Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: suaX6lbYMSY2AJfWISziHwauIeD6m5hDjnMfBImUfBk=
Subject key identifier: C6:FB:AF:F3:F5:39:FC:34:A4:86:17:F7:37:C5:0E:70:95:9A:0D:5F
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 0198D65F9FB6B1CAC57476E789E1DE84A551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0786
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: fFd8iLXZK/koUQfXxAPuV2cEb8PQY8HYzrg4/Ebuyoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9f:b6:b1:ca:c5:74:76:e7:89:e1:de:84:a5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=c6fbaff3f539fc34a48617f737c50e70959a0d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:df:c9:b2:af:1a:80:11:ca:bb:e8:ac:74:
82:bd:ff:12:1b:21:0a:fd:cb:37:28:5e:4c:79:87:
05:1b:83:e6:8a:26:29:5e:ee:31:22:f3:9a:a2:db:
f4:b4:bb:8d:3a:f3:8e:5a:c1:b4:3c:29:73:88:d1:
9f:ae:02:5a:6f:0d:73:68:ac:71:ea:82:1c:30:69:
b7:10:8a:e6:2e:bc:b8:46:86:e4:cb:15:91:f0:e7:
0f:97:be:53:06:e0:88:dd:52:cc:8e:5b:dd:09:2d:
9a:8f:2e:74:eb:31:c8:78:2d:ef:88:4d:37:af:3a:
db:b0:af:f0:68:88:a8:39:9f:0c:a1:09:c2:d6:ec:
12:c5:96:06:f5:18:2a:19:83:9a:86:3d:b5:3e:7f:
f3:cd:01:7d:27:4f:f2:74:17:95:f4:6b:d9:80:d9:
f9:2d:4c:17:bc:c9:16:a1:96:d1:43:47:2e:17:9e:
0f:68:4e:de:9c:cb:44:07:19:44:a5:70:11:ea:73:
66:c5:8d:db:81:d5:02:1a:7c:18:bd:01:c5:50:93:
d9:06:63:b6:2f:e6:63:86:a4:e6:75:63:0f:0d:a9:
d5:4c:d1:cd:66:cd:10:93:b4:84:6b:34:ed:16:34:
8b:33:c9:23:08:55:ca:69:64:ab:5c:1d:68:c2:e9:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FB:AF:F3:F5:39:FC:34:A4:86:17:F7:37:C5:0E:70:95:9A:0D:5F
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c2:f8:c2:6b:16:8e:0b:95:cc:b5:86:4c:51:31:95:27:6f:
98:9a:87:f4:0f:f2:f6:ce:14:e6:42:28:72:4f:9b:f8:cd:02:
7b:d5:05:53:12:f0:e4:2d:e7:ef:b1:9b:0c:7f:ae:48:60:5c:
32:e8:ae:64:ca:d1:30:b5:24:5c:90:19:cc:f4:19:49:01:ba:
2b:0f:d9:57:86:eb:8e:cb:9d:19:93:43:78:f6:19:ad:02:5e:
85:e3:88:9b:48:bb:d5:21:e0:61:b2:49:da:35:12:25:c1:8d:
42:89:66:c4:80:05:a0:75:d7:e5:17:ec:66:51:4e:a7:6a:6f:
2c:c1:41:2d:3c:60:6f:71:0f:7c:a4:8d:e3:0b:43:f2:e6:0e:
48:ad:14:5f:ac:6f:dd:18:dc:5c:b7:50:79:86:6a:fa:6a:f9:
af:43:ee:b6:b1:f2:b5:92:11:f4:86:62:39:0e:9b:ac:a7:85:
2f:35:40:8d:6d:0b:e9:14:62:9d:57:53:c4:f0:42:1c:57:75:
57:df:01:4c:77:a0:12:d1:5e:fe:83:ab:3d:8a:f4:d1:a2:da:
99:09:50:45:77:5d:f9:fe:1c:30:79:43:fb:6f:72:ca:0f:f8:
24:94:19:61:3e:c1:89:f3:5c:7e:db:a3:b8:3b:58:ce:27:43:
12:8b:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:04 2025 by rpki-client