Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
File: HVdIhaDItCBcPfLR_Nc0h33hBdk.mft (raw, json)
Hash identifier: SAhLg5oiQdwKTzULxdnzCRm+CQutvQFl1/rKygfR5i8=
Subject key identifier: 19:62:77:D5:01:29:ED:4A:30:AA:2B:A1:60:A5:96:1B:78:9F:8E:BF
Authority key identifier: 1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
Certificate issuer: /CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Certificate serial: 01987E2EE111EC4F0BE14497A1C8EF3DD6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
Manifest number: 01ED
Signing time: Wed 06 Aug 2025 07:00:58 +0000
Manifest this update: Wed 06 Aug 2025 07:00:58 +0000
Manifest next update: Thu 07 Aug 2025 07:00:58 +0000
Files and hashes: 1: HVdIhaDItCBcPfLR_Nc0h33hBdk.crl (hash: aPIwgafWNTMefRKYf0mAUZ1trSVELdOzr0IrKEbVzQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:e1:11:ec:4f:0b:e1:44:97:a1:c8:ef:3d:d6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Validity
Not Before: Aug 6 07:00:58 2025 GMT
Not After : Aug 7 07:00:58 2025 GMT
Subject: CN=196277d50129ed4a30aa2ba160a5961b789f8ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:30:c5:98:8f:80:ef:d2:1c:92:93:68:62:
6b:9a:85:ec:dc:7b:a8:b9:9d:b3:38:c2:be:26:05:
7b:58:38:8e:21:17:99:83:ce:89:d6:02:10:b6:f3:
a8:23:16:22:5d:88:d7:9e:90:2a:88:9a:d9:12:c8:
d7:7b:7c:fe:2e:33:73:23:9b:25:91:01:32:5f:35:
9c:cf:fa:d9:0a:42:15:70:bb:9d:84:bc:d9:93:2d:
47:74:68:95:a8:54:c7:cc:6a:86:4c:dd:f8:12:30:
a9:16:ea:cc:18:94:8e:06:5e:45:57:0b:5b:2e:83:
09:4e:3c:8b:cd:6c:0f:fd:14:8c:c9:7e:98:ef:cb:
09:ea:59:97:2a:99:c8:99:a9:8b:53:4c:18:b4:69:
80:44:cc:74:40:9c:9f:70:2b:f6:c4:1b:93:f4:c5:
c3:47:7f:8f:04:e3:15:d5:1f:17:94:59:bb:98:32:
11:1d:dc:a0:5b:2b:32:cf:4a:3f:c1:ac:d9:be:49:
d8:54:41:34:1a:6a:d4:06:52:4a:f2:ad:69:af:2c:
08:d6:c1:0d:ad:78:fb:5e:4e:ea:4d:9f:dc:5d:88:
e1:50:d2:67:69:0c:06:11:56:24:6e:96:b7:ef:e8:
af:fd:15:24:0b:a9:d8:8a:14:63:a0:74:7f:e2:59:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:77:D5:01:29:ED:4A:30:AA:2B:A1:60:A5:96:1B:78:9F:8E:BF
X509v3 Authority Key Identifier:
keyid:1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3e:ed:f3:c9:5e:bf:23:ca:fa:62:7e:3a:d3:44:f8:03:53:
cb:1f:93:41:fe:56:0a:6b:7d:6b:24:d2:24:82:7c:96:6d:40:
29:87:f6:ab:bd:d2:56:5f:dc:db:3f:66:e2:fd:7c:17:8c:cd:
2a:e4:64:75:61:1c:06:c9:d2:c3:26:26:69:9b:a5:f6:24:50:
ed:2e:6b:07:38:d9:64:e2:10:e0:06:8f:63:78:6d:79:7c:a3:
5a:fa:14:6e:27:cf:18:2a:e0:bb:8f:08:6f:ad:18:16:44:b1:
92:69:a3:0c:a2:51:ed:74:85:6d:b1:a4:28:27:fb:20:49:ca:
63:62:49:cf:39:ba:89:3e:3d:d2:77:84:46:32:ab:7c:26:66:
92:94:b6:18:60:0c:8c:c1:0b:32:99:91:0e:c8:c9:ba:53:ae:
4b:65:e3:ed:21:52:81:fb:1e:eb:a5:d7:6c:28:06:97:65:7c:
24:da:38:72:6f:c2:ba:ed:51:17:2e:da:5c:35:91:d7:a1:dd:
24:a6:88:bc:2e:3b:b4:d1:92:dd:5e:eb:53:87:d9:ab:df:17:
3a:fb:97:3e:2c:4e:47:ff:45:55:90:60:33:1e:2b:bb:08:cb:
bc:f5:65:05:24:78:6f:f1:73:0c:66:45:48:21:8e:f0:0d:a9:
be:84:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:01:16 2025 by rpki-client