Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
File: hJxbptQKtOTjm3tpttLZhEqiSK8.mft (raw, json)
Hash identifier: fYPM0W0NaSEggT5SzmJAV1P4U9aVSvNPGD1py966pLU=
Subject key identifier: 92:F8:E8:48:2C:B7:16:47:51:34:60:0F:6A:36:72:80:49:16:90:C5
Authority key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
Certificate issuer: /CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Certificate serial: 0199FD33F53495DA4AAE695C22A9B52FD76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
Manifest number: 0DC2
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: hJxbptQKtOTjm3tpttLZhEqiSK8.crl (hash: 5xNFAOCUhROqc6KKJZwpN+0TdX4UB8ql5BLZmASIZE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f5:34:95:da:4a:ae:69:5c:22:a9:b5:2f:d7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=92f8e8482cb716475134600f6a367280491690c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:d0:f6:3c:fe:4b:fe:8f:ee:16:7c:21:1a:
90:36:b7:62:3f:49:3a:28:32:54:4f:c6:69:17:14:
08:19:ce:9e:9b:61:f6:d2:df:3f:81:f4:43:f4:d1:
1f:bb:dd:c5:22:54:53:a2:cc:b9:bd:ae:cb:8c:4b:
cd:aa:37:3e:99:50:a6:77:01:1a:fe:a4:5e:09:ea:
27:b3:06:41:fe:09:bf:e3:60:c9:2b:ce:b1:64:16:
c0:a7:d6:ce:23:81:c9:0d:fd:78:a8:f6:dd:d9:c9:
82:d0:dd:56:76:51:7f:ab:d4:f0:7d:e2:e6:dd:9f:
43:f4:0d:f5:e0:07:5b:b1:64:3b:55:6b:22:a0:fd:
4b:6b:ec:98:df:66:15:52:26:71:7e:03:64:62:a9:
28:1c:49:c6:98:81:e8:a4:bb:b9:3e:ee:bb:83:63:
c3:55:49:a9:6b:88:28:95:f1:2d:61:f8:b5:ed:f8:
47:19:88:74:5e:1f:74:b9:40:45:70:ca:f7:65:ef:
52:38:aa:e3:b6:35:9f:81:5f:6e:80:84:f8:d6:58:
51:fc:ca:99:ad:98:c2:49:8d:96:1a:c9:16:d3:3f:
04:2c:1a:83:8b:f8:22:01:dd:5d:35:7c:dd:a8:d2:
7c:43:e6:19:31:52:6c:29:6b:41:ba:54:76:3d:fc:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F8:E8:48:2C:B7:16:47:51:34:60:0F:6A:36:72:80:49:16:90:C5
X509v3 Authority Key Identifier:
keyid:84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:ac:fc:ff:54:10:8f:72:ca:72:c3:9c:e0:ce:6b:1f:c5:
3b:1e:36:0a:57:b8:f0:94:54:51:52:68:29:e3:e8:07:0b:ae:
13:73:a8:7f:24:5c:e8:3c:e7:39:b8:fb:eb:a4:6e:d2:93:f9:
32:10:fc:3e:9c:67:35:3b:49:cd:0a:d8:d0:34:ea:d8:eb:bf:
69:0e:1e:ac:ac:d0:6c:ce:b4:e4:54:1c:1f:24:fe:df:e6:59:
2a:dd:2b:ce:06:3d:bb:b2:15:98:87:12:18:36:c6:0f:19:55:
ab:a3:d0:c1:37:d1:89:bd:bc:ef:1e:eb:b4:03:1e:7b:3a:1b:
be:93:20:90:78:b5:44:13:2b:de:4b:74:15:07:dc:11:fa:1d:
a6:2b:df:ce:7f:32:93:45:bb:cd:a4:bd:e8:b9:cb:36:75:8c:
5b:b2:ba:08:ba:a0:85:50:ae:4e:42:50:ea:7e:98:b4:da:d1:
7c:2e:fb:ef:13:e0:20:f6:cc:4f:4a:a2:42:e2:d7:3e:f1:7d:
24:2a:3c:76:69:57:8d:e0:f1:d6:a4:22:0b:73:bb:28:6a:2e:
e4:97:82:a6:0a:02:f3:79:7a:32:43:d8:a9:fa:a6:61:72:c6:
80:37:47:3b:94:35:b1:93:97:47:24:a4:1d:94:90:68:7f:9d:
ae:e0:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:39 2025 by rpki-client