Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
File: hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft (raw, json)
Hash identifier: 7X7pe5RMZUrHZVWaS/xVAFx+0FlHOT+mtzjmb2aroXQ=
Subject key identifier: 70:66:1B:5A:30:06:3E:60:43:39:C4:44:B3:72:41:8A:E3:6A:BA:9C
Authority key identifier: 84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
Certificate issuer: /CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Certificate serial: 0198D660408BEA37452321FAA0602897FF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
Manifest number: 092F
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl (hash: +p8kJON4ASUGNT8UAlJ9qo5KW9kJ+ddpgdbhpTXh5zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:40:8b:ea:37:45:23:21:fa:a0:60:28:97:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=70661b5a30063e604339c444b372418ae36aba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:eb:c6:62:cb:4d:15:b8:da:44:f3:5c:ac:
18:51:6d:5f:2b:bf:b8:c4:77:b2:76:d6:93:d7:7d:
2c:ac:dc:f0:42:ba:4b:64:66:a0:c3:cd:05:fd:e6:
b5:02:42:ea:a2:d8:2f:e0:8a:f5:9b:a2:f9:37:f6:
fc:e3:a8:76:cd:9f:b2:09:7e:97:30:2e:8a:64:5d:
56:9e:7b:23:8e:6a:ee:5a:63:dd:96:a7:16:63:94:
fa:dc:d5:0d:c3:fa:a2:06:16:c0:d6:82:42:38:17:
22:b3:b2:5f:bc:6a:9a:13:e8:8d:f6:41:e4:ed:5e:
45:40:bd:aa:d2:63:c9:53:21:45:86:0e:de:63:97:
69:62:8f:44:d3:84:49:9e:da:43:c6:dc:39:4d:eb:
20:8b:0b:56:fc:0d:e8:a5:12:ba:42:dd:34:ad:5f:
9a:a1:8a:ef:48:5f:e0:57:98:88:57:2c:34:13:b4:
37:a0:ac:9f:5d:29:1b:92:04:80:2b:d4:f7:02:69:
68:a9:5d:d8:da:9c:fe:20:5c:93:ec:cc:a2:df:48:
2f:0f:5e:0a:fa:8b:82:39:5e:34:22:5b:fb:7b:da:
55:28:32:ce:9d:7b:d0:76:f7:61:1e:1f:ea:40:c9:
52:e3:e0:03:27:94:40:e9:c7:ab:af:99:f0:2f:db:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:1B:5A:30:06:3E:60:43:39:C4:44:B3:72:41:8A:E3:6A:BA:9C
X509v3 Authority Key Identifier:
keyid:84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6a:f2:c2:96:79:ea:cd:7b:42:d1:90:0d:2e:ae:13:e3:46:
aa:7c:17:53:b5:56:a8:23:bb:3f:bb:5b:1d:3b:9d:74:a0:d3:
56:72:bf:9e:90:ea:d3:07:47:4a:5f:da:21:94:78:7c:38:4c:
c1:34:d0:ac:6d:e1:59:cc:73:36:91:34:9f:59:5b:b0:1c:52:
90:ea:29:a4:68:66:0f:11:69:4f:42:15:ba:39:92:7f:56:7a:
44:5e:4c:fb:9c:16:11:63:61:ac:df:fa:e7:42:32:18:2e:31:
b1:36:4c:a0:b0:3d:d6:10:d9:13:1d:fc:23:8c:da:d5:68:a8:
3e:8d:5e:4d:f8:8a:12:9c:77:89:6c:44:5e:e9:61:c9:50:7e:
d1:48:3e:0e:6f:c6:d3:a5:0c:d9:73:bf:b6:c4:96:8e:74:89:
0d:4a:3a:ac:69:cd:dd:51:02:0b:48:ee:30:9c:25:19:6c:5e:
46:57:87:90:8f:d3:4c:d8:00:88:0d:d0:f7:ab:f5:27:5c:55:
12:0b:44:1b:0d:01:4a:c7:ca:92:97:ea:3d:9a:8b:7b:bc:24:
ad:24:1e:c1:65:ad:0b:6a:b8:e5:36:52:0b:46:62:0c:b3:d8:
01:0c:94:cf:d3:3d:da:71:f4:a6:d3:37:e3:c1:0c:d6:32:1b:
1a:aa:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:45 2025 by rpki-client