Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier: KK/XCLdpLTMbyIeQ3aKCN5YPLFVVvu6w06/DnRbTWsI=
Subject key identifier: FE:AA:2D:50:42:B8:C9:DB:7B:A0:3C:DB:75:DE:B7:10:34:25:A7:10
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial: 0198D66081D3C1BA16A7DE079C3236056070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number: 0529
Signing time: Sat 23 Aug 2025 10:01:45 +0000
Manifest this update: Sat 23 Aug 2025 10:01:45 +0000
Manifest next update: Sun 24 Aug 2025 10:01:45 +0000
Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: z3lDP/F+DuyhUUwHYelzWOnIKcidLS7MEaeskb//Meg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:81:d3:c1:ba:16:a7:de:07:9c:32:36:05:60:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Validity
Not Before: Aug 23 10:01:45 2025 GMT
Not After : Aug 24 10:01:45 2025 GMT
Subject: CN=feaa2d5042b8c9db7ba03cdb75deb7103425a710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:7a:fb:06:9e:ff:e4:0b:aa:1f:99:a8:25:
88:48:f4:a5:4e:f0:22:cf:41:05:12:4b:5f:43:43:
cf:70:6a:f6:96:63:10:80:e0:b9:9a:02:7a:07:f4:
91:64:05:2f:0f:c0:3e:73:f5:7e:f3:66:be:3f:58:
b5:23:d4:4d:3e:b7:f1:73:b5:96:36:21:f5:51:bd:
28:63:7f:dd:be:36:f5:a4:17:97:0b:b0:4d:eb:74:
58:ea:b4:fb:25:ae:5e:a0:4e:22:bf:e7:2b:a1:8e:
42:52:7a:61:80:fc:92:bf:db:bc:39:2e:33:80:92:
74:75:9d:50:cb:c7:be:87:38:0a:02:94:79:40:6c:
68:32:50:f9:f6:03:64:9c:cb:a3:58:ed:4a:7e:86:
6a:e8:0b:1b:bd:a5:cd:5b:96:f5:46:21:70:7d:26:
79:ea:ab:00:3d:db:00:5d:90:64:b5:1a:80:75:58:
17:36:a4:4f:72:ee:90:d7:08:90:0e:9c:e2:d4:9b:
d2:85:af:63:96:26:8c:9b:a5:72:00:18:d5:fc:6a:
11:a1:f7:46:09:e0:67:90:4f:e9:7a:39:21:27:15:
88:c6:1e:ce:e8:ee:21:af:12:d4:1e:e6:b9:5f:9a:
ed:7c:54:4e:0e:8a:c0:92:fd:89:93:49:11:f7:56:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:2D:50:42:B8:C9:DB:7B:A0:3C:DB:75:DE:B7:10:34:25:A7:10
X509v3 Authority Key Identifier:
keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:98:e4:7b:1f:26:12:14:2b:fd:e7:92:a9:69:4b:46:5d:
90:0c:47:50:af:6d:dd:93:c9:cb:d9:15:b1:3d:e0:59:f7:da:
dc:d9:47:92:62:64:2c:22:cf:4c:95:b1:76:dc:d6:2f:55:4e:
41:73:84:bb:bc:6c:c1:cd:85:01:88:59:2d:c8:f7:9f:a3:47:
70:15:9b:9d:ae:87:62:e2:54:16:59:2d:7a:ed:08:07:cd:d6:
68:9c:4c:73:e9:ae:15:e2:99:8b:90:93:b5:3d:ff:96:51:c8:
7c:ef:d5:4b:d0:20:6c:00:22:bb:31:0d:28:e5:60:2f:62:a9:
f4:ac:30:52:dc:22:e2:28:30:51:4d:db:8f:1d:6f:42:de:66:
da:7b:83:60:5e:e7:be:fa:59:05:e2:a1:32:34:b2:ab:9b:33:
af:b2:0c:58:ed:a6:ae:50:30:4f:88:8d:f3:b6:23:7e:5e:e8:
3b:2c:4c:6a:ab:e0:5a:3b:b4:15:8e:56:2a:b6:5e:3a:cc:b1:
12:cc:89:cd:76:23:25:71:ea:08:6d:7f:07:aa:e8:3f:22:b2:
e1:35:de:2e:d6:6d:48:03:6b:91:95:a8:5e:88:31:f4:34:6f:
c4:fe:80:d5:ce:fd:31:82:02:9a:c2:ed:c7:80:70:42:f9:e8:
c3:92:4a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:35 2025 by rpki-client