Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
File: HVdIhaDItCBcPfLR_Nc0h33hBdk.mft (raw, json)
Hash identifier: rVdh8s0f/T5hlFOUC5CdeDf/r2dL5hySA+PShtgw2Yk=
Subject key identifier: 3F:FD:AA:D4:56:BD:9B:74:3A:AD:B4:5D:31:7A:3B:32:CA:A3:D4:7A
Authority key identifier: 1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
Certificate issuer: /CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Certificate serial: 0198D515C70722ED6F6015D6E7B959991B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
Manifest number: 021A
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: HVdIhaDItCBcPfLR_Nc0h33hBdk.crl (hash: 8aUUAPWOcKd+0p2CQ3oJC8iO7aaAOzb5Ibm0Q3tVKBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c7:07:22:ed:6f:60:15:d6:e7:b9:59:99:1b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=3ffdaad456bd9b743aadb45d317a3b32caa3d47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:99:41:98:b7:dc:20:38:15:6e:08:fd:74:
86:2c:55:96:ab:46:da:37:8a:ce:ba:50:27:b8:3a:
c9:66:9b:e4:93:0f:9f:0d:34:7b:44:81:87:34:dd:
3b:38:97:21:28:71:4d:58:33:5c:49:25:31:85:01:
32:b4:cd:3c:ec:13:bd:f7:f8:e9:56:cb:78:18:27:
54:bc:a5:34:8a:be:1a:0a:4e:f0:87:2e:7c:31:cc:
40:ab:ea:43:0f:82:c0:e1:31:45:f5:20:ad:7f:e2:
fd:81:ff:7b:6e:9e:34:a2:ab:35:eb:bb:4d:6a:b5:
32:d6:f9:ab:9f:f2:01:7e:90:a6:3b:1e:c0:53:30:
d9:40:8d:80:d0:4f:65:79:58:f7:a8:ac:67:fa:01:
6f:be:28:dc:6a:d1:31:ac:b0:97:55:8e:c1:64:d1:
fd:8e:47:6e:a8:ef:9c:f8:44:fc:f3:94:0c:da:bd:
97:a8:71:fa:29:d6:67:95:a1:fa:8f:ad:06:e9:d2:
11:cd:13:18:ff:08:5c:93:d6:1d:e1:89:1d:17:36:
19:41:01:54:08:e3:45:67:54:c1:29:43:43:e3:9f:
21:a7:7f:c5:a9:55:47:2c:d8:28:86:97:24:dc:fa:
d9:79:9d:66:1f:83:30:18:25:1a:b3:93:51:11:f6:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FD:AA:D4:56:BD:9B:74:3A:AD:B4:5D:31:7A:3B:32:CA:A3:D4:7A
X509v3 Authority Key Identifier:
keyid:1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4d:5b:2d:21:ec:d4:ef:60:6c:d2:ac:83:ed:c7:e1:1a:6d:
84:e2:17:2f:99:9d:a0:4b:19:81:0a:43:81:6e:97:a0:cd:a4:
c5:2c:c2:be:ed:fd:97:20:04:40:6e:51:2e:00:7f:98:8e:2c:
f3:7c:5a:5d:d7:af:db:5a:60:fa:72:1c:6b:0d:d9:d3:d7:bc:
4d:6f:9c:d1:9c:c6:2a:c2:63:01:c2:76:27:e8:df:e6:14:53:
78:ff:d6:59:d2:06:72:02:10:c8:93:f9:54:dd:80:fb:0c:8c:
cc:97:83:e6:f8:45:d3:f9:b1:77:ba:80:90:d3:47:6c:72:f3:
ce:c7:43:eb:25:e5:7b:83:04:92:16:8f:98:65:29:87:e5:37:
72:a5:ce:3f:dc:b7:95:39:b7:54:fb:58:0d:6d:d6:04:2b:a3:
01:a7:c1:23:1e:77:8e:60:e2:25:c9:e6:fc:9c:c3:51:a3:bf:
43:0f:31:a7:0b:69:c7:f4:a3:1a:70:2b:61:b1:df:a7:4d:d1:
2a:f8:a7:81:1f:41:b2:3c:e4:5f:1b:9e:da:09:09:28:dd:9d:
d2:2c:f9:a7:2f:a4:2b:70:d7:3b:76:48:b6:91:9c:aa:11:af:
7a:3b:a4:9e:98:d7:82:29:8a:e3:ad:16:50:1f:7e:3e:3c:9c:
9a:34:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:43 2025 by rpki-client