Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
File: rh967y8S0HaqitWli8uNyvPwvUw.mft (raw, json)
Hash identifier: t2Tsw547Be96nDeTdV6y04DcCzr4A67kCjP/b+KNqoo=
Subject key identifier: 94:3D:D4:68:4F:41:04:8E:AB:C1:DA:2E:D0:13:70:74:A4:61:B9:AD
Authority key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
Certificate issuer: /CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Certificate serial: 0198D7062C5B96C1E48F8699C2F428E3B2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
Manifest number: 1199
Signing time: Sat 23 Aug 2025 13:02:42 +0000
Manifest this update: Sat 23 Aug 2025 13:02:42 +0000
Manifest next update: Sun 24 Aug 2025 13:02:42 +0000
Files and hashes: 1: rh967y8S0HaqitWli8uNyvPwvUw.crl (hash: ON3a8PR1A7kwTuMMdtMr+kBzXY+SwswK8HIF/ZNp5ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:2c:5b:96:c1:e4:8f:86:99:c2:f4:28:e3:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Validity
Not Before: Aug 23 13:02:42 2025 GMT
Not After : Aug 24 13:02:42 2025 GMT
Subject: CN=943dd4684f41048eabc1da2ed0137074a461b9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:32:f7:1b:94:e8:08:9c:8c:73:4e:61:db:
fe:c7:19:1c:b4:48:45:cf:c5:f7:98:29:c0:2e:95:
eb:55:7d:fd:35:5c:8f:4b:8e:42:00:cf:11:c6:52:
34:17:db:33:ea:04:41:b8:47:88:a7:a4:a5:d0:32:
4f:f5:49:5f:34:a5:6c:3a:06:04:ad:ee:d0:be:0e:
f2:1a:80:f4:8f:2f:2a:fe:2d:48:f3:ba:6b:61:3a:
fb:b1:95:3d:e5:eb:ae:33:9c:82:3c:69:50:30:97:
af:40:28:ad:4b:c6:4f:02:5d:62:d6:b6:60:55:82:
c3:06:f6:0d:f6:e1:a4:4e:5b:5d:15:e2:17:99:96:
83:8d:d1:5d:68:8c:53:79:37:ed:f5:43:96:69:83:
76:53:af:40:37:cb:f2:bb:be:42:6f:e4:9d:80:fc:
80:47:4d:ee:8b:3b:84:69:3a:92:ba:12:ed:bd:32:
0b:eb:05:b6:b1:70:58:77:8e:b8:b9:ca:36:60:a9:
d4:7f:63:98:fa:55:ab:23:e0:ea:7a:de:d4:42:e6:
5c:3e:90:dc:20:61:1c:e8:16:4b:2b:9c:6c:18:6b:
25:33:e2:b0:46:a4:7c:0e:f2:6c:5d:28:0a:73:ab:
6f:0d:3d:2a:23:d8:30:6d:cf:0a:ea:7e:0d:3b:28:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:D4:68:4F:41:04:8E:AB:C1:DA:2E:D0:13:70:74:A4:61:B9:AD
X509v3 Authority Key Identifier:
keyid:AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:06:ad:fa:54:04:f9:5f:75:c0:af:94:79:6c:00:ed:f5:1f:
2f:a6:09:28:fe:cf:f6:c2:3e:95:d3:98:b4:08:e7:9d:8a:ef:
a8:6c:91:88:a6:24:5f:ee:cd:b1:68:08:b0:94:78:45:06:bc:
16:36:80:72:e7:0e:5b:45:a3:75:41:c9:5c:44:5c:c7:dd:e5:
81:f5:b3:ad:78:ad:24:ad:77:d7:61:5d:bd:71:5e:55:e2:d6:
28:6e:5d:e4:f4:81:65:c6:9e:eb:62:a9:e2:8b:0c:70:01:b4:
93:76:6b:43:36:1b:88:c2:52:20:63:20:dc:a7:4b:4c:13:27:
e2:a7:bf:11:88:c1:76:5f:e8:c4:e5:7d:fa:1b:98:1c:b5:c0:
49:30:a6:88:eb:0e:d2:2b:8a:44:d8:ca:7f:bf:7b:fd:7b:20:
d3:b7:11:b8:a8:2c:a8:79:e3:7a:bd:e3:1a:9e:ba:ad:4b:05:
f1:5b:c0:ec:f6:72:3c:df:64:93:9a:7c:95:7a:0c:bb:6d:4d:
6b:b9:57:9c:bf:c3:3f:c7:ae:26:86:41:0d:2f:c7:20:0d:2e:
01:e8:dc:1f:54:b8:93:d1:92:f7:6e:53:84:cf:43:40:c9:05:
0a:a1:d1:a3:65:b7:59:6e:77:57:49:33:a8:27:b8:c0:8a:bb:
20:df:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:32:02 2025 by rpki-client