Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
File: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json)
Hash identifier: qoxmWAoExqayvmjTAydKGJhOYijhkcy2mBEPhxMDJc4=
Subject key identifier: 4A:C5:7F:05:E8:8F:81:C1:E3:28:5B:BA:C3:79:CB:26:37:4E:F1:6C
Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
Certificate issuer: /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Certificate serial: 0198D5BC24B0BAA9D0050448CFACA3015399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
Manifest number: 03B8
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: 3igIlRptHN6OmcFXVqVD7ADsa0ytwDlrYLBMMZ42NxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:24:b0:ba:a9:d0:05:04:48:cf:ac:a3:01:53:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=4ac57f05e88f81c1e3285bbac379cb26374ef16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:36:92:aa:b4:a7:af:9d:a1:cc:18:21:9a:
31:74:41:23:64:59:fc:db:6e:da:64:a3:63:ad:79:
e0:45:30:84:10:dd:7b:1c:87:e3:4d:1d:b1:34:08:
fc:3b:56:78:a8:c6:6a:58:f7:41:90:9a:05:4d:15:
9a:57:9c:e1:0d:5e:61:a3:ec:29:ab:e4:02:d2:33:
be:b5:55:53:1f:3c:08:f9:d9:bb:d9:fe:3e:95:ce:
48:bb:8f:8c:83:8c:12:d8:bf:1f:ea:b5:e7:c5:8e:
65:4a:15:4a:99:8b:57:a7:e4:09:41:47:21:8e:03:
14:2a:e0:86:18:35:c2:b5:40:57:45:84:b6:3f:3d:
1a:35:7b:d9:6c:55:07:1f:69:c0:21:63:15:d8:fc:
2c:60:f9:45:79:52:1a:01:3b:6f:be:2d:f1:2d:3d:
86:72:81:e3:81:0b:8e:19:a8:23:a0:ec:fe:fd:fa:
38:9b:b9:11:3f:89:4f:0f:c0:01:07:32:7a:f7:ed:
28:85:59:74:32:82:0a:49:d0:ce:0b:79:c9:3c:49:
03:45:38:2a:2d:4c:a3:13:a7:3f:89:d9:a2:eb:d0:
57:98:65:7f:ab:4c:d8:37:c6:ea:78:a7:6a:bb:49:
f9:78:99:35:fc:89:15:70:5c:d3:fd:03:25:f6:cf:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:7F:05:E8:8F:81:C1:E3:28:5B:BA:C3:79:CB:26:37:4E:F1:6C
X509v3 Authority Key Identifier:
keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:21:08:4e:72:9b:f1:3d:1a:da:b9:6a:91:8b:28:a0:2c:
a6:92:a7:2a:6a:0e:d7:17:b6:af:98:e1:b9:39:63:47:8f:87:
62:bb:a8:e7:2a:83:ab:f6:22:eb:6c:9b:6f:b6:21:d5:e9:4f:
0b:4a:7b:45:f5:16:dd:81:bc:9b:69:42:ee:a4:e2:86:96:eb:
d6:93:bc:eb:50:14:00:5c:64:9f:d5:98:db:64:9c:0f:b0:40:
b7:ca:3d:ef:36:a9:f4:08:e6:79:fa:3b:fa:60:27:be:ad:90:
af:90:bf:f6:37:cc:bd:71:fa:04:4c:cb:5a:11:62:5d:c8:04:
19:15:d3:35:57:fe:20:ff:da:4f:64:76:14:1e:9c:ac:39:6b:
70:80:f0:20:95:e5:50:87:a9:4c:c8:5a:4f:db:88:ec:bb:92:
30:8a:42:09:96:9d:57:35:41:27:3d:fb:75:f7:a9:ca:07:ad:
3b:10:64:87:08:00:73:4c:2c:9b:6b:cf:59:db:2a:6e:b4:d0:
ba:6f:8d:fd:0a:79:56:b8:37:65:53:9c:28:b9:60:0e:23:75:
ba:bf:65:05:97:26:b0:5d:7c:b5:3f:3a:02:33:c8:6b:af:f9:
06:89:79:24:c9:14:b2:1b:59:d5:d9:50:dc:31:08:3a:ce:ab:
e5:0f:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:37 2025 by rpki-client