
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: BJlt6TrZrpKV+Ku2EGNzXJWqOyhZGPNpi3BChLwUyUs=
Subject key identifier: AA:EE:D4:B8:D2:D4:13:C3:F9:26:A5:CF:33:DE:C9:FA:72:34:B3:1C
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019875D0EA7EA513FDD8BAD131447B7048A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 16:01:22 +0000
Manifest this update: Mon 04 Aug 2025 16:01:22 +0000
Manifest next update: Tue 05 Aug 2025 16:01:22 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: DwAWVS1Uzd83QYxZ0960bwuyvQ6GF7kUuU0tgOvh+XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:ea:7e:a5:13:fd:d8:ba:d1:31:44:7b:70:48:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Aug 4 16:01:22 2025 GMT
Not After : Aug 5 16:01:22 2025 GMT
Subject: CN=aaeed4b8d2d413c3f926a5cf33dec9fa7234b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:3c:97:56:68:94:60:95:10:82:33:d9:86:
12:43:08:6e:58:e1:67:25:bd:5f:47:23:b5:42:74:
cc:25:53:17:8c:fa:e9:79:62:e3:ac:55:20:aa:45:
94:c1:38:f7:ba:c1:c9:ab:7e:ea:95:14:a5:4f:55:
ad:07:70:27:b9:e7:a4:2a:d8:c9:77:2b:dc:b4:2f:
3c:a3:02:ad:5a:0c:f2:b3:aa:b1:ea:5a:fa:f7:ad:
e4:a1:c4:80:74:14:66:d4:eb:99:62:bb:08:09:35:
79:0a:5e:ac:ec:9f:8f:1b:b4:29:b9:0a:e2:83:ab:
69:99:ab:b4:2c:10:74:d1:51:e0:78:a5:70:fb:34:
40:f0:7e:03:e1:e2:92:63:a1:6a:b2:7f:5c:85:a4:
80:06:8b:55:d3:2a:38:5d:6b:80:1a:2a:28:79:12:
26:99:e1:b6:31:1b:f4:dd:a6:1c:d6:da:72:ce:ab:
19:96:f4:1c:ef:03:e0:17:09:f4:bd:2f:8a:a2:09:
d0:72:35:d1:de:9e:20:58:5c:6c:f0:5c:ec:20:0b:
70:62:03:58:48:a9:41:83:2d:fe:d0:eb:31:f1:fa:
12:0c:7e:6f:14:50:6d:b4:24:6f:7b:8a:20:fc:3b:
9f:c8:6f:76:6d:45:d1:c5:ac:aa:2b:32:bf:f4:62:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:D4:B8:D2:D4:13:C3:F9:26:A5:CF:33:DE:C9:FA:72:34:B3:1C
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a6:79:e6:48:69:40:73:25:56:0e:22:eb:1b:6b:59:7a:95:
ef:4d:36:2b:38:50:a1:57:b3:41:16:71:89:a7:a3:60:2a:50:
39:f1:f9:da:e8:2c:e7:c9:0d:29:e8:72:cd:a1:9b:3d:75:f3:
46:4e:72:e2:ae:28:c0:97:46:81:0d:96:fe:14:20:fe:48:30:
08:71:34:4c:8b:7c:d8:58:8d:c9:72:b9:3b:58:8c:80:11:b4:
3d:d3:f1:4a:24:45:af:81:6b:e8:4a:5e:54:d3:f0:13:84:eb:
c2:86:75:91:9d:ac:04:4e:03:42:a2:79:cb:38:f3:c1:c3:ce:
1a:a6:e4:26:0a:0a:7d:b5:d5:17:5b:87:8b:67:4a:db:58:3b:
f8:8c:0b:b7:37:44:8e:7e:7c:2b:69:f3:a8:29:90:98:ed:29:
07:a9:d8:c0:2a:5b:61:8d:70:44:2b:b1:1e:b7:c0:f7:a0:db:
8f:c5:80:b5:68:b0:b3:5f:e7:e5:f5:27:8a:c3:f2:6d:40:91:
85:04:dc:e0:74:ce:1a:24:65:f0:6f:60:0a:b4:96:3a:6c:33:
ce:db:88:8b:26:97:cd:0c:f3:3b:99:6e:5a:ce:6b:9e:e9:b1:
fc:bb:5b:43:a1:88:27:0a:30:1e:55:35:bb:0b:55:8e:e9:b3:
be:4d:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:36 2025 by rpki-client