Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier: cLTc1k1aGsFAp/gecMhDkH+A6PoXEnkO4SOy6BJ7ADs=
Subject key identifier: C5:43:05:59:D2:7C:6B:54:D4:99:DE:15:69:7E:6D:57:45:D4:B7:70
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial: 0198D660BA0041D229300377C2694241228F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number: 0B2E
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: 44FvjpEg4DYi+bELVBWasVCIu9Mflo6UHd2UjNKwoUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ba:00:41:d2:29:30:03:77:c2:69:42:41:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=c5430559d27c6b54d499de15697e6d5745d4b770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:fa:81:4a:98:69:09:8f:f6:f0:ee:c9:7a:
5b:c7:e0:15:f1:9c:b1:4d:48:26:e8:8b:b6:2a:4b:
be:47:ba:a8:1a:3c:08:1f:87:25:1b:bf:e5:1e:31:
f3:df:60:64:3f:2e:c5:6d:e7:a5:0d:8b:24:6d:c8:
35:73:c8:38:71:db:ad:a1:16:de:27:a8:74:1d:b7:
51:ce:e3:85:87:58:30:01:8e:06:92:83:a4:9b:49:
9b:33:05:67:db:9c:19:24:ab:94:72:f7:ba:43:0a:
3c:72:46:56:29:98:57:a0:de:81:55:f2:2e:f1:00:
c0:d9:23:54:87:89:dd:c5:12:e4:de:30:98:9b:81:
d4:7c:51:eb:4e:7a:cc:86:f2:39:03:14:43:58:2b:
17:e9:60:c7:ae:7c:d1:a7:20:c8:e3:f0:d5:2f:d8:
77:49:52:30:c9:9d:a3:ad:df:62:09:d0:40:f7:1d:
ae:16:5e:3d:19:1b:fd:45:37:ad:4c:85:bf:c4:08:
c8:28:8f:0f:b4:43:97:e6:9e:d6:79:02:67:23:b7:
ad:e2:8a:ef:82:1d:76:83:3e:1b:ec:33:20:30:b0:
6b:7d:d7:86:32:3a:cd:ed:4a:6f:ba:9d:28:d0:e4:
9e:49:d7:5c:51:f6:e1:d2:bb:36:6d:08:a7:fd:0c:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:05:59:D2:7C:6B:54:D4:99:DE:15:69:7E:6D:57:45:D4:B7:70
X509v3 Authority Key Identifier:
keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:51:9f:b8:09:bc:d6:88:21:bf:8b:73:f8:87:33:60:ce:ec:
0d:77:f4:0a:6a:88:8a:49:7b:f5:d4:72:d2:de:f3:33:8c:af:
8e:3e:b3:d3:43:2e:10:47:35:60:70:6f:1f:6c:38:4b:d5:47:
75:e0:0c:42:53:df:b1:d7:4d:59:28:88:80:9d:03:dc:f8:3e:
78:5c:ed:34:0c:fe:19:55:85:6b:06:3e:40:89:72:ec:a0:00:
04:79:32:56:d0:29:fd:28:40:c4:b7:3e:1c:41:a4:45:bf:be:
f0:b1:d7:1f:b5:1c:9a:1a:7e:26:95:e5:01:22:b9:43:8b:17:
22:38:46:10:c9:a0:c8:11:29:f9:dd:c3:5e:be:1f:23:90:ee:
f8:16:08:a0:00:54:21:b9:42:25:1f:a7:84:f6:0f:18:a9:19:
5a:48:59:34:f5:00:11:c2:62:7d:33:ba:b9:be:5f:79:59:f4:
ab:0a:ac:3a:20:9d:8a:68:8f:aa:7b:76:14:e0:99:b7:c9:fa:
d3:d8:e1:e7:17:08:5e:a0:57:5f:78:9c:2f:1a:08:5d:66:54:
87:a0:06:5b:9e:a7:65:5c:8b:e8:d3:a4:72:1d:12:b2:6e:ba:
51:86:73:6e:19:11:65:fb:1b:79:1c:d5:81:7c:bd:9c:17:02:
bb:bb:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:41:54 2025 by rpki-client