Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: tGnYMEoax6A2lxr0KMUWIegAPLGwL7NKUwLgnP/IZrA=
Subject key identifier: D4:A4:FC:57:3C:22:26:B6:3F:88:C3:8A:36:2B:BD:DD:E7:0B:FA:55
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 01987450144C454D3252DB86DFB38E314E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0959
Signing time: Mon 04 Aug 2025 09:01:01 +0000
Manifest this update: Mon 04 Aug 2025 09:01:01 +0000
Manifest next update: Tue 05 Aug 2025 09:01:01 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: A4eZgUQoXkJ1AosNOYv0ynsqLwRmsNJQ3OQbg0qi4eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:14:4c:45:4d:32:52:db:86:df:b3:8e:31:4e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Aug 4 09:01:01 2025 GMT
Not After : Aug 5 09:01:01 2025 GMT
Subject: CN=d4a4fc573c2226b63f88c38a362bbddde70bfa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:a9:5f:69:47:db:49:07:dc:4b:3f:81:e4:
32:85:9c:3c:57:2b:de:46:fc:cb:78:61:08:6d:52:
b9:42:23:e3:ab:39:ae:19:de:29:31:7d:ff:e4:2c:
f1:7a:5b:f6:79:8f:63:66:3e:f3:fe:2d:b1:40:93:
8d:58:20:c7:63:ce:3c:b8:fd:a6:e6:cc:c0:5f:cc:
99:e8:d8:fe:64:df:7f:34:bf:e1:85:5c:2d:01:27:
9d:c3:c3:1f:db:ac:8a:92:7e:8e:93:aa:fd:65:c9:
69:6e:09:23:12:37:41:45:8b:77:00:71:21:11:c1:
59:cc:06:da:a7:d3:4a:bf:df:58:0f:f0:33:11:8a:
4b:95:cb:71:86:6b:84:ba:89:8b:95:73:ef:60:f3:
d4:76:19:13:66:ad:ac:0a:c7:04:1f:06:85:fa:94:
66:6c:cf:6c:e5:00:48:24:b9:80:46:40:78:6f:a6:
47:0e:c6:80:46:f2:eb:97:67:d1:29:e3:47:8b:81:
f4:17:a6:fa:ac:85:d0:ec:b0:f7:b0:b9:21:bd:21:
e7:5f:f2:50:ac:4b:74:5f:d3:0a:9c:cd:67:05:a3:
d3:cd:1c:21:43:74:23:93:96:7f:16:52:ef:2c:0a:
dd:be:d6:dd:ff:c1:89:c8:95:f3:e1:a0:90:d3:85:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:FC:57:3C:22:26:B6:3F:88:C3:8A:36:2B:BD:DD:E7:0B:FA:55
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:61:35:c1:96:ca:da:f5:94:22:05:a2:d8:cb:3e:be:27:e8:
5c:90:b5:6f:4d:1f:9e:6e:75:eb:1d:f4:48:b8:ca:eb:65:42:
0c:a7:aa:c6:eb:d6:77:50:32:eb:15:0e:f5:1e:5b:d0:46:f5:
63:71:c1:63:dd:ee:16:12:75:9d:25:30:ca:9a:cd:34:19:75:
5e:eb:20:16:52:ef:71:8b:dd:39:67:02:3d:26:bb:5d:68:83:
dd:8b:11:57:a6:dc:e5:ac:d1:ae:35:6b:ae:a1:f1:b0:1b:34:
da:fd:65:f1:da:57:8b:f8:6c:a6:e3:1a:9e:94:5a:7a:cc:78:
85:0a:b0:f0:78:80:92:8b:fe:bb:7b:66:ba:d2:62:e1:dc:c5:
46:ee:19:22:cc:4a:24:20:4e:01:dc:5c:fd:fc:df:cd:7e:59:
7c:0c:58:60:93:81:26:55:00:1e:db:d7:8a:e1:b7:92:cd:1f:
c6:c6:2f:87:20:a8:b2:2b:91:2f:2b:55:65:5c:44:a6:57:9d:
e2:c4:60:f6:b3:ba:20:04:25:53:c8:58:2a:b9:83:df:1e:2d:
ae:9e:87:0e:a8:f3:5c:7e:aa:e6:5f:46:07:e1:6c:6c:c6:be:
12:b4:7c:b8:3c:12:5d:92:75:4a:c1:52:43:46:59:92:32:0a:
b9:c0:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:52 2025 by rpki-client