Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json)
Hash identifier: Lwel8t/viN64Q/kYOnHecLES+xaLBFLmlfazQg/fT+I=
Subject key identifier: 3D:D8:0B:50:C2:B4:96:6B:CE:CB:D9:DD:D8:EC:DB:4E:FD:83:55:28
Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Certificate serial: 0198A0BB091CDEA3F3EF92630A7FDE6F2740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
Manifest number: 29
Signing time: Wed 13 Aug 2025 00:01:08 +0000
Manifest this update: Wed 13 Aug 2025 00:01:08 +0000
Manifest next update: Thu 14 Aug 2025 00:01:08 +0000
Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: bLPOsd9d1pqTLc0/O5EJfvRjAKHgbe5v0RAMhkDMONI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:09:1c:de:a3:f3:ef:92:63:0a:7f:de:6f:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Validity
Not Before: Aug 13 00:01:08 2025 GMT
Not After : Aug 14 00:01:08 2025 GMT
Subject: CN=3dd80b50c2b4966bcecbd9ddd8ecdb4efd835528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:b5:02:71:bb:00:81:bd:be:8f:a5:27:d1:
b8:7c:db:02:84:77:65:5d:21:ec:6e:6d:51:72:58:
82:74:54:c1:58:f2:1b:75:1a:50:49:a6:dd:28:6e:
ad:52:17:58:97:3e:6b:33:b3:c3:7d:2f:a5:4c:24:
f9:5b:5e:17:24:2f:47:48:62:ca:20:01:67:b9:a9:
b0:ef:8e:b2:fd:95:dd:68:f2:9a:85:b3:da:70:56:
84:fc:9f:df:87:a0:cb:a4:32:4c:5c:59:0a:6f:40:
8f:3e:21:2f:ec:b3:02:88:5f:af:cc:59:cd:94:08:
71:f2:7e:2d:f2:d2:fd:37:dc:51:64:43:a3:e6:d8:
c4:39:42:de:d6:54:59:ae:95:1c:cb:a9:53:3b:7a:
44:59:aa:2a:56:ab:bc:34:df:52:d8:57:a5:3c:71:
53:3b:9a:21:72:6d:49:41:35:cb:fe:24:01:80:a8:
eb:aa:6c:d5:92:bc:14:c9:a7:30:6c:4f:a2:53:4f:
c2:a0:33:b8:e7:bb:0a:a8:0e:f2:f0:1c:02:1f:7d:
bf:fd:52:16:ce:7e:9c:30:16:a4:94:2e:46:9b:d0:
94:d5:01:92:b3:61:66:13:d7:f1:4f:a0:6a:e9:41:
05:7f:02:30:3f:9f:df:89:b1:9b:e3:b6:7e:2f:7d:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:0B:50:C2:B4:96:6B:CE:CB:D9:DD:D8:EC:DB:4E:FD:83:55:28
X509v3 Authority Key Identifier:
keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b7:a3:48:7c:fa:3e:ea:ff:09:01:64:0e:16:4a:d2:cf:42:
a5:03:22:70:f0:fb:90:9b:6d:c1:26:5d:f3:88:6a:d5:fa:db:
ed:00:90:e2:3c:2a:ed:4e:ac:63:19:de:cf:07:32:d4:bc:fd:
78:4a:aa:67:88:87:77:d1:93:a1:e1:39:e2:5a:22:15:82:17:
9b:d4:3c:6f:6e:1f:af:6f:0d:34:f6:37:dc:a0:d9:e6:40:7e:
4d:34:8b:e6:79:b8:31:27:ed:96:ac:b9:0e:7d:64:a6:d6:96:
6f:1e:e8:5e:89:42:78:2b:2b:fd:82:43:52:6d:8e:d9:4a:67:
f8:13:97:6e:2b:9b:95:7b:19:a3:97:5c:76:27:c1:49:73:6c:
96:6f:ab:a4:38:71:9e:de:91:c5:2d:1f:24:52:0e:2e:45:9a:
61:7a:3f:c8:cc:c4:2b:60:ff:57:80:5b:ba:a8:6a:d6:cd:52:
fa:4c:87:dd:ff:ba:4e:28:bf:c3:64:28:6e:14:80:d9:d1:46:
5b:ad:75:40:cf:9b:92:88:43:65:1e:8e:ec:be:b2:f1:ef:75:
27:9f:4b:36:99:a2:af:b4:80:8f:ac:f1:09:3e:53:84:ad:29:
80:2e:17:90:c0:e0:9c:d3:41:47:e0:30:0f:60:ca:69:f9:7b:
2f:68:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:07 2025 by rpki-client