Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File: Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier: Rvc5k1KMZm+jqYVgz+klXX1LWd1QyH+iT8gWaUvptvU=
Subject key identifier: 15:C9:3F:97:8C:58:99:C7:48:64:21:34:63:12:F9:B0:4B:00:A7:E0
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer: /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial: 0198D660209480F6B46EB28D0F2439659EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number: 0C4F
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: RLlHYUk+xxchDzZAWikhIMtCJejEYHnW6lCiCvOqY/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:20:94:80:f6:b4:6e:b2:8d:0f:24:39:65:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=15c93f978c5899c7486421346312f9b04b00a7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:56:23:c5:53:77:32:be:c5:29:d2:19:10:
e0:14:e0:77:ce:ee:07:d9:57:7a:1c:dc:77:00:a7:
9f:ac:df:43:42:d5:a8:dd:8d:f2:88:ce:8f:b5:87:
b4:86:c3:8a:ea:f3:45:30:a2:68:63:cd:6d:7f:b3:
90:5f:29:ea:38:5c:54:49:de:50:1e:73:9e:b7:d4:
83:3b:40:bc:bd:17:e4:40:ba:0c:51:8c:40:4a:f2:
95:3a:2e:07:08:e4:70:14:57:6d:02:77:dd:a7:f8:
cd:25:d3:b7:00:0e:95:ed:d8:a5:24:d2:f1:37:c8:
c7:a8:48:17:26:d8:cf:b4:00:90:41:ed:80:9f:ad:
0e:f7:b6:e3:89:ed:a0:2f:ee:37:bc:46:97:f6:42:
0f:08:07:5f:b3:62:8e:7a:38:7c:8d:a1:a2:74:ab:
24:93:ff:08:65:90:b5:86:f6:49:e1:64:e6:85:54:
c9:68:18:db:59:b2:40:aa:3b:66:2f:8b:13:1b:ea:
df:47:bb:d3:c6:e8:41:d9:7d:d5:5c:19:f8:66:9d:
1a:51:a2:3d:d1:ae:28:8c:19:eb:34:01:d5:48:a2:
0a:11:5d:85:4d:74:0b:25:b5:4d:e0:5c:74:e0:26:
76:22:ea:99:28:3e:dc:66:13:af:fc:66:0d:32:3b:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C9:3F:97:8C:58:99:C7:48:64:21:34:63:12:F9:B0:4B:00:A7:E0
X509v3 Authority Key Identifier:
keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f9:40:79:c0:d3:90:0d:72:36:50:55:1d:8f:b6:b1:26:16:
c3:ac:ae:e9:15:89:16:c3:7b:ff:3f:e4:06:7a:2e:3a:1c:93:
f9:cc:37:7b:44:1e:fa:9d:c0:f0:8d:6a:55:f3:07:9f:96:a0:
ca:82:73:cc:3b:2a:d5:7c:08:5c:44:26:6d:a6:c4:23:46:1f:
e4:42:47:9f:f8:50:18:19:b0:b4:4c:9d:aa:3c:9e:2d:84:04:
2a:ff:74:db:9e:76:24:7f:c2:53:a5:50:57:7d:02:87:59:26:
48:a6:67:49:7f:c1:d4:fc:bc:0d:f1:a7:07:f7:aa:fa:3e:47:
65:a4:64:9a:ad:49:8b:0c:33:c7:c8:a6:94:13:5d:f6:48:b3:
35:70:a9:78:23:2b:a7:07:38:49:b3:2b:c3:f8:28:44:aa:ff:
f3:b1:b2:84:99:3b:d2:a3:5f:fb:d7:44:7c:a6:4b:29:c6:16:
88:d3:13:3f:7c:9b:9f:05:d4:e0:d3:7d:b9:01:c1:de:3a:e8:
23:ff:01:27:b0:5a:f0:f8:ca:ab:6c:8e:20:28:0a:ea:a2:42:
eb:68:61:c6:91:c8:ae:d2:dc:85:db:ea:3f:02:d0:b0:f2:75:
2e:c3:f5:60:62:8e:5b:ba:4d:47:7c:f2:3b:fe:f3:5b:d7:2a:
4f:57:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:50 2025 by rpki-client