:51:fc:13:70:78:f6:14:6d:1c:ff:11:1d:35:2c:
f7:3d:e4:d0:8c:eb:70:d3:10:7b:ce:e1:fb:1e:c8:a5:ee:01:
ef:00:e0:ec:22:6b:ae:ba:0e:46:3d:72:78:cc:2a:c0:9c:f2:
3f:36:eb:20:a3:19:d6:9d:f5:75:9d:d5:c1:8a:d2:24:cc:72:
61:67:2b:a6:85:38:6a:ed:1f:86:94:1f:30:25:39:0d:c1:06:
a0:08:a5:ba:41:4a:24:21:48:12:e8:c3:81:a7:a5:1d:b7:27:
80:a0:60:a1:60:a3:0d:c6:79:0a:22:45:b1:1d:4b:57:34:55:
03:93:75:de:e9:e4:34:1f:05:f7:be:df:44:1b:1a:e0:c0:06:
34:a5:91:1a:39:1b:b8:0f:33:a4:d7:41:ca:bf:80:18:4f:16:
d2:0d:9c:3d:b6:e1:e3:23:02:68:c7:fb:b6:4b:c9:46:cd:50:
6e:34:bc:59:88:72:7e:52:98:32:f3:cd:f1:13:fe:30:d6:f5:
97:1f:f7:cc:15:c1:e2:46:ac:31:50:ec:a0:22:5f:3c:7b:6e:
2a:63:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:43 2025 by rpki-client