Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: kjz/5+gq+lyDIeUYNhJD6mrEKXfhWB4mr8NdyqChiH4=
Subject key identifier: 78:10:EF:6C:07:62:67:1B:17:6E:12:76:17:2D:B8:D8:17:06:74:95
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 01987D8B92ED7F7AB9003CAE66A70B21369F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 0418
Signing time: Wed 06 Aug 2025 04:02:35 +0000
Manifest this update: Wed 06 Aug 2025 04:02:35 +0000
Manifest next update: Thu 07 Aug 2025 04:02:35 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: lP/o7TKkVUES2GTdg3Uxb+t86hfsf++May/1SGPYZaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:92:ed:7f:7a:b9:00:3c:ae:66:a7:0b:21:36:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Aug 6 04:02:35 2025 GMT
Not After : Aug 7 04:02:35 2025 GMT
Subject: CN=7810ef6c0762671b176e1276172db8d817067495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:cc:fc:0d:77:f4:38:c6:31:38:34:0c:e2:
6e:20:27:79:55:9f:0a:a4:6c:4f:63:ec:02:8f:e5:
f6:1e:08:dc:8f:98:5a:40:81:57:1f:a1:29:de:eb:
ac:3f:57:7d:99:5f:aa:13:1f:6a:39:e5:4b:ed:ab:
a8:3d:11:0e:26:eb:59:bd:d9:c7:ed:92:06:b9:07:
ee:19:e7:de:18:63:4e:d3:4e:5e:31:c1:ef:bd:5c:
73:18:69:10:83:bd:71:7d:19:5a:58:e4:c5:d8:d6:
66:87:42:b5:1c:89:bb:da:a0:de:04:81:2d:11:72:
38:31:31:5d:bf:5a:b5:3a:34:41:47:04:7a:6d:9b:
7f:44:92:b7:cf:fa:3b:cc:1f:f5:ac:aa:8b:55:b4:
2a:cb:8f:c0:e4:70:e8:ae:e1:22:3e:f8:02:c6:01:
d8:e8:7f:50:82:0b:43:40:a1:b7:1c:be:07:ca:b7:
c0:b8:71:fa:5a:9a:d6:6e:e8:7e:a6:d5:a6:ee:9f:
f6:ee:c8:50:e0:c1:37:a6:96:91:d8:af:dd:82:a5:
59:72:82:6a:34:c6:1b:6b:e0:d5:28:fa:f5:22:b7:
5c:59:19:e3:e9:c2:7e:b6:82:a8:92:93:ed:9f:53:
67:4a:44:ba:dc:6f:9e:7d:62:77:a6:ad:67:cb:4c:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:EF:6C:07:62:67:1B:17:6E:12:76:17:2D:B8:D8:17:06:74:95
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9e:7d:91:be:e5:6b:1a:c5:de:73:a3:11:5d:43:0d:78:a1:
a9:61:7e:05:49:5d:96:55:25:87:fd:11:f4:31:48:58:17:aa:
ce:81:e5:e9:8c:70:05:3c:bc:04:4d:ca:ce:7c:3e:dc:5c:e0:
4a:e0:6c:69:43:57:e9:aa:99:95:4c:97:13:a7:0e:0f:5f:0c:
8f:5f:f8:b8:75:5b:4f:a0:7b:54:5a:77:60:2e:f7:14:1c:0c:
cf:3f:64:83:d0:f1:77:55:0a:1f:4e:4a:42:b9:e2:7c:b3:f3:
18:ad:85:37:21:f9:4c:4d:d1:10:a4:17:91:65:1b:69:bf:9c:
8e:a5:95:ca:b2:b8:70:9e:93:15:44:c4:5a:d1:2e:b3:08:34:
b6:73:2f:75:01:1b:ad:a4:e0:6e:f8:f9:22:4c:42:4c:51:eb:
50:5e:f5:b3:5c:1d:51:5d:2a:24:9d:03:e8:34:7f:9e:38:3f:
78:8b:4e:eb:90:ec:b6:0a:b5:8f:71:0c:09:14:f8:68:fb:45:
ec:36:8b:05:ae:26:04:16:71:11:a3:c0:4e:cd:09:ad:a7:74:
42:0a:9b:c0:c6:33:cf:09:f9:db:8b:f0:11:71:14:5b:39:22:
b3:1e:64:c7:f6:6e:09:d6:2b:c9:8a:47:e5:40:53:2d:2b:3d:
c1:bd:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:25 2025 by rpki-client