Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: ailXdr8SuowkUJsJXNaUMiYluouJwKRlejannFmD+j0=
Subject key identifier: 75:98:9C:AD:A2:B1:E7:5B:E7:26:73:0D:4E:BB:ED:FB:AD:9A:A9:E8
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 0198D5BC15B238D34233E7013F11854132B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 1149
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: 2DqLGBb+zxid3CEbJyKoV3W0XvkegPL2qGgbT42BM9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:15:b2:38:d3:42:33:e7:01:3f:11:85:41:32:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=75989cada2b1e75be726730d4ebbedfbad9aa9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:98:f0:51:56:08:bc:9b:a4:04:b7:f6:8a:
d6:70:15:b2:b5:95:f6:c0:c1:0d:73:16:91:dc:16:
28:2e:80:a9:a0:a4:ce:f2:ae:ae:55:1b:93:f8:12:
e7:81:23:22:c9:77:a6:49:12:e0:94:7e:ce:26:04:
7c:5d:c9:9f:c7:69:28:9f:b9:89:91:e0:4d:c2:0d:
b4:ba:c8:5d:57:11:15:2f:80:7a:47:5b:8e:a4:7a:
1f:4a:8d:26:93:63:b2:7e:d4:67:96:30:be:29:98:
70:bb:9b:ac:11:d9:07:28:89:f8:73:8b:d3:47:ea:
9f:66:ab:69:69:75:ac:f8:97:78:14:b0:c0:51:9b:
06:ba:a4:f6:3b:d9:a6:ab:29:f7:6c:59:a7:fc:13:
db:d9:4b:4a:f4:7a:83:d4:7d:8b:81:94:55:59:7b:
f0:02:b3:b5:8d:c1:61:02:8f:33:00:f9:0d:84:d4:
15:a2:cd:56:21:c9:61:60:69:56:5c:cf:8e:81:d2:
59:17:82:21:5c:9a:a5:03:94:ac:1d:ef:ab:cc:cd:
6b:f4:87:53:25:58:71:a4:c1:54:8b:f3:fb:31:f8:
4b:52:b7:5c:80:14:ee:fa:22:87:27:e5:ea:f4:de:
48:5c:59:ce:cc:08:43:8b:aa:fe:b8:ef:ad:12:74:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:98:9C:AD:A2:B1:E7:5B:E7:26:73:0D:4E:BB:ED:FB:AD:9A:A9:E8
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fa:0a:f6:5e:b4:aa:17:35:46:49:c2:85:1c:d8:15:e9:ab:
cc:40:85:43:91:8e:90:07:df:06:8e:d8:d3:e1:a3:39:32:e5:
49:72:de:60:9a:f3:fe:4d:1a:70:10:0e:68:da:88:2d:cc:f2:
be:52:89:d3:92:25:ab:d5:64:56:9b:4c:6a:8f:2c:83:9d:56:
f9:79:30:96:4f:ee:be:33:fa:71:0b:ee:bf:d6:ee:7f:40:37:
fa:89:94:26:ba:35:bf:67:56:e0:9e:d9:9f:84:5d:dc:39:33:
80:1c:6e:91:5b:ee:37:da:5f:7b:11:b0:81:b2:cf:b3:4e:ea:
60:0d:b3:79:d1:dd:23:1e:51:73:4a:32:0a:b6:c1:92:05:5a:
f4:8f:94:4d:f1:66:40:b1:b2:fa:89:25:35:0a:b0:76:f2:8f:
c9:ad:23:5c:fd:2b:0f:26:39:7e:ae:9f:bc:b5:11:1f:2d:cb:
9b:4c:6e:0c:62:cb:5b:58:d7:a1:65:39:3b:cf:ca:50:d9:83:
5b:e1:4d:12:6b:70:eb:14:89:3f:47:f3:78:94:70:a4:0e:f8:
e3:e6:33:d3:a4:fd:76:0a:32:5d:26:67:83:9a:77:34:31:30:
ec:b9:3a:76:b7:ed:8e:48:36:d5:69:45:3c:d1:ea:f8:24:72:
0d:ac:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:45 2025 by rpki-client