Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier: FVhtIz2RKrJomj+GHp/8fa5tVCpjvDS7KfHucG+ijYM=
Subject key identifier: 8E:45:5B:34:A5:E4:B3:A2:98:05:7B:1A:90:4D:DA:32:D5:3B:93:E3
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial: 0198D5BC41D0ADBFBBA46C8E077696E08961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number: 13FF
Signing time: Sat 23 Aug 2025 07:02:21 +0000
Manifest this update: Sat 23 Aug 2025 07:02:21 +0000
Manifest next update: Sun 24 Aug 2025 07:02:21 +0000
Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: aCD4kKhhLTJB56tOmKFJIdLyJXDgrAYHCQikpuEw2Yc=)
2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:41:d0:ad:bf:bb:a4:6c:8e:07:76:96:e0:89:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Validity
Not Before: Aug 23 07:02:21 2025 GMT
Not After : Aug 24 07:02:21 2025 GMT
Subject: CN=8e455b34a5e4b3a298057b1a904dda32d53b93e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:2b:f2:ab:1b:99:a6:bb:d2:0d:ec:76:1a:
99:2b:67:6a:30:00:79:8b:77:f8:64:93:d9:61:a8:
53:57:1f:16:45:0b:24:b5:ae:dd:af:da:bc:8e:00:
7c:91:2e:63:0e:db:fb:a6:2c:f6:91:78:8d:57:a0:
78:1c:4b:f0:7d:10:2d:11:9e:77:2c:65:b8:53:c4:
e4:47:1f:b3:94:41:71:e1:8a:b5:d6:dd:be:e5:e5:
03:07:73:6f:6a:90:34:e5:67:d2:a2:a6:f8:04:3a:
5a:b9:84:b9:cc:a1:ef:f4:ef:f4:7f:68:00:49:be:
6a:c7:44:c8:88:07:73:69:d7:44:26:6f:44:94:98:
e9:39:5e:e7:6a:c4:8c:13:aa:29:a8:ca:e2:32:67:
42:1b:22:72:9b:1a:50:78:8f:a4:18:82:87:91:c3:
59:74:28:9a:52:22:66:c3:6a:1f:b3:3a:f3:37:e0:
ea:51:9f:e0:95:65:8c:77:01:52:d0:06:33:c4:32:
a4:44:0c:e5:e7:b7:2d:07:3b:1d:42:31:95:c2:dc:
00:40:84:02:11:af:12:ec:a1:35:27:21:28:04:f1:
79:62:8b:43:99:52:af:78:d8:85:e9:39:e4:78:52:
e4:17:10:0f:f3:bd:f4:7a:5b:a7:e5:1a:1a:d4:e3:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:45:5B:34:A5:E4:B3:A2:98:05:7B:1A:90:4D:DA:32:D5:3B:93:E3
X509v3 Authority Key Identifier:
keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e4:d8:93:fd:07:6b:96:7f:f6:3f:34:d3:29:ae:36:4a:9d:
b0:c4:7c:46:57:a1:6a:e2:21:34:fc:1a:f2:ed:ef:9d:23:ce:
64:a7:dc:c5:8f:86:1d:9d:e1:6f:0b:e2:c5:58:8a:da:ef:53:
de:6d:f8:c2:c5:ab:fb:d6:a5:2c:c9:1d:6c:2c:9c:f2:f3:9d:
49:f8:b6:7a:b8:9b:c1:68:33:43:24:c5:2e:27:cf:15:8e:10:
f6:56:c5:38:23:e4:78:8b:6b:97:4f:72:eb:04:83:9a:49:5b:
0f:7d:e2:02:13:75:21:22:74:a0:72:e8:12:42:00:9c:57:58:
ed:44:f4:37:89:e8:b0:aa:78:d6:4a:4f:92:7e:b0:89:9f:b7:
e8:5c:19:aa:da:fc:14:04:13:ab:a5:12:cd:00:3c:11:a6:ba:
3e:d5:67:54:bd:17:70:35:fe:62:36:16:f5:df:b8:56:e5:94:
c0:49:9a:d4:06:4e:cf:c8:f9:db:33:a7:61:8c:b4:0f:2b:4e:
5f:7f:27:51:5b:81:86:fa:9c:00:0d:7a:1e:50:80:75:d2:98:
7d:74:55:b7:b1:34:7e:56:3d:d5:65:7d:bc:a2:f6:cc:fc:d0:
42:0b:02:e4:e0:68:68:32:de:7e:20:2e:d5:8e:66:a9:5e:bb:
6e:91:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:43 2025 by rpki-client