Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
File: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft (raw, json)
Hash identifier: oHBAeLJ5C3ljE/yuYUac/A8fu+zGfquoMyVRILYNx/Q=
Subject key identifier: 18:32:D1:7C:8F:A8:DE:CE:1C:9A:E0:DE:0C:19:8D:08:0D:B9:9A:95
Authority key identifier: 1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26
Certificate issuer: /CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
Certificate serial: 0199FBEBCDDBA704EEB097EA2C33FDC86766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl (hash: LXG7jVSBozMKC6jE1NR6zrgfdTtCtoATJamz0nvNrYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cd:db:a7:04:ee:b0:97:ea:2c:33:fd:c8:67:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=1832d17c8fa8dece1c9ae0de0c198d080db99a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:9a:0c:50:27:d3:24:51:8b:fc:c3:e6:f4:
54:30:20:da:9f:4e:2e:a8:01:30:4c:b2:40:e5:70:
7b:0b:ee:3d:f8:8d:40:f9:1d:07:1c:9a:9e:4c:8c:
5f:f6:98:83:b0:ed:18:c8:dc:c9:03:88:3d:53:5c:
e5:77:cd:30:8e:0e:9e:21:b7:cf:21:f3:87:6d:20:
2c:6c:21:f8:db:8e:d8:16:8d:1e:e3:c4:26:0a:bc:
b1:df:da:98:a3:b7:80:9b:97:9b:d7:97:f3:e7:2b:
eb:2b:95:76:f2:21:b3:7a:74:0b:2e:45:f2:c0:98:
03:2a:c9:92:32:50:42:aa:45:8a:ee:e7:31:0a:c0:
7b:51:7c:02:34:3e:a9:40:b3:a4:be:43:ce:32:c4:
21:b7:6e:80:bb:e9:17:df:78:8e:ae:46:73:dc:9c:
cb:6e:36:98:bf:09:b1:17:f0:96:37:dd:58:ae:b4:
c7:04:3f:42:9c:1f:d9:59:84:9f:d1:5f:70:5c:80:
13:ad:f0:77:38:4a:fa:f3:18:d1:ab:ad:b1:3d:23:
36:16:9a:85:90:2f:ce:ea:c6:d4:35:fa:56:b4:02:
13:85:94:fe:3e:2c:40:ec:0d:d2:bd:60:32:79:de:
f5:62:d1:0d:3b:41:01:2a:98:17:69:7c:75:75:68:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:32:D1:7C:8F:A8:DE:CE:1C:9A:E0:DE:0C:19:8D:08:0D:B9:9A:95
X509v3 Authority Key Identifier:
keyid:1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e9:60:af:8e:a3:9d:03:3d:af:cc:f9:6c:9a:48:9c:1d:ac:
01:eb:a9:a1:a1:61:a8:71:02:3d:f2:c9:30:e4:96:df:4c:8b:
13:b0:4e:bf:4c:3d:77:c4:75:4b:42:ac:43:81:3d:45:80:57:
fa:74:80:f9:ad:15:c5:65:87:8e:3d:d1:46:bd:76:bc:6a:dd:
a0:2f:c6:0a:c5:ed:f1:40:46:b7:f0:69:ee:4d:73:ba:bf:99:
b7:ea:3b:1e:fa:0f:30:4b:14:60:d0:9c:7a:ae:ba:9b:09:03:
3d:55:4b:8e:c1:b8:91:bc:ab:6a:f5:1d:f0:dc:f8:68:c9:e0:
ef:13:67:43:9c:7a:2f:fb:7c:6f:d4:d9:56:a0:c9:06:88:36:
fd:3f:2a:d5:3f:f8:e8:be:bf:f0:a6:ea:ca:ed:8e:1c:31:bd:
18:47:d9:62:77:fa:8c:cd:a1:2b:c3:3c:2f:09:d2:e3:f2:00:
be:25:a8:51:41:a8:7f:37:3c:62:46:21:15:ef:30:f3:10:56:
3b:26:97:53:c2:41:25:ad:83:c9:b5:07:98:d3:98:17:ba:b0:
57:5b:02:5d:fc:90:4e:e7:0f:65:a4:ec:a5:90:12:81:94:c5:
f7:28:5e:bc:e4:50:23:e1:83:00:2a:61:b0:34:0b:44:ba:3e:
3d:fa:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:11 2025 by rpki-client