Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: d9pvX/2F8tT6/Gku3jYDZsLeQMew0JctXEjRCm9kAok=
Subject key identifier: 94:3A:FE:9F:2B:E7:95:70:13:56:8E:08:7D:B1:C5:39:2D:5E:70:93
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 0199FDD9B007F48E32F3A133A5D340441DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 081F
Signing time: Sun 19 Oct 2025 19:02:05 +0000
Manifest this update: Sun 19 Oct 2025 19:02:05 +0000
Manifest next update: Mon 20 Oct 2025 19:02:05 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: W44it+dz5AZIfr5Trg2SMfHzDexrA4cLlnVXEe5goBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b0:07:f4:8e:32:f3:a1:33:a5:d3:40:44:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Oct 19 19:02:05 2025 GMT
Not After : Oct 20 19:02:05 2025 GMT
Subject: CN=943afe9f2be7957013568e087db1c5392d5e7093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:3b:17:fe:f9:18:14:ce:33:04:37:c3:ea:
b9:4e:9e:59:09:ad:fe:9b:85:e5:c8:a5:3f:21:0e:
19:00:41:e5:79:96:33:e8:f8:e2:37:53:23:14:1d:
c8:75:18:56:f9:a4:af:8b:48:d4:32:8f:d2:51:ea:
f6:61:a6:5a:f8:5d:1a:dc:55:52:3b:62:61:d2:f6:
05:02:e0:65:16:cf:a3:bc:c0:8d:8a:f7:56:16:d2:
52:e7:e8:6b:bd:5b:1c:b1:90:3c:92:a5:6e:ac:53:
34:eb:4b:e2:6d:ef:52:8f:37:8a:57:ec:54:19:64:
7f:04:a6:0d:cb:8c:86:19:af:39:85:71:9e:24:f4:
5d:b6:6f:06:e8:49:67:9d:0d:b2:55:2d:82:7c:d7:
ec:fd:d9:75:e0:fa:d1:63:3c:d1:0f:89:61:fe:63:
a9:1f:0c:32:7a:70:2d:e4:61:5e:22:54:ba:40:4c:
63:9a:d2:6f:10:4f:1d:0d:00:d8:d4:85:7c:7e:ef:
27:3e:7e:b8:75:2c:43:0b:2c:fd:48:99:9b:90:43:
12:cd:7e:fc:ad:5a:08:76:2d:b4:77:83:e2:e7:0c:
be:f4:7e:0b:d0:5c:bc:63:e9:6a:1f:d1:4d:ce:3b:
01:4c:4a:5d:88:9b:99:c9:82:84:bc:49:b8:5e:9b:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:FE:9F:2B:E7:95:70:13:56:8E:08:7D:B1:C5:39:2D:5E:70:93
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:df:86:c7:18:ca:01:6a:ae:6a:9e:76:e4:1e:ae:b4:ce:6a:
45:9a:aa:30:ff:e8:c5:68:fc:da:12:51:cd:c8:87:68:7c:18:
92:d9:e8:25:ee:67:d3:dc:cb:ad:35:e1:55:6f:00:53:9e:b1:
0e:77:f8:af:4f:0e:5a:93:85:b2:1e:40:09:4c:17:be:d0:3f:
7f:f3:f1:f0:87:d7:de:d6:74:9a:af:55:b7:7a:8e:23:67:7c:
ef:8e:03:dd:ea:0e:74:94:ee:62:a5:11:d0:db:28:d5:a6:d3:
30:a0:b1:5f:de:e5:9b:db:f3:20:43:31:bf:dd:47:67:ec:a6:
80:42:70:85:a1:4d:2b:5a:58:31:18:8a:7f:37:d8:a7:b2:6f:
fe:e7:d0:93:d3:5f:38:74:b0:46:ac:d4:a6:61:e4:a9:77:72:
20:0c:1f:d1:3d:cf:e4:b7:fb:39:31:f3:17:97:98:78:37:d0:
d0:b4:33:91:04:aa:59:a3:a6:48:4d:78:21:9f:60:94:56:8b:
60:55:be:8f:33:62:bc:c4:0c:b3:d0:e9:9d:43:b3:32:dd:5d:
31:9d:39:94:65:df:c0:59:82:1e:4e:ee:a9:93:10:89:8b:69:
c2:64:58:d4:c4:51:0d:3b:52:1a:a0:ee:53:c0:fd:f8:6a:bf:
0f:38:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:50 2025 by rpki-client