Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File: HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier: 9lElaOUK2+lLGucTX0sYKp3mMUKoz4vOEQ4l1Cis9iE=
Subject key identifier: 73:BF:97:35:2A:EA:6E:B5:55:CD:4F:B7:9E:B2:BA:42:E3:92:3A:05
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer: /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial: 0198D47237C2D2EEFB654AA5577F6E0D3C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:01:51 +0000
Manifest this update: Sat 23 Aug 2025 01:01:51 +0000
Manifest next update: Sun 24 Aug 2025 01:01:51 +0000
Files and hashes: 1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: 6Is79mcXA0W7jyMcEbtcC5JBvjszCG+yCZBb+fw0i74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:37:c2:d2:ee:fb:65:4a:a5:57:7f:6e:0d:3c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
Validity
Not Before: Aug 23 01:01:51 2025 GMT
Not After : Aug 24 01:01:51 2025 GMT
Subject: CN=73bf97352aea6eb555cd4fb79eb2ba42e3923a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d0:b6:54:93:a8:27:79:5e:7b:71:e7:d4:32:
5d:2b:0e:7a:cc:19:93:c4:be:83:0e:d0:4c:c8:b9:
dd:87:2a:93:fb:91:29:10:dc:36:7d:66:8c:e2:6e:
03:d4:a2:45:e6:75:9b:5c:d0:aa:b7:7d:c9:b7:0b:
75:f8:99:2e:40:d3:43:92:32:04:9d:82:38:ce:36:
58:a1:91:08:33:02:3c:94:55:3d:f1:75:a1:d9:99:
04:e7:24:03:0d:93:f3:3e:72:2b:77:ef:c3:ce:88:
a3:8d:82:9f:d4:2b:78:5f:03:68:d4:33:62:f9:d5:
e5:d6:e8:ce:61:fb:9a:0a:16:90:c3:aa:f6:35:a7:
70:65:ae:59:e7:d0:7d:cf:d9:9a:ac:66:75:3b:15:
91:2f:8f:2f:81:d9:d6:04:fd:38:b1:ce:f9:98:ad:
89:a1:0d:23:ad:07:74:0b:e6:c7:ea:bb:c8:23:dc:
b6:b7:7d:8e:e9:32:72:7b:ad:24:e8:2a:1e:8d:d7:
6d:1f:d4:54:46:d8:ba:ce:aa:a3:5f:56:d8:e9:1c:
ce:36:1e:49:f9:d8:bb:68:72:ce:af:51:79:30:f2:
5a:2c:df:0e:40:56:8d:74:0a:06:fe:c0:ae:4e:db:
bc:60:82:ca:ae:91:38:de:82:b9:3a:64:df:30:3a:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:97:35:2A:EA:6E:B5:55:CD:4F:B7:9E:B2:BA:42:E3:92:3A:05
X509v3 Authority Key Identifier:
keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f8:e7:5b:b3:c8:e9:0e:27:58:e2:93:3b:38:b6:bc:89:44:
b7:8c:79:23:70:fe:4d:d1:87:12:43:75:88:f5:63:13:f6:d0:
58:81:c5:ca:7e:a7:10:e9:cf:f0:a1:97:ed:a3:52:50:eb:18:
82:c5:0c:5a:99:85:8b:c4:c7:69:34:a1:35:be:21:bd:e0:23:
ff:5e:21:0c:12:60:3a:e9:86:99:58:d3:36:1d:f4:6a:92:3a:
29:84:61:ec:64:ec:49:85:ec:3c:1d:02:dd:8a:8c:24:ae:f2:
ff:2e:04:75:a9:73:a1:2c:93:61:30:79:1b:6a:f7:af:16:31:
a3:70:a4:1e:9f:cb:7c:f9:ec:ba:d9:54:4f:1c:34:61:8a:85:
cc:d8:ef:82:68:88:e0:22:4e:24:bd:2f:b0:16:71:6f:ef:57:
94:1a:18:66:eb:ab:68:fa:b9:63:fe:4a:62:15:73:2f:00:36:
ce:f8:40:f7:83:c1:f0:fb:c8:3f:4d:1f:30:de:54:6b:9f:0e:
4f:13:c8:12:af:d8:4f:d5:79:31:c4:b5:16:9a:c8:6b:0b:0b:
fe:28:2c:87:3f:b9:c7:03:6f:51:a4:9c:ed:b6:53:e6:de:4e:
ee:ae:f2:33:89:44:2a:24:eb:39:e8:21:2a:63:98:4e:9f:d5:
a2:58:02:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcjfC0u77ZUqlV39uDTyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTUyMzkyOGQ4ZThlNTRiZTQ2Nzk3NjMzMWEwMTIxZDQy
YTAwNjcwHhcNMjUwODIzMDEwMTUxWhcNMjUwODI0MDEwMTUxWjAzMTEwLwYDVQQD
Eyg3M2JmOTczNTJhZWE2ZWI1NTVjZDRmYjc5ZWIyYmE0MmUzOTIzYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tC2VJOoJ3lee3Hn1DJdKw56zBmT
xL6DDtBMyLndhyqT+5EpENw2fWaM4m4D1KJF5nWbXNCqt33Jtwt1+JkuQNNDkjIE
nYI4zjZYoZEIMwI8lFU98XWh2ZkE5yQDDZPzPnIrd+/DzoijjYKf1Ct4XwNo1DNi
+dXl1ujOYfuaChaQw6r2NadwZa5Z59B9z9marGZ1OxWRL48vgdnWBP04sc75mK2J
oQ0jrQd0C+bH6rvII9y2t32O6TJye60k6CoejddtH9RURti6zqqjX1bY6RzONh5J
+di7aHLOr1F5MPJaLN8OQFaNdAoG/sCuTtu8YILKrpE43oK5OmTfMDoCXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO/lzUq6m61Vc1Pt56yukLjkjoFMB8GA1UdIwQY
MBaAFB8VI5KNjo5UvkZ5djMaASHUKgBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmIt
ODk5ZjlmYmViYjE5LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmItODk5ZjlmYmViYjE5
LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufjnW7PI
6Q4nWOKTOzi2vIlEt4x5I3D+TdGHEkN1iPVjE/bQWIHFyn6nEOnP8KGX7aNSUOsY
gsUMWpmFi8THaTShNb4hveAj/14hDBJgOumGmVjTNh30apI6KYRh7GTsSYXsPB0C
3YqMJK7y/y4EdalzoSyTYTB5G2r3rxYxo3CkHp/LfPnsutlUTxw0YYqFzNjvgmiI
4CJOJL0vsBZxb+9XlBoYZuuraPq5Y/5KYhVzLwA2zvhA94PB8PvIP00fMN5Ua58O
TxPIEq/YT9V5McS1FprIawsL/igshz+5xwNvUaSc7bZT5t5O7q7yM4lEKiTrOegh
KmOYTp/VolgCZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:08 2025 by rpki-client