Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
File: HzkK-DPX1CaQQsJJvPSWSFcglbY.mft (raw, json)
Hash identifier: HmiGNCKM8hIVbo5QTXdkG0S7xTI62KdOLNbCh+x0taA=
Subject key identifier: 68:33:2E:A4:55:84:43:F5:10:89:FA:59:99:FB:1C:10:D1:70:E3:D9
Authority key identifier: 1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
Certificate issuer: /CN=1f390af833d7d4269042c249bcf49648572095b6
Certificate serial: 0198D4733C7423BB58ADC3BCB42D38669EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
Manifest number: 10E8
Signing time: Sat 23 Aug 2025 01:02:58 +0000
Manifest this update: Sat 23 Aug 2025 01:02:58 +0000
Manifest next update: Sun 24 Aug 2025 01:02:58 +0000
Files and hashes: 1: HzkK-DPX1CaQQsJJvPSWSFcglbY.crl (hash: ocQGJe0zYRabS6ja7cKCYTQ4cecT0AcnFbniI4HIT6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3c:74:23:bb:58:ad:c3:bc:b4:2d:38:66:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f390af833d7d4269042c249bcf49648572095b6
Validity
Not Before: Aug 23 01:02:58 2025 GMT
Not After : Aug 24 01:02:58 2025 GMT
Subject: CN=68332ea4558443f51089fa5999fb1c10d170e3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:be:53:d2:8b:2f:03:03:e9:1c:e9:1b:55:
42:11:5e:60:dd:d8:b5:10:ab:d5:98:20:11:f2:ac:
a3:1f:59:c2:c6:21:f0:52:d3:77:28:33:da:12:30:
85:df:fd:4d:72:e2:18:7d:d8:a2:90:3e:d9:86:74:
4a:a7:74:bd:28:1b:45:3d:39:c2:ef:7c:9a:32:54:
b3:93:fe:4b:83:dc:c3:96:77:70:b5:e9:0c:4b:fe:
c0:0a:7a:19:3c:9f:c7:3c:54:b8:d6:48:ad:46:d5:
71:1d:5b:1f:c2:c1:29:8d:cb:a5:91:8f:45:69:5e:
0f:2a:32:55:0a:17:42:88:60:51:64:c0:ab:42:61:
30:84:bc:80:c0:95:8a:92:b4:ce:c7:45:83:d8:eb:
10:98:b1:c4:3a:17:90:3d:50:94:7c:e6:87:75:6a:
2c:4c:eb:61:0d:f1:07:2e:e4:47:8f:63:57:d6:8d:
0b:45:8d:a4:c4:63:55:94:d6:d7:29:03:61:44:59:
28:fd:eb:03:8c:ce:ae:95:ae:c7:5c:c5:c5:e5:bf:
2b:b2:90:8f:c0:7c:01:0d:e8:c1:fe:1c:08:df:c5:
5d:2a:a3:ed:f2:41:4b:fc:35:d7:0a:3b:22:25:c0:
ff:83:b7:5d:a4:a4:25:41:ea:d4:5b:18:86:5a:5a:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:33:2E:A4:55:84:43:F5:10:89:FA:59:99:FB:1C:10:D1:70:E3:D9
X509v3 Authority Key Identifier:
keyid:1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f3:e0:34:8d:57:ea:08:c8:5b:b4:25:ea:4f:97:9d:48:56:
fc:4d:88:ac:5f:da:41:3a:99:64:0b:8f:a4:3b:09:dc:73:e4:
14:90:9c:5b:5a:3d:96:19:b6:29:d3:75:71:fc:1b:9f:fc:eb:
5e:a9:56:a8:44:8d:2e:fa:f7:a1:99:0c:cd:03:f6:b9:4f:b6:
00:09:d5:6f:38:eb:49:58:f3:12:1a:98:3f:f2:09:99:81:a2:
43:06:4f:d0:59:12:56:12:e9:7b:a7:fa:50:f3:dc:35:cc:a8:
07:a4:02:88:52:14:ee:01:d0:c3:86:45:d0:5e:2d:c0:76:45:
86:fa:1b:f5:e3:bb:98:75:4e:14:63:9c:cd:cc:22:c4:50:da:
d5:f1:e3:62:69:64:46:59:48:50:ef:0a:96:8d:30:a9:91:1e:
99:0b:6e:71:5c:89:f3:92:09:2a:60:bd:f8:5e:f7:91:90:2f:
77:c5:65:1d:af:0d:b2:4f:03:64:9f:44:1f:60:b2:4d:be:cf:
91:29:33:50:fb:03:a3:b4:fa:8c:59:35:a2:93:18:94:04:3c:
be:26:78:f4:e3:ef:36:bb:ac:ad:c8:1d:64:88:c3:fc:6b:06:
c6:86:68:4c:57:f6:00:e4:03:5a:53:64:f6:a2:ea:80:06:a5:
4d:e2:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:43 2025 by rpki-client