Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File: Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier: iS9BoldyrIpNzPscQ/v1gD5ons2vfKk9cp+jTOpcVXw=
Subject key identifier: 51:0B:3B:C4:CA:58:2F:AA:FA:66:0B:3C:04:D4:60:A1:19:92:6A:95
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer: /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial: 0198D5BB9C4380E66C1507E67A8FE7725E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number: 155C
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: XiJq4dem3KX9MdZbtjsrfe2et7yFf8pwp9A0nd7g+C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9c:43:80:e6:6c:15:07:e6:7a:8f:e7:72:5e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=510b3bc4ca582faafa660b3c04d460a119926a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:d1:32:d6:31:4d:93:55:e6:ff:3a:6b:5f:
e3:bc:86:2e:18:0d:52:61:b4:e7:74:99:54:f3:cc:
58:f9:e3:05:2b:28:53:3a:90:da:1c:77:a8:c3:6a:
d0:0d:5d:fd:e0:72:e4:e7:91:00:1c:a6:b8:4b:9c:
18:cc:7a:09:15:e2:3d:53:21:bd:a0:3b:82:c8:40:
e1:c8:8c:b4:f1:61:78:cc:de:db:f8:30:9e:a8:ab:
74:4d:a5:f9:d3:6c:41:2b:98:2c:5b:de:8c:79:2e:
b1:1a:41:24:69:63:9c:ce:51:56:64:81:05:89:a4:
80:70:ac:65:6a:f2:ca:8a:88:d8:66:90:a3:5e:7f:
32:09:98:3b:b8:c4:81:83:01:40:c5:10:70:24:60:
1d:aa:dc:8c:2f:30:59:2a:00:da:b9:bc:6f:1b:d0:
d4:6a:95:8b:df:23:f8:f0:68:60:62:d6:0a:e1:86:
60:e7:e5:91:aa:90:d0:8c:ae:b8:d2:06:db:f7:0f:
de:29:8f:42:35:59:97:43:0c:39:1e:83:55:a6:15:
9b:aa:0c:be:43:d0:d5:7f:07:3e:3d:01:14:f8:65:
41:22:e7:c1:96:3f:ff:a1:77:47:cd:39:2f:a6:92:
dd:6e:a8:35:bd:c3:bf:a4:91:a7:13:79:96:76:b5:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0B:3B:C4:CA:58:2F:AA:FA:66:0B:3C:04:D4:60:A1:19:92:6A:95
X509v3 Authority Key Identifier:
keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:b9:9a:ab:19:f2:1c:7e:5a:08:f9:8c:38:e8:bd:7b:be:
1e:42:73:6c:10:a9:ab:da:ae:2c:bd:8d:a7:c6:c9:f1:33:a5:
10:1d:a8:ba:fc:77:b9:be:22:ae:1c:cf:2a:60:1d:93:52:c6:
95:ba:ea:57:1e:c3:97:90:b1:96:3b:5d:00:d9:e4:91:71:57:
bc:6b:85:b6:25:cb:b3:62:77:cf:54:f7:2d:05:a4:af:62:5b:
06:bc:f7:bd:32:c3:43:74:5d:9f:0e:0a:50:d3:ef:cb:c8:f9:
45:96:c8:32:53:2a:ca:d8:a0:5c:82:8d:3e:2a:e1:8c:e5:28:
23:1f:53:33:69:c4:c5:f2:be:8b:67:55:f2:df:9a:10:19:c1:
32:93:a6:10:73:a2:62:9f:46:bc:79:4b:a4:83:1f:8b:78:e4:
11:b9:9d:a1:1b:bf:df:e3:1f:ca:af:1e:44:2b:db:06:61:f0:
d8:83:8b:8b:fa:a5:bb:76:d8:ce:f2:90:76:e3:f1:4c:1b:7d:
29:9b:be:62:45:7b:29:14:1d:4a:ae:67:31:7e:52:ea:d9:73:
64:ed:b3:36:75:7a:10:91:d3:f6:ff:b3:48:7b:c5:b6:c6:1f:
7d:0b:11:78:0f:20:04:92:4d:20:10:82:b7:77:e0:6c:c6:c4:
93:75:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:51 2025 by rpki-client