Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json)
Hash identifier: SRmvJosoCfHblE7qFgZ8cpNabKAwVWfoIruvOUh+Vt4=
Subject key identifier: 61:5D:C8:92:36:5D:11:14:A1:AC:3C:7B:47:55:4C:BA:CA:B2:D1:4A
Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Certificate serial: 0198D4E08F2C8CDB0E3752A0C4E585DDB3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
Manifest number: 44
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: GZmspU+Opkl/l5Q0FE4Tb5KUEPNJeOh+Bypn1NAq5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8f:2c:8c:db:0e:37:52:a0:c4:e5:85:dd:b3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=615dc892365d1114a1ac3c7b47554cbacab2d14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:61:84:33:35:2e:ee:2e:32:34:8d:72:6a:
6c:95:6a:04:a6:e8:31:05:b6:2a:c9:30:6c:6e:ad:
b7:06:e0:75:a1:1b:0f:a0:06:2d:3d:71:0e:ad:b0:
a0:93:7c:37:e6:c4:24:d5:de:d4:96:19:c8:eb:35:
1d:03:ef:37:47:35:91:5a:4f:8b:b9:c5:4d:44:aa:
7a:f5:dc:03:2a:5c:79:0a:b9:a6:fe:6e:02:a2:04:
e6:6a:a2:fc:bc:90:dc:fd:1e:00:64:8d:76:f0:b0:
8d:ff:4d:87:2a:30:6e:83:d1:4f:fd:c0:8b:4b:c6:
8c:73:32:3e:95:2c:d8:8c:c3:99:3f:1f:d9:20:ce:
70:dd:5d:7c:4e:4a:9f:b9:c5:6e:4f:de:7a:95:0c:
ff:40:01:cf:2f:9a:10:ef:63:f1:bf:69:23:8b:71:
24:f9:23:97:c5:2a:24:0c:e4:15:4c:2e:40:a9:ef:
d2:74:e9:4c:1f:a0:85:49:6f:81:67:7a:be:53:2e:
0a:6c:9e:0a:da:35:dc:fe:37:03:ad:0e:05:57:db:
62:2c:8b:5b:9a:70:5a:40:36:33:fb:b9:cb:3c:d8:
8f:40:c6:90:ed:f7:04:ef:38:eb:96:c2:1c:c8:9b:
83:57:35:d2:07:05:e1:77:15:04:00:05:eb:61:51:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:C8:92:36:5D:11:14:A1:AC:3C:7B:47:55:4C:BA:CA:B2:D1:4A
X509v3 Authority Key Identifier:
keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fe:b7:14:9b:68:44:92:7d:c7:38:f3:d7:3b:ba:e7:2b:e1:
f1:e6:bd:0e:a5:9b:d2:07:af:bf:92:3d:38:c9:49:f2:6e:ae:
d2:70:fe:08:ac:e8:c0:ec:16:19:d6:3c:23:89:34:13:96:fe:
c9:f3:10:bc:96:64:9c:a1:a7:69:7b:f7:83:4d:12:6c:6b:62:
ac:43:2e:7f:51:bf:38:9b:fc:51:58:a4:34:0d:0d:cc:03:cf:
4e:bd:66:30:e6:ae:23:2e:6b:7d:26:a4:10:fe:03:ae:9c:6a:
36:32:e7:ef:96:be:2f:7f:99:63:56:37:ac:ef:14:d9:34:61:
58:10:2c:21:14:ed:34:6a:6a:ac:30:9c:bd:de:1e:d2:80:dd:
1d:a3:4e:56:97:b5:d0:de:72:3d:f1:78:40:d2:e9:a2:0a:b4:
22:d5:3b:84:a7:fb:fb:76:c1:e1:77:16:98:44:36:98:eb:e9:
20:50:5b:c7:57:14:40:f6:f9:e5:6d:f1:20:45:0f:76:57:c7:
d0:e4:fb:fd:a6:12:3d:a3:96:f8:0b:b3:01:f7:6a:71:33:f2:
89:27:2e:98:82:7d:49:8a:f4:49:48:49:9e:a0:5b:c1:6a:85:
19:69:47:67:03:60:1b:be:24:87:4e:83:8a:b2:5e:5c:2b:bb:
14:c7:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:02 2025 by rpki-client