Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier: IW0bINSaaG5bTEXF08xEUZzxDCMIolUDRTTcN8PEN5o=
Subject key identifier: 5F:CB:9A:8C:92:E0:F8:0F:BA:C1:FC:15:F7:64:E9:0E:BF:B7:66:36
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial: 0198D4731238EC3FC740868AC7CB674D86E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:02:47 +0000
Manifest this update: Sat 23 Aug 2025 01:02:47 +0000
Manifest next update: Sun 24 Aug 2025 01:02:47 +0000
Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: Kk3HSB+m9/pFW+jsrnWMKTTy9tdaRngLT8bqSGKOLvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:12:38:ec:3f:c7:40:86:8a:c7:cb:67:4d:86:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Validity
Not Before: Aug 23 01:02:47 2025 GMT
Not After : Aug 24 01:02:47 2025 GMT
Subject: CN=5fcb9a8c92e0f80fbac1fc15f764e90ebfb76636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:21:3c:1f:00:67:81:f5:8c:3d:16:21:d3:
9f:95:a8:d9:e6:cf:09:23:2b:0d:b6:dd:82:74:97:
16:a4:ff:13:8c:b3:74:ec:21:3d:32:a7:9e:b9:4a:
59:73:6d:b9:57:f6:8f:3c:d0:1d:79:c0:69:df:1e:
00:89:61:6a:79:82:00:de:1a:bb:d0:dd:fc:b6:39:
8a:39:00:6c:e4:e6:13:e6:98:f8:56:32:15:8c:7f:
06:25:ef:a9:44:88:6f:45:c2:b7:d0:7d:a9:0c:3b:
2c:d9:83:0f:a3:7e:a0:a7:5a:96:31:a2:93:7d:24:
72:2b:06:0a:68:d5:e3:d0:a7:c1:6a:08:f1:39:fe:
65:f3:f5:1f:c1:cf:bc:65:41:66:c1:a3:62:1a:52:
8c:e4:e2:68:36:2a:12:b2:41:9b:7b:f8:a8:d3:f5:
69:2d:18:a2:96:a9:e5:67:2d:67:d8:63:d2:7b:9f:
84:27:ea:2c:6e:e5:d8:cd:ed:4c:25:e7:ff:94:ff:
41:87:f4:15:52:29:1e:7b:0d:76:9a:d3:70:b9:39:
9e:c2:e5:28:2b:72:8a:a5:41:b6:f1:18:48:34:e8:
4b:b9:27:20:b0:e3:88:46:c5:74:4c:e0:cc:98:db:
41:2f:2a:11:ac:bd:47:df:79:8a:ab:b9:0a:5a:5f:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:9A:8C:92:E0:F8:0F:BA:C1:FC:15:F7:64:E9:0E:BF:B7:66:36
X509v3 Authority Key Identifier:
keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:97:55:a2:a7:c8:fa:41:ca:be:6f:1d:90:7b:c8:31:7b:32:
f3:03:8b:ed:1d:ee:72:80:35:18:ff:58:60:db:48:e7:0b:60:
63:e7:90:56:b8:7e:10:9d:ec:55:5c:60:25:68:2b:35:42:8a:
04:ab:f9:29:ef:e9:a6:96:44:b6:84:94:9d:34:b6:93:92:e5:
4d:58:db:c3:62:e8:35:50:e5:86:4d:ab:f4:eb:aa:bb:31:72:
54:38:b9:fe:ac:d4:46:3f:03:ee:5e:94:27:83:6a:bb:39:67:
17:d3:07:af:8f:27:3d:8c:b5:78:71:3d:28:91:8f:a0:44:dd:
fe:ee:23:a3:60:89:3f:c9:87:76:15:7b:4b:3d:bd:fe:a5:e2:
27:9d:77:2e:17:c4:7d:37:31:b5:2e:8c:6e:3c:44:f2:03:47:
c2:72:e6:6c:b2:83:bb:b8:55:3c:8b:e3:51:6e:f6:ee:91:12:
af:b8:d8:5d:04:ff:05:03:e0:dc:0f:73:ea:47:87:8d:df:9d:
ce:0f:6c:4e:ac:4b:2c:25:ee:28:36:38:1e:3b:2d:dd:08:84:
8a:a1:b7:67:37:22:69:2b:c1:94:2d:cc:95:6d:f7:4c:66:8d:
d6:3d:4a:87:5c:b1:5c:b0:15:32:b7:37:db:e9:87:6e:5d:66:
da:17:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:38 2025 by rpki-client