Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: Vy41CR1qUh9TAz4+N7AeSV+4KpOGrmyOs1uBChQq3Ck=
Subject key identifier: 26:6C:E8:D6:13:11:78:7F:5B:4E:45:C1:68:FA:D0:C0:6A:8C:E5:20
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 0199FDD91D6C708AA4F9C9A86227A4FC6BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 04DF
Signing time: Sun 19 Oct 2025 19:01:28 +0000
Manifest this update: Sun 19 Oct 2025 19:01:28 +0000
Manifest next update: Mon 20 Oct 2025 19:01:28 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: 65w+vOj2LZYeFVckDXn8f75w5ODx7QO/zyU9oNsXipc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1d:6c:70:8a:a4:f9:c9:a8:62:27:a4:fc:6b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Oct 19 19:01:28 2025 GMT
Not After : Oct 20 19:01:28 2025 GMT
Subject: CN=266ce8d61311787f5b4e45c168fad0c06a8ce520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:fc:c0:bf:3a:73:d8:7a:8f:73:61:db:d0:
41:f1:cc:2d:6b:42:3f:1b:dd:cc:5e:4c:20:fe:1f:
32:51:32:b0:45:f1:58:f5:ce:dd:6a:5e:84:c0:c4:
58:83:a2:52:44:ab:5a:6e:b5:e0:48:d7:9f:c3:6c:
1d:41:02:ef:15:f8:ea:fd:00:44:80:39:4a:c2:c5:
ed:a4:6c:25:ae:ce:55:6e:f5:d7:8c:84:95:17:8e:
74:2c:7f:e0:a9:f2:e3:c9:fc:79:02:fb:a7:8a:e8:
88:85:8f:07:c4:8b:6e:ef:bf:6e:0e:05:c3:61:fe:
d6:ca:e4:35:85:54:14:89:11:05:ba:41:99:3f:a1:
e4:46:45:73:f3:12:6d:67:d3:c1:38:7b:eb:35:69:
e6:88:3c:a1:80:92:3d:82:27:24:00:7e:90:7c:e5:
2d:45:90:72:cd:6f:30:15:55:2a:2b:11:12:bd:65:
f5:04:30:4c:c1:bf:fe:94:a8:91:06:6b:8d:e5:7b:
b0:d8:89:be:2e:5e:34:13:cf:7a:6e:b5:aa:1a:9f:
b9:5a:05:e2:93:21:92:94:5a:50:4f:f3:ed:e8:1d:
1b:01:15:af:93:fd:c9:5b:53:80:47:ad:c1:46:6f:
37:4e:5e:71:f1:20:83:cc:f7:21:ed:fa:7c:00:1c:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6C:E8:D6:13:11:78:7F:5B:4E:45:C1:68:FA:D0:C0:6A:8C:E5:20
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d2:7b:1b:7e:a0:12:91:88:cd:83:cf:8a:d0:a4:5a:d5:c4:
49:89:64:f0:4c:ed:76:f8:48:e4:4d:c6:44:83:1c:9e:85:94:
e9:56:3b:bf:4f:8e:5c:08:33:56:61:60:67:ec:84:74:a6:83:
09:1c:6b:01:f6:1a:2a:30:7d:e4:11:95:2d:b1:67:6e:c8:54:
79:f3:ef:0c:e2:de:94:cc:41:f2:ce:48:00:8a:63:35:c1:60:
9a:b8:36:90:51:ee:f6:af:f5:9e:1f:26:64:56:03:b5:a7:39:
96:ac:3d:f8:66:68:ab:9a:62:c3:68:d3:2c:e2:ca:a7:31:0c:
2e:7d:df:03:e0:bc:70:c2:99:2f:47:42:4f:51:52:9a:56:48:
fe:5e:be:f2:6b:98:d0:98:83:5d:89:b4:ad:a4:27:29:45:84:
c7:6b:09:d7:02:c6:c1:b7:91:6e:94:e6:05:7b:ee:51:5b:64:
a0:aa:77:bf:62:5f:b8:83:64:a6:bd:67:b0:b0:3f:cc:66:0e:
1b:99:33:2c:8f:c9:c1:08:13:61:2b:ed:3a:f6:c5:9e:b3:e3:
ed:1b:5b:1b:ca:96:2d:d3:06:2b:9d:f6:17:e4:5f:6b:de:f9:
5d:91:55:f5:9a:d9:f0:92:32:66:87:94:c8:bc:47:14:31:d1:
94:8f:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:46 2025 by rpki-client