Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: 6HW1g4LAWcvHggvJDK+AHsYCMiMJHuS0ir8/rSHQjT0=
Subject key identifier: 25:BE:59:9F:85:A7:39:1B:26:8A:85:75:AF:25:28:FD:30:B0:06:75
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 0198D6608B9F2945089130F6286D0CC28DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 0446
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: XhxtvUNmroFTP61TDHDc6fz6gVXdDkjVuNcNYC7dIAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8b:9f:29:45:08:91:30:f6:28:6d:0c:c2:8d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=25be599f85a7391b268a8575af2528fd30b00675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:43:47:70:da:e7:c7:3a:2f:f6:3f:dc:74:
98:18:93:39:18:44:bd:da:d2:72:39:a4:52:80:3c:
82:90:1b:a4:28:a4:53:12:71:7f:25:09:43:d2:9e:
8b:83:7e:f0:07:35:d0:f0:24:17:74:b6:c7:d2:a9:
d8:7b:57:8e:9a:77:d4:a4:df:14:b1:6f:d1:31:37:
40:1f:22:aa:dd:bc:12:02:16:e5:ae:93:fb:de:a6:
42:73:8f:f1:35:30:e8:01:b6:96:21:0b:1a:05:5c:
f3:61:74:14:c9:b0:b4:8c:07:20:ef:ff:2a:28:a0:
fd:b8:ea:b7:0b:ad:c7:02:69:ad:03:40:90:83:c6:
15:b8:6f:df:d3:d0:c6:f6:03:73:a5:4f:27:d8:91:
1d:8f:ac:69:a4:cf:07:97:63:98:08:22:cd:55:8f:
c0:59:e9:8e:93:45:9f:b9:00:d4:18:54:b0:41:e2:
6b:bc:fa:6b:51:61:27:55:6c:c5:b8:65:d5:9d:2a:
e8:86:21:2d:9e:fa:48:69:14:90:c4:b1:28:b4:49:
f8:0e:1b:8a:42:c2:96:bb:4d:d7:c4:9c:15:b9:1d:
67:4c:45:bd:fc:1a:f7:7a:dc:21:ee:21:7a:ba:eb:
20:11:bd:d7:07:62:3d:3f:62:97:35:ef:56:5b:7c:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:59:9F:85:A7:39:1B:26:8A:85:75:AF:25:28:FD:30:B0:06:75
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2a:b7:cc:33:84:0d:2f:54:67:fa:9c:1f:28:f9:08:b1:48:
86:51:8d:0e:e7:4b:7d:30:f7:08:1f:9b:6c:b5:e1:2d:7d:62:
6f:28:c1:e0:62:c5:72:9c:3b:6b:8b:78:ef:bf:74:40:ca:b5:
d5:41:4a:24:db:80:97:f9:76:6c:3a:f8:c9:f5:d4:d9:4f:5b:
bf:33:bd:61:8c:ce:f2:c8:84:6a:0f:ed:a1:5d:a9:3e:e0:a0:
c4:e0:c3:dc:f2:2b:71:8c:5d:c4:52:0b:d2:76:55:99:55:9d:
fd:3e:27:b8:3c:70:32:1c:0d:5c:de:fa:fe:2f:30:33:d3:c6:
da:40:2b:49:79:a0:11:2d:99:22:f9:ad:41:a2:92:c0:53:72:
63:54:e8:7e:22:9b:bb:8b:07:ff:45:73:c1:7d:cf:77:9f:c9:
5a:0c:db:8c:f5:ac:d8:3d:aa:3b:d6:72:79:80:1d:b7:f9:b3:
e7:3c:8a:12:d3:17:6c:e4:54:1f:6d:2b:88:13:5f:21:aa:b5:
94:c2:d4:b0:7f:bf:9c:1e:63:5c:b2:c0:b2:ce:00:b8:9c:d0:
d3:27:4f:0d:76:e3:5b:a0:32:2c:a4:cc:40:30:98:c0:0c:68:
e2:fd:37:58:52:c3:b2:20:28:9c:f3:b6:8a:53:d1:d5:aa:a9:
95:2b:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:14 2025 by rpki-client