Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
File: hJxbptQKtOTjm3tpttLZhEqiSK8.mft (raw, json)
Hash identifier: HehXhvnrcoLAEFGRY/0aWcyjESQ2PiZuJEbN4rHwHPw=
Subject key identifier: FF:C2:2D:EF:35:B4:1C:35:7E:8F:11:3E:61:DB:CD:D9:07:03:20:D0
Authority key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
Certificate issuer: /CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Certificate serial: 0198D5BC2F643EBF9ACBC116C9B2F49BD181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
Manifest number: 0D29
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: hJxbptQKtOTjm3tpttLZhEqiSK8.crl (hash: 8ZU1tGW9lCLDezHA4nHqStdCBKA/HVdikIuWeyFoeUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2f:64:3e:bf:9a:cb:c1:16:c9:b2:f4:9b:d1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=ffc22def35b41c357e8f113e61dbcdd9070320d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:0f:62:67:fc:b7:75:30:66:2a:ef:a8:89:
35:6f:3f:07:5d:ec:d3:4c:0d:fa:e6:dd:2e:ee:14:
cc:2f:20:7e:ad:dc:6d:2e:cb:8d:ea:b6:0e:5b:97:
32:b5:8e:1e:d0:47:be:2c:a1:da:83:a1:a0:1f:9d:
94:ea:41:98:00:b3:fc:7d:d0:b1:8b:ad:7d:f5:33:
31:48:f9:12:fb:9b:1d:6e:42:50:43:96:08:8d:a5:
ca:43:dc:de:ad:85:f2:60:37:f4:c6:91:3f:2f:b9:
c3:7a:92:05:09:81:88:f1:fd:37:3d:bf:e6:28:08:
f7:ec:38:d2:db:34:87:4e:e0:95:2f:30:10:c8:4f:
f1:02:d3:cc:e0:da:71:6a:d8:71:b5:28:40:e9:95:
25:f0:eb:5c:04:14:11:f3:29:ce:e0:2f:e9:35:96:
2d:1d:e5:43:1f:bd:50:73:ee:6b:31:c6:33:f3:9a:
bb:37:f6:72:c8:7f:cf:6d:96:84:8f:18:fc:7e:f6:
f5:7c:fa:59:be:3d:14:83:12:93:2a:8e:45:5f:06:
0b:9a:28:d7:8c:e5:69:e5:63:0a:00:f8:6a:29:14:
01:9a:2b:ec:3e:78:89:5b:e8:3a:96:e2:46:da:94:
e2:ab:4e:fa:35:ce:6e:d3:cf:13:eb:4b:2d:14:c6:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C2:2D:EF:35:B4:1C:35:7E:8F:11:3E:61:DB:CD:D9:07:03:20:D0
X509v3 Authority Key Identifier:
keyid:84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9f:9a:ed:76:d7:65:3c:f8:77:cc:5b:63:35:90:c9:8f:c2:
3b:86:4a:df:57:ba:20:6c:9d:20:b8:ab:03:11:ff:70:8e:67:
08:b0:39:b2:5c:05:81:f7:c8:e2:90:28:20:a2:8f:03:b4:5e:
cf:6d:68:63:af:25:65:de:f4:a3:96:38:b1:19:a1:6d:4b:ef:
fc:6e:32:c5:b9:52:f1:df:64:89:09:e2:0a:db:a8:a8:61:c8:
32:6a:48:0a:c5:80:44:d5:24:20:f2:d4:2e:c2:b2:9b:4b:31:
10:f5:1c:d0:c9:c1:77:39:81:fb:08:1a:6d:a7:67:30:5f:b7:
e3:f6:38:33:98:8e:39:ab:ea:59:bd:ee:83:5a:41:85:4a:3a:
d7:fb:8a:75:18:7e:cb:18:fa:ec:f3:82:97:27:06:63:b5:bf:
57:49:7a:2c:7b:bb:f6:99:f0:10:9b:c0:34:f2:27:01:c5:2c:
b0:db:5c:4f:25:b4:0f:8b:2a:49:65:ba:05:84:e1:9c:5b:b0:
e3:fd:1b:45:e2:fb:0f:20:af:27:7f:89:6b:ee:1f:b6:a5:61:
9b:0a:e4:d2:7c:65:19:e2:e1:c9:dc:17:95:bd:58:18:11:8d:
37:d8:33:d7:a4:d8:e1:15:07:32:bd:fa:13:7a:c1:8b:b5:96:
a3:34:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:36 2025 by rpki-client